$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa File: ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa (raw, json) Hash identifier: +j3vGvACycFcqJ6tpV1cfWjn3lHCIHFHzzd420vO660= Subject key identifier: 94:A4:FD:05:2B:BF:38:FF:6D:71:61:31:88:BE:F2:39:97:87:81:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CE6F4DC5EDDBDB1698505F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 202 IP address blocks: 216.240.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:4d:c5:ed:db:db:16:98:50:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=e8fd756a-4fed-40d8-8d4e-da508a44b8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:1c:41:bb:03:17:81:fb:21:07:e2:cf:38: 5e:de:99:2d:16:a8:bf:51:f7:57:f8:94:6a:f0:0f: 26:32:69:24:51:43:5f:7f:7a:36:ff:9f:e3:33:a6: 4f:2c:04:bd:62:d3:1b:54:ee:83:f2:ee:da:55:83: 99:c5:32:f1:0a:51:7c:27:10:e1:51:b2:14:4d:fa: 4f:d2:33:31:c1:f8:4c:85:ab:5a:07:76:e4:e5:ee: 48:78:78:48:5d:7b:5c:d4:dd:9d:ff:e8:66:67:ff: 39:d3:e7:c0:4e:f2:6b:c1:13:2f:e8:b4:07:38:a8: 3c:9e:7c:81:cd:1d:d6:40:4c:96:62:c1:d7:5e:80: ce:8b:c2:c2:b3:9d:23:0e:5e:3e:d8:7a:5f:e5:9a: f2:5b:d3:7d:df:b3:59:69:73:2a:69:f6:29:04:3e: 64:f1:d7:a9:3b:74:33:98:44:bd:a5:f8:5b:86:a8: d2:d7:13:1b:69:7d:69:8e:3a:b5:17:ce:06:07:22: ce:a3:58:c8:97:41:88:b8:ab:a0:a8:1b:3d:73:e4: 29:f1:09:5b:8b:53:91:31:73:78:31:ae:3f:70:55: 1f:88:2a:aa:0a:c8:23:5c:fe:a2:ea:68:1d:33:dd: 3c:07:76:53:00:8a:1f:85:ce:0f:34:b6:12:db:d3: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A4:FD:05:2B:BF:38:FF:6D:71:61:31:88:BE:F2:39:97:87:81:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ce286e78-8869-3b72-bd69-c4cc06be8f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:16:1d:80:9b:a8:0a:a6:d7:b5:a9:4a:ec:eb:d5:2c:04:8a: 23:89:3c:77:ec:b6:10:7a:b5:a1:03:79:0a:61:43:cf:5b:fa: 0c:ef:f4:c0:bb:90:69:3e:e5:3a:5c:0f:88:b3:97:1a:6a:33: 83:7e:13:4d:41:d2:a3:8b:6d:b1:e5:f8:ae:7e:f8:a7:a4:2f: 3b:cb:bd:bb:c7:6b:26:2c:65:ff:24:73:34:51:f4:b9:22:04: 21:9b:c4:1b:62:50:9c:b4:02:68:1b:47:ac:4a:0b:65:03:2f: 0b:9b:c9:64:18:00:45:49:c2:56:41:da:7b:a0:80:fc:5b:9e: 15:ea:ee:a9:3d:3f:29:70:a7:90:d5:89:11:0e:09:4e:2a:a0: 1d:13:9a:e5:d0:3b:d7:bd:47:0a:ce:b5:1c:20:80:c8:94:7b: c2:f1:6d:84:e6:82:b3:10:3f:2c:34:cb:5d:cd:72:7d:d4:3d: 49:ad:9e:e7:33:29:89:ec:af:0a:42:2b:66:a1:ac:06:51:04: 81:15:e6:83:15:e6:e3:18:2e:e9:b7:44:77:59:f4:4e:0a:dd: 7a:2e:19:8c:b6:81:fe:06:f9:95:68:64:5a:80:28:51:11:3a: 88:57:f5:5c:d9:7b:8c:73:92:a2:4a:ca:13:0f:b6:e5:59:16: 60:7e:b1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb03F7dvbFphQXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZThmZDc1NmEtNGZlZC00MGQ4LThkNGUtZGE1MDhhNDRiOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ0cQbsDF4H7IQfizzhe3pktFqi/UfdX+JRq 8A8mMmkkUUNff3o2/5/jM6ZPLAS9YtMbVO6D8u7aVYOZxTLxClF8JxDhUbIUTfpP 0jMxwfhMhataB3bk5e5IeHhIXXtc1N2d/+hmZ/850+fATvJrwRMv6LQHOKg8nnyB zR3WQEyWYsHXXoDOi8LCs50jDl4+2Hpf5ZryW9N937NZaXMqafYpBD5k8depO3Qz mES9pfhbhqjS1xMbaX1pjjq1F84GByLOo1jIl0GIuKugqBs9c+Qp8Qlbi1ORMXN4 Ma4/cFUfiCqqCsgjXP6i6mgdM908B3ZTAIofhc4PNLYS29M/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSk/QUrvzj/bXFhMYi+8jmXh4FxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2UyODZlNzgtODg2OS0z YjcyLWJkNjktYzRjYzA2YmU4ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEWHYCbqAqm17WpSuzr1SwEiiOJPHfsthB6taEDeQphQ89b+gzv9MC7 kGk+5TpcD4izlxpqM4N+E01B0qOLbbHl+K5++KekLzvLvbvHayYsZf8kczRR9Lki BCGbxBtiUJy0AmgbR6xKC2UDLwubyWQYAEVJwlZB2nuggPxbnhXq7qk9Pylwp5DV iREOCU4qoB0TmuXQO9e9RwrOtRwggMiUe8LxbYTmgrMQPyw0y13Ncn3UPUmtnucz KYnsrwpCK2ahrAZRBIEV5oMV5uMYLum3RHdZ9E4K3XouGYy2gf4G+ZVoZFqAKFER OohX9VzZe4xzkqJKyhMPtuVZFmB+sVE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:46 2024 by rpki-client on console-fra.rpki-client.org