$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa File: 8b3890fd-1aa0-3cae-827e-1384e95466a3.roa (raw, json) Hash identifier: +fIjCFQLcTYjEHcf0dVx2i8G64v2WOGZWcfr/DzXILM= Subject key identifier: 01:57:61:1E:63:CF:04:41:8E:A9:E0:1F:D5:3E:1D:FC:03:97:C7:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858478721371FAD28DE26945DB740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 203 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:37:1f:ad:28:de:26:94:5d:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=42a71b5e-1862-4b2f-842c-8504bc2b8303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:d8:a8:6d:45:70:9c:48:64:01:67:1e:5e: 75:6e:a1:0a:4d:73:1b:58:6f:5f:82:83:4c:fe:49: 00:14:58:01:7d:55:6a:18:17:59:69:2a:f3:3e:d0: 8a:e5:95:b4:5e:ba:5f:fe:e0:35:75:b8:05:c8:f6: e1:49:a2:f0:ff:84:bd:11:52:cb:fd:66:f8:5e:85: e6:ad:b2:cb:79:c0:30:88:e6:7f:17:eb:1d:6f:04: e8:a5:79:c3:03:1a:85:46:02:29:1c:0b:39:68:9f: e0:8f:32:28:6f:3a:26:fe:0f:ea:88:ca:60:f3:36: 90:20:82:d1:e4:a9:2c:24:88:5e:21:96:0f:6d:63: e0:00:f6:a3:a8:5f:a5:c9:45:ab:b3:52:c1:a9:1a: ae:59:ce:99:21:9a:c3:20:bc:3d:c0:7b:99:53:fb: a1:2a:11:95:7d:4e:ec:0c:bc:c2:50:c6:4a:04:65: 94:45:38:2f:78:8f:fd:c7:a0:66:ca:0a:e5:14:74: c4:f1:60:3d:cf:04:2e:b4:bf:d5:55:46:f8:11:15: a4:96:c1:4b:54:e1:87:e0:21:c7:0d:b6:19:20:9e: 3b:d3:d0:6b:66:8a:eb:51:9e:59:35:58:c7:4b:7d: b8:c9:74:66:da:ea:65:c0:f0:d6:c4:fc:33:87:da: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:57:61:1E:63:CF:04:41:8E:A9:E0:1F:D5:3E:1D:FC:03:97:C7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:71:2f:12:0c:0c:6c:56:d6:05:95:3c:c2:02:4d:c1:45:c7: 39:8a:5c:47:53:26:2c:db:00:99:c1:a2:61:74:90:9b:c3:e7: 94:fc:41:fa:21:c3:dc:4e:ef:5f:77:21:53:e7:68:b7:e6:5a: 02:ba:b9:08:b0:43:37:2a:5a:84:32:7b:06:16:16:5a:26:ce: 6d:bf:31:64:78:3e:41:e9:bf:37:f5:89:94:1d:35:3a:c0:73: e7:71:8b:51:c7:18:e0:b8:8b:aa:0b:bf:45:f7:a1:15:37:82: 6e:de:db:3c:84:d8:ef:bf:82:c7:48:f9:1b:7d:b1:90:c0:70: da:48:87:21:d8:e5:05:31:ed:34:76:24:cd:80:9b:36:a3:0a: 4c:ac:0e:a4:02:ee:55:73:12:7f:ab:ed:36:9c:03:17:47:ff: 01:b2:65:76:05:d2:02:38:1c:d2:4a:53:98:ae:9b:ab:9c:96: 0e:28:86:64:6f:cb:21:78:66:34:5b:85:68:33:0b:0f:7a:8d: 21:6c:7c:5f:3b:83:fa:b5:e9:97:d1:f7:f3:f0:65:ac:27:a4: 86:93:60:40:4c:e1:5d:e7:cd:e4:f9:bd:d5:3d:77:b8:95:2f: e9:6f:b5:6e:23:a3:f1:fe:54:3f:fd:22:98:c1:e4:d3:ef:c2: cb:ec:c4:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITcfrSjeJpRdt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk NDJhNzFiNWUtMTg2Mi00YjJmLTg0MmMtODUwNGJjMmI4MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC7YqG1FcJxIZAFnHl51bqEKTXMbWG9fgoNM /kkAFFgBfVVqGBdZaSrzPtCK5ZW0Xrpf/uA1dbgFyPbhSaLw/4S9EVLL/Wb4XoXm rbLLecAwiOZ/F+sdbwTopXnDAxqFRgIpHAs5aJ/gjzIobzom/g/qiMpg8zaQIILR 5KksJIheIZYPbWPgAPajqF+lyUWrs1LBqRquWc6ZIZrDILw9wHuZU/uhKhGVfU7s DLzCUMZKBGWURTgveI/9x6BmygrlFHTE8WA9zwQutL/VVUb4ERWklsFLVOGH4CHH DbYZIJ4709BrZorrUZ5ZNVjHS324yXRm2uplwPDWxPwzh9pz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFXYR5jzwRBjqngH9U+HfwDl8fCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGIzODkwZmQtMWFhMC0z Y2FlLTgyN2UtMTM4NGU5NTQ2NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpxLxIMDGxW1gWVPMICTcFFxzmKXEdTJizbAJnBomF0kJvD55T8Qfoh w9xO7193IVPnaLfmWgK6uQiwQzcqWoQyewYWFlomzm2/MWR4PkHpvzf1iZQdNTrA c+dxi1HHGOC4i6oLv0X3oRU3gm7e2zyE2O+/gsdI+Rt9sZDAcNpIhyHY5QUx7TR2 JM2AmzajCkysDqQC7lVzEn+r7TacAxdH/wGyZXYF0gI4HNJKU5ium6uclg4ohmRv yyF4ZjRbhWgzCw96jSFsfF87g/q16ZfR9/PwZawnpIaTYEBM4V3nzeT5vdU9d7iV L+lvtW4jo/H+VD/9IpjB5NPvwsvsxAY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org