$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa File: 323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa (raw, json) Hash identifier: BjOE2W6lefrxJZMpjWx4LjDZGMaQuA9RX0TmS9V70pc= Subject key identifier: 4C:4F:B2:F9:26:15:0B:3F:7B:54:4F:A6:64:A9:9A:20:0C:1A:C3:0F Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F432858478E1BC3D9E504B09B32693400 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 7018 IP address blocks: 207.170.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:c3:d9:e5:04:b0:9b:32:69:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=c17d66e4-3cca-43e2-aa89-cad7e671a0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:b4:1e:47:cd:c7:36:1f:f5:2d:4f:17:dd: 2a:34:b0:d6:6e:ae:86:6c:b7:96:81:09:10:56:19: ed:01:9d:1b:34:6c:4d:b3:bd:c6:b0:3b:91:16:bf: 1a:de:5e:81:34:27:95:da:74:bc:9d:e9:2d:41:94: e8:81:95:46:57:03:94:9c:e8:43:d1:ba:52:00:a8: a2:d6:cb:dc:70:12:30:56:f2:4f:32:ea:08:d0:29: b9:2a:97:ea:9d:11:70:6e:e4:70:a9:89:f9:c0:5e: 6d:2e:bd:dd:71:de:a1:e0:d3:92:4d:c1:35:1d:76: 41:ea:60:08:f6:76:23:ba:70:53:56:04:a7:39:d2: 78:80:03:e3:23:39:0e:21:55:a0:da:cd:66:62:f4: 23:d4:d7:27:87:9a:30:95:88:9f:17:ba:7a:68:55: 90:62:62:c0:01:67:3c:8f:1c:c7:e6:e4:77:3c:fa: 57:89:9f:d0:fe:05:f3:2c:72:68:2e:61:1f:95:fa: 61:c5:0e:dc:08:db:63:2b:fd:c3:0c:18:8f:e1:2d: be:33:0c:f9:26:6f:06:1e:82:51:20:fa:a7:af:fa: 0e:5f:9e:4a:70:db:cc:49:f1:a5:0d:1f:fe:52:21: 30:b7:e8:33:4f:b2:0a:c3:52:a8:50:4f:4a:06:67: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4F:B2:F9:26:15:0B:3F:7B:54:4F:A6:64:A9:9A:20:0C:1A:C3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:11:4f:7d:b5:8f:7d:9e:0a:37:6c:ce:92:3b:4b:01:f5:af: 9a:cc:30:32:48:58:3d:d7:ee:9e:23:40:c9:d3:75:14:02:9b: b6:da:72:5c:e7:db:7f:42:7b:10:87:3c:64:05:85:63:23:5c: 46:1b:f9:56:8f:59:7c:c3:42:97:4e:2d:db:c0:6e:6d:7b:85: 98:3d:ce:c9:47:8a:c8:4e:90:4c:22:0c:3d:aa:28:f4:69:d1: 7a:8f:54:c0:3b:44:3d:b3:e1:a1:dc:26:2f:27:d3:c9:67:b1: 6c:40:cb:1b:11:11:42:95:d6:39:0f:09:0d:8d:04:0f:27:a3: 4d:eb:e6:f0:60:2b:43:ba:46:20:31:d3:7e:a8:cb:a2:9f:67: ec:cf:2f:cc:43:7e:a7:fa:a9:34:07:72:55:c2:8e:b8:6e:e7: d6:79:47:0d:f8:0c:8e:da:d6:5b:c4:27:4e:71:d2:30:c5:f4: 1b:c8:b2:7a:c2:af:30:70:6b:cb:c4:31:04:52:88:8e:e6:e9: 6e:f7:38:32:13:e7:e4:05:4a:0c:8f:18:7a:8a:88:29:3c:14: 83:2e:94:31:6a:f4:74:19:51:61:71:ea:99:f8:c0:12:9a:e7: 3d:6a:b6:9a:6a:30:61:3f:49:df:4b:c6:d5:40:e0:a8:80:b6: f2:dd:16:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8PZ5QSwmzJpNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk YzE3ZDY2ZTQtM2NjYS00M2UyLWFhODktY2FkN2U2NzFhMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH60HkfNxzYf9S1PF90qNLDWbq6GbLeWgQkQ VhntAZ0bNGxNs73GsDuRFr8a3l6BNCeV2nS8nektQZTogZVGVwOUnOhD0bpSAKii 1svccBIwVvJPMuoI0Cm5KpfqnRFwbuRwqYn5wF5tLr3dcd6h4NOSTcE1HXZB6mAI 9nYjunBTVgSnOdJ4gAPjIzkOIVWg2s1mYvQj1Ncnh5owlYifF7p6aFWQYmLAAWc8 jxzH5uR3PPpXiZ/Q/gXzLHJoLmEflfphxQ7cCNtjK/3DDBiP4S2+Mwz5Jm8GHoJR IPqnr/oOX55KcNvMSfGlDR/+UiEwt+gzT7IKw1KoUE9KBmcUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExPsvkmFQs/e1RPpmSpmiAMGsMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvMzIzZTMxZjQtYmNjYS0z OGM3LWEyZjUtYWE3M2MwYjcwOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsRT321j32eCjdszpI7SwH1r5rMMDJIWD3X7p4jQMnTdRQCm7baclzn 239CexCHPGQFhWMjXEYb+VaPWXzDQpdOLdvAbm17hZg9zslHishOkEwiDD2qKPRp 0XqPVMA7RD2z4aHcJi8n08lnsWxAyxsREUKV1jkPCQ2NBA8no03r5vBgK0O6RiAx 036oy6KfZ+zPL8xDfqf6qTQHclXCjrhu59Z5Rw34DI7a1lvEJ05x0jDF9BvIsnrC rzBwa8vEMQRSiI7m6W73ODIT5+QFSgyPGHqKiCk8FIMulDFq9HQZUWFx6pn4wBKa 5z1qtppqMGE/Sd9LxtVA4KiAtvLdFjk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org