$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa File: 915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa (raw, json) Hash identifier: s2ml0+WSW/mdyrCa15iZ/L7wuZNubhafePCdeGJAFx0= Subject key identifier: AC:D2:3F:2B:81:85:40:9A:60:F2:F9:59:19:57:9D:5A:65:10:1F:88 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584752A68B2A62D9F85850BE6C00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa Signing time: Tue 24 Sep 2024 17:51:48 +0000 ROA not before: Tue 24 Sep 2024 17:51:48 +0000 ROA not after: Mon 23 Dec 2024 18:51:48 +0000 asID: 3360 IP address blocks: 192.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:a6:8b:2a:62:d9:f8:58:50:be:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 24 17:51:48 2024 GMT Not After : Dec 23 18:51:48 2024 GMT Subject: CN=41abb3cd-7140-49f1-a505-070e952b2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:e0:6e:b8:86:91:2f:ea:89:d9:97:3a:ac: 9f:3f:18:fe:1e:6a:c5:f0:bc:0f:a3:3a:e9:72:f1: aa:63:b8:6a:36:38:1c:3c:a3:7e:a4:fd:57:bc:18: c9:06:4a:45:35:ca:8e:fb:dc:c1:09:bf:95:f2:64: b2:de:d2:e5:b9:ae:ed:1a:f6:c6:be:46:57:2f:5b: a1:4e:71:0f:6b:c6:0c:85:64:42:77:d6:2f:fd:ae: 87:16:a4:c2:9e:55:0d:be:c3:9f:b2:d7:d1:38:e3: 6e:82:19:ba:1d:18:57:a2:91:e3:68:f9:04:cd:a2: 56:9d:ef:16:b2:c7:24:c3:11:b4:b1:f3:dd:43:68: 4b:b0:61:a8:a8:6d:28:f8:69:ba:56:66:25:a6:14: 7a:cb:88:e9:01:54:8b:8a:8e:52:43:0a:65:83:38: b1:c3:ce:11:6b:39:a7:2f:20:f4:a7:76:da:52:89: 69:c3:29:95:f7:29:10:6d:8a:7d:8d:6b:0a:ab:4d: 96:99:8f:61:6a:92:58:47:ab:0c:34:d6:b2:ba:90: 15:8b:a8:20:cc:9e:42:b3:a4:86:d1:d4:f2:48:a3: 53:dd:2f:05:4d:23:29:ac:3d:6c:81:06:7d:fa:62: 75:6a:11:16:69:13:7e:cb:c7:b9:68:cc:29:5c:e0: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:3F:2B:81:85:40:9A:60:F2:F9:59:19:57:9D:5A:65:10:1F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.85.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9f:73:ed:f1:49:30:5c:86:ca:8e:72:19:59:1f:cc:ba:76: 32:02:b9:41:d3:5e:30:e8:0c:0a:84:ed:5a:98:1e:e4:a2:cd: 48:da:a9:32:75:23:d1:32:74:ed:f9:6c:9e:cc:2e:29:6c:d6: 38:e1:64:56:b7:3e:4b:5f:10:13:8e:96:2b:f7:ee:b9:f5:9b: 23:8c:ec:58:7b:e4:2b:9d:c2:52:89:e4:6b:b4:42:32:89:f0: 34:b3:7b:a5:f2:a3:03:04:e8:71:bb:ed:cb:1e:6e:99:00:2b: 28:c1:c2:6b:ea:7e:e1:8f:f0:f3:27:d1:0a:9c:e2:2a:e0:8f: 47:ee:c4:3b:90:61:26:47:e1:b4:70:06:4a:25:0d:c8:1a:bc: 7a:63:92:2e:28:a4:88:61:a8:d9:0c:c7:44:a4:d3:14:b4:59: ec:de:38:48:ba:75:e6:13:c6:b6:32:da:fb:78:31:17:85:f9: b9:8e:91:f5:a4:63:e9:45:12:c7:47:96:8a:57:7a:f3:8a:5e: e4:a5:c8:b3:39:a7:15:ab:4d:2b:f1:37:a5:b2:8c:fa:73:91: b7:7d:14:f9:96:dd:a8:02:6e:01:a2:23:c9:ab:3a:76:17:fd: d7:8d:92:34:e2:c8:83:04:a9:9e:46:d6:cf:e1:96:d0:43:03: a6:76:4c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSposqYtn4WFC+bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDkyNDE3NTE0OFoXDTI0MTIyMzE4NTE0OFowLzEtMCsGA1UEAxMk NDFhYmIzY2QtNzE0MC00OWYxLWE1MDUtMDcwZTk1MmIyNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyngbriGkS/qidmXOqyfPxj+HmrF8LwPozrp cvGqY7hqNjgcPKN+pP1XvBjJBkpFNcqO+9zBCb+V8mSy3tLlua7tGvbGvkZXL1uh TnEPa8YMhWRCd9Yv/a6HFqTCnlUNvsOfstfROONughm6HRhXopHjaPkEzaJWne8W ssckwxG0sfPdQ2hLsGGoqG0o+Gm6VmYlphR6y4jpAVSLio5SQwplgzixw84Razmn LyD0p3baUolpwymV9ykQbYp9jWsKq02WmY9hapJYR6sMNNayupAVi6ggzJ5Cs6SG 0dTySKNT3S8FTSMprD1sgQZ9+mJ1ahEWaRN+y8e5aMwpXOCpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzSPyuBhUCaYPL5WRlXnVplEB+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTE1NjkwZTgtMGQ5YS0z MGIzLWE5MjQtMjk4ZTBiNWE2ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACefc+3xSTBchsqOchlZH8y6djICuUHTXjDoDAqE7VqYHuSizUjaqTJ1 I9EydO35bJ7MLils1jjhZFa3PktfEBOOliv37rn1myOM7Fh75CudwlKJ5Gu0QjKJ 8DSze6XyowME6HG77csebpkAKyjBwmvqfuGP8PMn0Qqc4irgj0fuxDuQYSZH4bRw BkolDcgavHpjki4opIhhqNkMx0Sk0xS0WezeOEi6deYTxrYy2vt4MReF+bmOkfWk Y+lFEsdHlopXevOKXuSlyLM5pxWrTSvxN6WyjPpzkbd9FPmW3agCbgGiI8mrOnYX /deNkjTiyIMEqZ5G1s/hltBDA6Z2TC4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org