$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa File: d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa (raw, json) Hash identifier: ip3aFg/Tr6Ps9aoLg+JHinoTzHM1zLES5pg5jMVjNgs= Subject key identifier: AE:16:70:0E:BE:75:BA:87:D6:DC:27:58:67:7B:1E:F5:91:75:10:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CE6F4D8682A6674AD0203F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 202 IP address blocks: 216.240.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:4d:86:82:a6:67:4a:d0:20:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=d26af56a-985d-4fe0-99f7-e8756a879cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:7b:8a:8d:f5:a2:93:fb:7c:0b:b7:f0:f2: fe:c6:f4:91:97:62:24:6e:a0:c6:f8:58:ec:f1:bb: 15:59:95:59:d0:df:c0:e6:62:3f:27:0b:9c:64:be: 7b:f3:f5:e5:53:13:db:b0:5f:e1:25:1d:83:e7:9d: a8:8b:d4:8b:44:10:e1:0f:c0:ae:a4:1c:ce:de:cb: 9e:6b:00:5a:42:94:e4:ab:07:b6:fb:a1:38:b6:d9: c6:7e:43:74:b5:0f:49:15:e4:10:fd:9b:45:38:70: 03:4b:92:e3:62:fe:fb:bd:d4:f4:0d:ba:5a:5c:e1: 60:de:46:72:f2:f7:8c:6b:3f:76:61:34:1a:aa:7a: 21:ef:3e:c1:8a:cb:64:67:14:46:19:48:71:f7:08: f5:6b:02:82:24:10:19:45:e8:83:8f:f6:32:53:e2: f0:6b:4c:5c:19:76:e5:0f:64:23:f3:96:8f:d1:ba: db:ec:94:71:fc:90:6f:a8:5a:9a:75:df:80:5f:f7: 51:12:5b:db:be:a7:fb:8a:2d:e1:8c:db:13:7a:0d: 6b:e7:49:97:41:9f:fa:d7:0e:32:49:9c:66:8d:ff: 59:c0:04:8d:58:39:7a:4c:58:81:61:d6:81:a7:5a: 97:49:fb:2d:f2:f0:c6:ba:d0:1f:a0:d3:f4:80:fb: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:16:70:0E:BE:75:BA:87:D6:DC:27:58:67:7B:1E:F5:91:75:10:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4451a8c-dfdc-3116-a0e2-e7f95835dac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6e:88:07:98:7a:2b:ef:5c:53:2d:7b:a4:0b:6a:42:f2:64: 21:d1:d1:e4:34:fb:be:56:c0:f4:25:10:c9:bb:8d:13:4d:36: d3:9c:1e:e7:b3:17:8e:c5:b9:18:53:41:75:5e:b6:11:6e:22: 03:cd:79:69:b1:ee:89:5b:f6:15:ca:bd:44:94:54:a5:6d:7d: 48:a0:72:06:61:1d:fc:0b:f7:4a:e8:0f:57:fc:af:d6:1b:1d: ac:7e:62:5b:73:8b:20:8d:9b:9a:6d:77:08:78:74:92:97:77: 66:6a:17:56:5e:4c:c7:1c:ef:f4:e8:51:cc:6b:ff:39:91:18: ec:64:25:5c:7c:13:7e:a3:32:74:45:b5:69:6e:5f:5f:0c:81: 95:5f:5f:7b:05:08:a6:01:b7:89:46:27:c6:9f:70:56:fb:d8: f0:ff:b8:13:ae:be:fd:9d:06:21:b8:25:23:bf:18:19:fe:e6: 0f:e0:ce:08:9c:f6:8d:6e:89:d7:6a:9a:21:1e:c0:02:85:cf: 0d:e1:a4:5b:42:82:00:33:c3:b7:66:3f:3f:21:70:bf:20:44: 37:d0:e5:4f:c4:c5:b1:0f:ff:59:86:33:42:62:17:ac:93:c1: dc:97:52:c6:3d:b7:40:d6:bb:51:58:f9:35:9e:c7:12:94:06: d0:7e:3b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb02GgqZnStAgP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZDI2YWY1NmEtOTg1ZC00ZmUwLTk5ZjctZTg3NTZhODc5Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkup7io31opP7fAu38PL+xvSRl2IkbqDG+Fjs 8bsVWZVZ0N/A5mI/JwucZL578/XlUxPbsF/hJR2D552oi9SLRBDhD8CupBzO3sue awBaQpTkqwe2+6E4ttnGfkN0tQ9JFeQQ/ZtFOHADS5LjYv77vdT0DbpaXOFg3kZy 8veMaz92YTQaqnoh7z7BistkZxRGGUhx9wj1awKCJBAZReiDj/YyU+Lwa0xcGXbl D2Qj85aP0brb7JRx/JBvqFqadd+AX/dRElvbvqf7ii3hjNsTeg1r50mXQZ/61w4y SZxmjf9ZwASNWDl6TFiBYdaBp1qXSfst8vDGutAfoNP0gPsDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4WcA6+dbqH1twnWGd7HvWRdRAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ0NTFhOGMtZGZkYy0z MTE2LWEwZTItZTdmOTU4MzVkYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARuiAeYeivvXFMte6QLakLyZCHR0eQ0+75WwPQlEMm7jRNNNtOcHuez F47FuRhTQXVethFuIgPNeWmx7olb9hXKvUSUVKVtfUigcgZhHfwL90roD1f8r9Yb Hax+YltziyCNm5ptdwh4dJKXd2ZqF1ZeTMcc7/ToUcxr/zmRGOxkJVx8E36jMnRF tWluX18MgZVfX3sFCKYBt4lGJ8afcFb72PD/uBOuvv2dBiG4JSO/GBn+5g/gzgic 9o1uiddqmiEewAKFzw3hpFtCggAzw7dmPz8hcL8gRDfQ5U/ExbEP/1mGM0JiF6yT wdyXUsY9t0DWu1FY+TWexxKUBtB+O1w= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:42 2024 by rpki-client on console-fra.rpki-client.org