$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa File: c878950d-c225-3a0d-ba25-6b682a17c8e8.roa (raw, json) Hash identifier: Z1N3ZgIRVbjmB/UJqXn44XkmuI5sf/SfZDLroeyZXFE= Subject key identifier: 4C:5D:E6:A0:AE:30:E4:53:F8:94:FB:13:D3:14:25:33:05:93:AF:48 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CAAEACE30FC33BE67FFEC920 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa Signing time: Wed 06 Nov 2024 17:45:11 +0000 ROA not before: Wed 06 Nov 2024 17:45:11 +0000 ROA not after: Tue 04 Feb 2025 17:45:11 +0000 asID: 3356 IP address blocks: 192.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:ae:ac:e3:0f:c3:3b:e6:7f:fe:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 17:45:11 2024 GMT Not After : Feb 4 17:45:11 2025 GMT Subject: CN=094b2456-d678-4450-ba7a-2c904fe406ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:9f:36:0a:f1:40:69:2e:60:8a:f0:aa:82: 2c:17:9e:0a:54:d5:b9:b7:89:6e:55:54:02:0e:c5: 21:cb:e0:7b:86:cb:12:7d:cd:b9:e6:80:e5:9d:db: 2c:9e:08:9a:45:67:ef:e2:0e:2a:c0:a4:89:2c:d1: 2f:3e:57:46:c8:7c:9c:aa:80:fb:db:bf:80:05:a3: de:8b:22:37:e1:59:3f:c0:98:cb:1f:4d:cf:69:0d: 66:26:f5:e3:f4:31:dd:81:38:1b:2f:4c:db:fc:94: 40:00:b4:11:c9:ff:0c:dc:d8:88:58:49:15:05:43: fb:15:0c:f7:70:5d:9b:a9:dc:3e:49:f0:21:72:d0: ec:ca:48:7a:1c:24:0c:f3:37:93:02:d2:fa:84:12: 3a:20:04:28:32:40:d3:f9:56:1c:ae:f3:e0:58:ed: ec:51:cd:1c:4e:7d:c3:28:6d:10:e1:dd:5f:47:df: 8a:41:90:ce:42:8d:cc:9d:25:a7:f0:6a:9a:1a:29: 48:a5:7d:a3:b8:8f:6e:b0:3c:ec:f0:03:d1:02:e5: 53:b0:4a:5b:f7:9c:94:fe:d6:9b:be:46:02:2f:18: 7a:a9:15:cb:1b:58:ae:01:e2:bb:fd:a4:ad:cb:b6: 43:2b:7a:a0:3f:93:01:08:c0:3b:3f:78:f1:75:07: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5D:E6:A0:AE:30:E4:53:F8:94:FB:13:D3:14:25:33:05:93:AF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:69:5a:59:60:4d:6f:d3:7d:ac:f0:f1:e8:0c:87:6c:88:ff: 96:10:ed:e4:44:45:ee:12:ad:a0:20:34:7e:dd:44:ee:77:1a: ea:3a:95:b7:f1:78:d9:28:d0:f6:0a:90:9e:a6:c8:7d:16:c1: cf:0c:18:e3:91:64:9d:53:0c:50:23:60:04:e2:49:93:17:45: 6f:63:5e:fb:d1:aa:21:f4:1c:d3:1f:29:d0:f1:11:ee:72:32: 07:d9:30:7a:7e:f2:e6:cb:1c:51:f1:26:a9:94:1b:d8:3f:74: b5:82:57:52:fb:7b:fd:16:5f:4c:d7:cb:66:77:a9:87:98:e2: 67:d4:a3:d4:f2:3e:56:54:8d:32:f5:5c:65:86:c6:80:10:c4: ec:0b:b9:77:24:24:96:2a:b9:9f:b3:01:c5:e1:fb:29:91:36: b5:b2:94:ed:12:db:01:47:27:c7:7c:d5:a0:80:8e:f8:56:5b: 2e:38:23:0d:b0:22:9a:ec:81:e1:7b:e6:69:4f:4d:5a:5e:5b: 47:5e:06:93:4c:9e:d1:e1:f6:a9:ef:95:4c:a3:88:98:ff:c5: 4c:d2:81:11:0f:57:7f:c8:88:b1:97:ca:57:ef:34:c5:ce:09: 0a:24:46:da:51:53:fe:3a:f4:c9:18:6d:c3:03:8a:4b:ff:b2: 67:88:cf:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKrqzjD8M75n/+ySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE3NDUxMVoXDTI1MDIwNDE3NDUxMVowLzEtMCsGA1UEAxMk MDk0YjI0NTYtZDY3OC00NDUwLWJhN2EtMmM5MDRmZTQwNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8afNgrxQGkuYIrwqoIsF54KVNW5t4luVVQC DsUhy+B7hssSfc255oDlndssngiaRWfv4g4qwKSJLNEvPldGyHycqoD727+ABaPe iyI34Vk/wJjLH03PaQ1mJvXj9DHdgTgbL0zb/JRAALQRyf8M3NiIWEkVBUP7FQz3 cF2bqdw+SfAhctDsykh6HCQM8zeTAtL6hBI6IAQoMkDT+VYcrvPgWO3sUc0cTn3D KG0Q4d1fR9+KQZDOQo3MnSWn8GqaGilIpX2juI9usDzs8APRAuVTsEpb95yU/tab vkYCLxh6qRXLG1iuAeK7/aSty7ZDK3qgP5MBCMA7P3jxdQerFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExd5qCuMORT+JT7E9MUJTMFk69IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzg3ODk1MGQtYzIyNS0z YTBkLWJhMjUtNmI2ODJhMTdjOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFpWllgTW/Tfazw8egMh2yI/5YQ7eRERe4SraAgNH7dRO53Guo6lbfx eNko0PYKkJ6myH0Wwc8MGOORZJ1TDFAjYATiSZMXRW9jXvvRqiH0HNMfKdDxEe5y MgfZMHp+8ubLHFHxJqmUG9g/dLWCV1L7e/0WX0zXy2Z3qYeY4mfUo9TyPlZUjTL1 XGWGxoAQxOwLuXckJJYquZ+zAcXh+ymRNrWylO0S2wFHJ8d81aCAjvhWWy44Iw2w IprsgeF75mlPTVpeW0deBpNMntHh9qnvlUyjiJj/xUzSgREPV3/IiLGXylfvNMXO CQokRtpRU/469MkYbcMDikv/smeIz/s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org