$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json) Hash identifier: C6uDuwqP99yB6XSRQP6h+BfzUoOC63BA7nRyM6jHSXI= Subject key identifier: 53:18:65:C9:4C:33:E9:6B:D5:98:42:99:B2:7D:C0:7D:22:8C:9E:14 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CA3F4329E493B41285860578 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 3360 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:43:29:e4:93:b4:12:85:86:05:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=d0511628-381b-479d-9e1d-09d26b76b0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:58:e8:35:24:36:2d:76:81:ba:24:9b:fb: ab:ba:99:3b:32:9a:20:e7:28:5f:8c:f8:17:e3:63: 72:97:29:6d:9c:54:1c:0f:b5:c8:49:ba:fc:d0:c0: 11:ea:9d:a3:49:0f:85:46:0e:b4:49:06:50:cc:08: 95:e0:5c:5d:d6:25:4e:83:85:af:5a:33:86:70:81: 27:86:28:1a:5b:86:3c:de:95:e1:3b:d4:34:b6:a2: 94:47:0d:a7:4f:59:79:36:5a:35:9d:80:29:bf:52: ff:47:9d:9d:5e:fc:35:61:15:67:34:03:11:30:f7: f8:c9:4e:ac:50:d0:8d:b5:98:fa:02:bc:5e:1e:b0: 50:3f:0a:b8:4e:04:69:43:18:0b:33:25:d0:ee:9d: 2e:dd:3c:1b:8d:63:d9:9b:e9:3d:e1:31:ba:a0:48: a1:bb:0e:81:73:79:00:34:86:65:d8:6e:a7:f7:05: a3:b4:6b:d4:f4:f6:e5:86:11:fa:9d:07:4a:b5:ed: af:76:81:79:db:32:5a:cb:8f:81:57:f9:5e:90:01: 23:6c:f2:a9:e0:ed:fe:73:f1:bb:cf:47:a4:18:99: 7f:57:e1:8a:41:42:79:be:20:2a:fa:3e:af:b7:9c: 5b:70:ff:d7:cf:0b:5e:fa:09:1c:ff:1d:af:3f:cb: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:18:65:C9:4C:33:E9:6B:D5:98:42:99:B2:7D:C0:7D:22:8C:9E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:de:28:53:0f:f0:ee:b9:28:73:31:12:84:3b:c1:d3:f8:2b: 96:8a:f7:4f:1c:ed:2f:f0:dd:b2:9f:8c:63:5f:8a:0c:a1:64: 08:74:4a:a7:95:82:53:3e:d9:6f:d4:6b:5f:3b:52:0c:9f:51: cf:1d:45:30:5c:56:26:ed:e9:fb:47:8d:83:dd:2f:6f:8e:da: 23:4a:12:54:4d:43:78:ff:ca:69:68:19:96:60:94:a2:ed:d0: 82:87:25:69:ec:6d:8a:eb:2e:c2:b3:d4:ed:f9:4e:dc:f3:ca: 4f:51:39:f5:22:e6:a8:34:36:cf:4a:62:58:ea:bc:0c:c4:0e: 4b:7e:f7:70:9f:e9:ef:d9:12:cc:7e:6d:be:09:66:e8:43:b2: 77:25:c9:0b:c5:4b:d3:66:cf:60:b2:bc:5d:a3:59:fb:f1:9d: 0b:6e:a2:1c:94:88:f8:6e:6c:a3:14:28:b0:e4:6a:c7:96:2d: 6f:bc:3b:f7:81:6d:72:69:62:17:a9:aa:d6:1e:d5:92:cd:21: 68:cd:9c:fa:3e:b4:28:34:bc:b6:e1:fa:d0:f6:55:64:59:8d: 32:bb:57:f7:c8:c6:cb:25:5b:34:50:37:d4:89:ce:03:29:60: 10:b9:b2:91:1b:43:b6:94:96:46:d6:44:bc:db:e8:29:d8:6c: 24:16:8b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP0Mp5JO0EoWGBXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDA1MTE2MjgtMzgxYi00NzlkLTllMWQtMDlkMjZiNzZiMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPpY6DUkNi12gbokm/urupk7Mpog5yhfjPgX 42NylyltnFQcD7XISbr80MAR6p2jSQ+FRg60SQZQzAiV4Fxd1iVOg4WvWjOGcIEn higaW4Y83pXhO9Q0tqKURw2nT1l5Nlo1nYApv1L/R52dXvw1YRVnNAMRMPf4yU6s UNCNtZj6ArxeHrBQPwq4TgRpQxgLMyXQ7p0u3TwbjWPZm+k94TG6oEihuw6Bc3kA NIZl2G6n9wWjtGvU9PblhhH6nQdKte2vdoF52zJay4+BV/lekAEjbPKp4O3+c/G7 z0ekGJl/V+GKQUJ5viAq+j6vt5xbcP/Xzwte+gkc/x2vP8sg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMYZclMM+lr1ZhCmbJ9wH0ijJ4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1MTA0MjktZDk1OC0z YTc4LTk5MGEtZjgwMjY0ZDkyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPeKFMP8O65KHMxEoQ7wdP4K5aK908c7S/w3bKfjGNfigyhZAh0SqeV glM+2W/Ua187UgyfUc8dRTBcVibt6ftHjYPdL2+O2iNKElRNQ3j/ymloGZZglKLt 0IKHJWnsbYrrLsKz1O35Ttzzyk9ROfUi5qg0Ns9KYljqvAzEDkt+93Cf6e/ZEsx+ bb4JZuhDsnclyQvFS9Nmz2CyvF2jWfvxnQtuohyUiPhubKMUKLDkaseWLW+8O/eB bXJpYhepqtYe1ZLNIWjNnPo+tCg0vLbh+tD2VWRZjTK7V/fIxsslWzRQN9SJzgMp YBC5spEbQ7aUlkbWRLzb6CnYbCQWi5U= -----END CERTIFICATE-----Generated at Mon Nov 25 03:34:10 2024 by rpki-client on console-fra.rpki-client.org