$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa File: ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa (raw, json) Hash identifier: GIFlW3Baav+kmS4wo9eTr5ePCp5umZRKp1Uz0wkH58E= Subject key identifier: 3D:29:30:51:3E:37:9A:75:8F:6A:49:1D:EC:12:07:30:2E:CB:F2:FF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CAE53B593942335C813E1E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa Signing time: Wed 06 Nov 2024 19:35:07 +0000 ROA not before: Wed 06 Nov 2024 19:35:07 +0000 ROA not after: Tue 04 Feb 2025 19:35:07 +0000 asID: 3356 IP address blocks: 192.238.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:e5:3b:59:39:42:33:5c:81:3e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 19:35:07 2024 GMT Not After : Feb 4 19:35:07 2025 GMT Subject: CN=2c87f261-9742-46c8-8be6-3cf70d237f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:0d:5c:43:e4:02:e5:a2:ac:2e:6d:73:58: 27:0b:93:56:83:71:e2:a8:49:ae:98:2e:01:0a:1d: f2:ec:ed:ea:da:be:43:58:ac:6c:5a:57:bf:cc:2d: 4f:42:f0:53:12:a4:16:c7:3e:36:0f:3f:fc:a6:fb: 97:44:7e:bf:a7:51:fa:01:0b:79:98:b7:bd:fe:72: 9e:7a:1c:4d:95:3d:9d:9e:00:c0:1c:81:05:64:5d: f7:c1:5f:e5:c9:29:81:1b:ce:73:c0:9d:63:f4:50: ec:a6:d8:23:c2:f3:25:64:a3:63:f8:a0:52:c2:0a: 2a:9f:99:ab:f9:e5:e6:51:0a:41:00:44:c1:25:41: a3:f7:e2:af:b5:23:77:a6:82:f7:cb:46:58:1d:c7: f1:cc:06:3b:5e:57:b7:f4:a6:7d:73:bd:3e:84:39: 13:e7:3f:0a:cf:e0:a2:36:73:08:d1:c3:23:8d:cc: 62:c2:e7:1a:19:b0:f1:9d:76:4c:b1:60:50:15:f3: 99:ea:fa:af:82:15:56:b9:62:67:ed:b8:fc:36:e8: 13:bc:b0:61:d9:31:2b:97:aa:ff:7d:7b:49:57:9f: 97:ad:07:d9:4d:a3:51:fe:73:ef:a3:5a:f8:5f:b1: 99:ed:f5:9f:45:8b:a1:cb:2e:76:80:5d:eb:f2:12: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:29:30:51:3E:37:9A:75:8F:6A:49:1D:EC:12:07:30:2E:CB:F2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.238.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3f:a0:fe:13:84:61:4c:af:a5:6e:0e:8c:65:70:03:95:78: f1:9f:e1:5a:6f:18:4c:82:c1:95:4c:bc:1c:4b:70:57:65:22: 24:ac:b4:03:09:c4:81:1e:8e:f9:7e:55:87:dd:e9:15:c7:e3: 3c:6f:54:b9:80:91:f1:74:7a:ca:bb:7c:1d:e9:92:5c:34:5f: 5f:b5:c6:38:67:b4:71:4e:cd:c4:78:df:56:9e:f2:ea:f7:e4: a7:6e:c4:b2:9b:c9:ad:3a:4c:3a:6f:d6:74:e5:14:a6:24:64: fd:6c:38:94:38:95:91:de:aa:ea:eb:be:e7:e8:19:56:3d:e6: 5a:d1:87:f8:b8:2f:21:44:05:a5:ae:ea:aa:57:35:6d:b8:f0: 85:89:ae:32:b5:0a:bb:e7:88:b7:ad:4c:c0:99:a7:e2:4b:b3: 26:4d:6d:06:8b:56:df:dd:e7:35:a5:ee:41:a1:97:44:fe:43: a1:4e:0d:e9:97:d6:db:03:3f:4e:63:ae:d6:99:0a:7d:47:cb: ec:50:bb:35:a6:cb:e5:8c:9e:59:35:ad:85:87:4f:fd:3c:ca: e5:2d:38:8e:4d:b9:a1:94:5c:01:cb:34:f3:17:84:16:ea:37: f2:d0:f7:40:57:63:e8:2b:67:90:ed:7a:50:c9:b4:11:6b:df: 67:2c:f9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfK5TtZOUIzXIE+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE5MzUwN1oXDTI1MDIwNDE5MzUwN1owLzEtMCsGA1UEAxMk MmM4N2YyNjEtOTc0Mi00NmM4LThiZTYtM2NmNzBkMjM3Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypYNXEPkAuWirC5tc1gnC5NWg3HiqEmumC4B Ch3y7O3q2r5DWKxsWle/zC1PQvBTEqQWxz42Dz/8pvuXRH6/p1H6AQt5mLe9/nKe ehxNlT2dngDAHIEFZF33wV/lySmBG85zwJ1j9FDsptgjwvMlZKNj+KBSwgoqn5mr +eXmUQpBAETBJUGj9+KvtSN3poL3y0ZYHcfxzAY7Xle39KZ9c70+hDkT5z8Kz+Ci NnMI0cMjjcxiwucaGbDxnXZMsWBQFfOZ6vqvghVWuWJn7bj8NugTvLBh2TErl6r/ fXtJV5+XrQfZTaNR/nPvo1r4X7GZ7fWfRYuhyy52gF3r8hIIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0pMFE+N5p1j2pJHewSBzAuy/L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWMxYThlZDItODA5ZC0z ZWI5LWJiZjYtYzc3YjAxODdmMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8/oP4ThGFMr6VuDoxlcAOVePGf4VpvGEyCwZVMvBxLcFdlIiSstAMJ xIEejvl+VYfd6RXH4zxvVLmAkfF0esq7fB3pklw0X1+1xjhntHFOzcR431ae8ur3 5KduxLKbya06TDpv1nTlFKYkZP1sOJQ4lZHequrrvufoGVY95lrRh/i4LyFEBaWu 6qpXNW248IWJrjK1CrvniLetTMCZp+JLsyZNbQaLVt/d5zWl7kGhl0T+Q6FODemX 1tsDP05jrtaZCn1Hy+xQuzWmy+WMnlk1rYWHT/08yuUtOI5NuaGUXAHLNPMXhBbq N/LQ90BXY+grZ5DtelDJtBFr32cs+Qk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:41 2024 by rpki-client on console-fra.rpki-client.org