$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa File: f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json) Hash identifier: w2VFTA5YUREqUZ/k3sZNjuZepL5PTEQBxWAff3LBAzs= Subject key identifier: 7D:E9:4E:CA:DA:E5:46:7E:32:F6:3F:46:5B:BB:68:73:65:23:CE:83 Certificate issuer: /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Certificate serial: 010D0C9F43285847362B4A2C3FB6434D666BEDE0 Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 399218 IP address blocks: 172.81.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:4a:2c:3f:b6:43:4d:66:6b:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=2fed879d-265d-4617-a580-ead12e7a8460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:06:63:fa:74:42:42:68:1c:db:0b:df:35: ac:ce:2c:f5:9c:d9:00:1a:ea:d9:3c:af:eb:9d:45: bc:42:ad:b5:82:f8:e0:f4:ef:e7:55:38:b0:cc:df: 3d:51:5c:6c:9d:35:e4:56:b8:05:fa:d7:e4:d0:c7: 0b:f5:27:16:9a:84:b5:00:29:5c:ba:f1:53:51:b6: fa:77:f1:b6:97:cc:41:32:93:53:04:7c:87:17:b3: 7f:32:88:43:03:24:8c:29:82:77:3e:60:d8:cf:05: 07:78:92:0d:40:59:f6:99:df:57:27:bf:49:3b:d8: 0b:21:2f:eb:5c:71:51:eb:20:97:47:c8:a9:39:89: 0d:e1:8e:c7:4f:da:b7:7f:89:3b:97:57:d3:68:7c: 6b:76:3f:92:84:c6:e2:b0:90:28:6f:fb:bc:bc:62: 71:97:c5:93:ce:60:b9:72:9e:18:da:b5:83:e8:62: 87:d2:1e:16:8e:f9:f7:8b:07:96:b5:24:1c:c4:a4: ae:0c:28:15:17:0c:d0:9a:3f:e5:a8:e3:29:81:fd: 65:2f:7a:1a:55:d4:a3:a2:36:e9:40:d9:b3:cf:6e: e8:41:88:0d:dd:b0:9c:0c:58:fd:65:03:6f:b9:69: 55:9c:79:41:cd:cf:b5:94:82:58:e4:d6:13:4d:81: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:4E:CA:DA:E5:46:7E:32:F6:3F:46:5B:BB:68:73:65:23:CE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl X509v3 Authority Key Identifier: keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer sbgp-ipAddrBlock: critical IPv4: 172.81.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:df:47:db:f6:bd:96:00:fc:8b:40:bb:aa:3e:c5:d6:1d:87: fb:95:7d:8e:c7:cb:b0:e3:d8:21:6f:17:2a:0c:f2:ed:4a:50: fb:01:ac:83:73:43:cf:ac:5d:a0:95:21:71:2a:01:f3:a8:4d: da:01:44:93:0c:e4:1f:0d:5f:54:ab:25:7b:1c:7e:bf:97:53: cd:d4:b2:ce:47:5c:b3:59:9b:39:70:f1:13:7a:59:e0:4d:1d: f7:81:ee:03:98:6f:bd:2b:41:17:70:8b:ba:37:eb:92:0c:a8: 90:9a:f8:2b:c2:c1:ac:01:dc:9c:3c:6b:4f:1c:25:f5:a8:2a: cf:fb:74:d5:90:12:ab:84:dd:d8:81:8b:f0:c6:13:8b:79:3a: 61:f6:15:83:bb:71:a5:65:0c:19:f6:c6:a9:ab:28:c6:21:a2: 19:b7:8b:b4:42:05:65:e6:aa:ed:06:3f:a6:06:50:71:44:c9: 00:70:76:91:1c:56:e9:d8:87:39:1a:46:fa:13:82:27:57:30: fd:ae:bd:03:7a:6e:c7:48:77:4e:e6:07:9f:f3:05:fb:66:b0: a9:63:f2:f8:fb:e4:1c:50:9f:32:13:e6:f7:83:ab:04:4f:16: d1:a3:16:7d:bd:c3:ef:8f:a6:c9:45:58:e8:25:e8:a0:bc:ce: 89:94:5e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K0osP7ZDTWZr7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3N2E3ZDEtOTllMS00MWZkLWExZDctOTAxYjZkYjVk NDVmMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk MmZlZDg3OWQtMjY1ZC00NjE3LWE1ODAtZWFkMTJlN2E4NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoGY/p0QkJoHNsL3zWsziz1nNkAGurZPK/r nUW8Qq21gvjg9O/nVTiwzN89UVxsnTXkVrgF+tfk0McL9ScWmoS1AClcuvFTUbb6 d/G2l8xBMpNTBHyHF7N/MohDAySMKYJ3PmDYzwUHeJINQFn2md9XJ79JO9gLIS/r XHFR6yCXR8ipOYkN4Y7HT9q3f4k7l1fTaHxrdj+ShMbisJAob/u8vGJxl8WTzmC5 cp4Y2rWD6GKH0h4Wjvn3iweWtSQcxKSuDCgVFwzQmj/lqOMpgf1lL3oaVdSjojbp QNmzz27oQYgN3bCcDFj9ZQNvuWlVnHlBzc+1lIJY5NYTTYE61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3pTsra5UZ+MvY/Rlu7aHNlI86DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3 YTdkMS05OWUxLTQxZmQtYTFkNy05MDFiNmRiNWQ0NWYvZjBjMTJkZDItODNlNi0z YjFlLTlmZjUtYjNiMTAzMDc3MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3N2E3ZDEtOTllMS00MWZkLWEx ZDctOTAxYjZkYjVkNDVmLzhiNzdhN2QxLTk5ZTEtNDFmZC1hMWQ3LTkwMWI2ZGI1 ZDQ1Zi5jcmwwHwYDVR0jBBgwFoAU9KuOC65yjjnmMaTedc2t4i2VM1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3YTdkMS05OWUxLTQxZmQtYTFkNy05MDFi NmRiNWQ0NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzfR9v2vZYA/ItAu6o+xdYdh/uVfY7Hy7Dj2CFvFyoM8u1KUPsBrINz Q8+sXaCVIXEqAfOoTdoBRJMM5B8NX1SrJXscfr+XU83Uss5HXLNZmzlw8RN6WeBN HfeB7gOYb70rQRdwi7o365IMqJCa+CvCwawB3Jw8a08cJfWoKs/7dNWQEquE3diB i/DGE4t5OmH2FYO7caVlDBn2xqmrKMYhohm3i7RCBWXmqu0GP6YGUHFEyQBwdpEc VunYhzkaRvoTgidXMP2uvQN6bsdId07mB5/zBftmsKlj8vj75BxQnzIT5veDqwRP FtGjFn29w++PpslFWOgl6KC8zomUXms= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org