$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa File: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json) Hash identifier: f++R1lnYnIB50izBfgXIiMEXUDq53Rq4H5r/PsQT2b4= Subject key identifier: 52:2E:24:A2:FA:A5:F0:CE:23:26:92:24:E3:3A:2C:78:55:5B:FF:E4 Certificate issuer: /CN=397724ba-b516-4bac-893a-fcaae9e60f35 Certificate serial: 010D0C9F4328584765A0EE3002FE6A750BE4E6E0 Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 11686 IP address blocks: 96.4.0.0/15 maxlen: 32 207.191.176.0/20 maxlen: 32 2610:128::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:ee:30:02:fe:6a:75:0b:e4:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=95153f8c-eeea-4015-9c39-8106bfb156cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:89:27:93:05:58:b5:c3:6c:a2:1b:44:21: 16:51:b8:2c:26:aa:a6:65:7c:3e:a4:e4:77:b1:0b: 61:ed:00:12:17:b9:04:8c:59:ed:20:69:66:0d:c8: d3:c9:e8:ea:d0:a5:4c:67:5c:1c:cb:a8:48:26:b4: a7:a5:95:78:ae:6e:18:53:00:29:ac:83:1c:97:88: 84:a7:de:99:15:9a:f8:01:ad:e3:cd:7e:1b:47:e4: 43:8a:f1:d2:fd:39:e7:c6:fc:46:8c:9d:b3:1a:e4: 59:a5:e0:9d:06:2d:52:46:33:30:fb:fd:5a:73:d5: 3b:6e:fa:d5:38:c1:a9:a2:2d:2b:fa:74:44:a1:31: 9e:df:c3:ef:5d:e8:8f:89:e9:32:48:09:3e:d8:d0: 86:5c:2c:30:56:db:06:84:1a:31:64:ea:3b:e0:39: d7:41:38:7b:f3:84:df:94:78:77:79:d5:d6:4a:19: 72:3d:83:92:22:10:34:69:d8:07:e3:10:3e:dc:c3: 63:93:03:99:65:f9:cd:39:4f:21:c6:15:bb:98:48: 5f:02:4f:32:da:f7:cc:e4:ef:ed:5e:ca:17:fb:a9: 26:3e:6f:3a:3d:b4:27:75:11:40:3b:fa:2a:71:0d: e7:3d:7d:79:26:64:91:75:f7:ae:27:0c:8e:1b:dd: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:24:A2:FA:A5:F0:CE:23:26:92:24:E3:3A:2C:78:55:5B:FF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl X509v3 Authority Key Identifier: keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer sbgp-ipAddrBlock: critical IPv4: 96.4.0.0/15 207.191.176.0/20 IPv6: 2610:128::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0b:83:2a:87:de:81:cd:45:6d:e5:74:9b:93:57:0d:b0:8b: 8b:8b:26:bc:bf:2c:72:ff:d9:81:ab:46:21:1f:f4:0c:86:fc: 9b:46:67:b8:3b:47:5d:cc:13:ce:34:33:61:ce:ec:4a:0c:c3: 01:a7:df:6f:fd:35:7b:76:70:e5:81:7b:0f:a5:e4:af:97:4e: 95:ec:e7:4c:e1:12:af:1e:bb:53:87:6a:b4:96:b4:7c:8f:fd: 65:72:71:58:06:29:fa:60:f4:5f:73:b4:c4:91:ca:25:11:74: 15:17:36:03:30:5c:eb:3c:9a:a7:3d:05:32:06:d2:00:cc:f6: 54:ad:e0:b9:e0:5c:7c:b2:8c:26:59:56:7e:d0:e2:f9:a9:b6: 80:ce:1a:89:9d:9f:18:d2:e5:a6:b6:5b:25:ff:d2:7a:8f:cb: 65:54:64:f2:fd:53:18:f5:61:3c:e6:81:66:19:57:7e:62:db: d1:fb:dd:a6:58:5f:66:31:93:eb:aa:bc:90:cc:de:43:f0:d8: 73:6a:4a:8a:71:d6:26:0c:4b:98:50:7c:34:42:bd:e4:4e:ff: 11:30:d6:79:37:c7:76:37:4c:25:6a:ad:54:e2:65:97:c5:01: aa:34:74:82:e6:6f:1b:3a:be:b4:e0:8e:1a:f7:d6:f6:0d:c6: 25:03:f6:58 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEdloO4wAv5qdQvk5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYw ZjM1MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk OTUxNTNmOGMtZWVlYS00MDE1LTljMzktODEwNmJmYjE1NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOmJJ5MFWLXDbKIbRCEWUbgsJqqmZXw+pOR3 sQth7QASF7kEjFntIGlmDcjTyejq0KVMZ1wcy6hIJrSnpZV4rm4YUwAprIMcl4iE p96ZFZr4Aa3jzX4bR+RDivHS/TnnxvxGjJ2zGuRZpeCdBi1SRjMw+/1ac9U7bvrV OMGpoi0r+nREoTGe38PvXeiPiekySAk+2NCGXCwwVtsGhBoxZOo74DnXQTh784Tf lHh3edXWShlyPYOSIhA0adgH4xA+3MNjkwOZZfnNOU8hxhW7mEhfAk8y2vfM5O/t XsoX+6kmPm86PbQndRFAO/oqcQ3nPX15JmSRdfeuJwyOG93JXwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFFIuJKL6pfDOIyaSJOM6LHhVW//kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3 MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMmY0ZDY4YTItMDJlZS0z Yjc4LTk3YmQtZjhjZGJkMGY2MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk3NzI0YmEtYjUxNi00YmFjLTg5 M2EtZmNhYWU5ZTYwZjM1LzM5NzcyNGJhLWI1MTYtNGJhYy04OTNhLWZjYWFlOWU2 MGYzNS5jcmwwHwYDVR0jBBgwFoAUHUJ3xTGpN8znBa3PKztrP7fqLJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2Fh ZTllNjBmMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMBYAQDBATP v7AwDQQCAAIwBwMFACYQASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARAuDKofegc1FbeV0m5NXDbCLi4sm vL8scv/ZgatGIR/0DIb8m0ZnuDtHXcwTzjQzYc7sSgzDAaffb/01e3Zw5YF7D6Xk r5dOleznTOESrx67U4dqtJa0fI/9ZXJxWAYp+mD0X3O0xJHKJRF0FRc2AzBc6zya pz0FMgbSAMz2VK3gueBcfLKMJllWftDi+am2gM4aiZ2fGNLlprZbJf/Seo/LZVRk 8v1TGPVhPOaBZhlXfmLb0fvdplhfZjGT66q8kMzeQ/DYc2pKinHWJgxLmFB8NEK9 5E7/ETDWeTfHdjdMJWqtVOJll8UBqjR0guZvGzq+tOCOGvfW9g3GJQP2WA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:28 2024 by rpki-client on console-ams.rpki-client.org