$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1b7fa086-f6c5-3984-8db3-9b1d9dacadf6.roa File: 1b7fa086-f6c5-3984-8db3-9b1d9dacadf6.roa (raw, json) Hash identifier: N1YJxYdddhS2rcKVkhp1ugHVVVfU3vgCFoVMNQGudQA= Subject key identifier: A3:88:53:AF:1B:B9:48:D1:1A:5A:5A:B8:9B:21:F4:23:DB:F4:7A:F9 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F43285848143A7815AE6D766D8F8995C0 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1b7fa086-f6c5-3984-8db3-9b1d9dacadf6.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 393398 IP address blocks: 96.47.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:78:15:ae:6d:76:6d:8f:89:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=33597162-f5a3-4335-897e-11a7173a80ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:fe:77:fc:d8:66:51:23:e8:20:4a:e1:57: 48:3b:cf:1d:d1:16:9b:b6:14:d5:86:f6:2c:17:d7: 6c:50:f5:96:f3:49:1e:02:20:e7:48:16:e6:5e:07: 18:3e:9d:64:48:ea:25:81:7b:35:f6:a5:8d:cb:2a: d4:a0:9c:ce:da:9b:7d:7a:c9:35:94:70:0b:85:bb: cd:ac:2f:58:a8:7f:5b:3b:65:c1:a0:f3:39:0c:bd: 5e:0c:90:62:b8:ed:86:c9:d5:ef:f4:ab:ba:74:ff: da:b9:4d:c5:90:b3:0c:9c:ee:35:25:ba:ec:77:c7: 3b:f5:4e:7c:39:35:e7:84:e1:b9:79:46:13:8b:41: 96:76:3a:21:94:67:a0:ee:c4:b7:d8:3b:33:c9:cf: f1:a3:10:7e:b4:e8:13:9c:c9:99:12:45:9d:ef:80: cf:fb:95:95:86:5c:16:85:52:8f:8a:7a:ab:28:fb: b0:bc:ad:2e:c0:b2:30:72:bd:8f:cd:fb:32:4b:e6: ad:35:33:5f:fd:6f:30:7f:d0:3b:44:c4:0a:aa:cf: 97:e3:32:ea:dc:02:7c:66:ba:ab:67:16:c9:67:73: ba:24:ff:73:0e:de:bc:c7:45:00:30:4e:39:e7:22: 36:0c:80:d2:1d:f0:98:51:0b:5b:72:91:f3:0d:bf: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:88:53:AF:1B:B9:48:D1:1A:5A:5A:B8:9B:21:F4:23:DB:F4:7A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/1b7fa086-f6c5-3984-8db3-9b1d9dacadf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:39:b7:da:08:f1:0c:4c:d1:76:d5:26:71:cb:72:c0:aa:62: 0e:22:1d:3b:04:d0:9b:d3:27:2a:be:94:aa:8e:e0:04:a5:a2: 15:1a:32:c7:76:81:36:be:15:5a:a8:c4:18:25:89:7d:4c:4e: e4:05:e1:51:d6:98:0f:0a:13:aa:9e:e4:03:00:fc:18:32:06: 77:a0:1b:a8:0f:2e:a5:79:1b:bd:f8:40:d9:e2:65:89:97:83: bc:ff:33:59:6b:95:ae:6b:19:58:8d:92:60:16:f3:42:d3:25: 19:b6:d9:4e:52:93:a8:88:97:83:00:a1:cf:f3:e5:68:ce:c4: 3a:23:f7:65:bb:b4:28:3f:9a:0c:82:ca:09:b4:57:ee:2c:12: 1d:e9:8e:bf:59:f4:b1:f0:44:1b:d6:79:cf:18:be:39:70:d0: 95:6b:39:52:ab:92:1c:41:4d:c2:66:ab:61:3e:56:33:d8:15: f8:39:c5:13:ec:97:9d:61:3a:86:2a:53:c5:90:20:31:d2:f2: 65:4c:76:f3:33:be:18:bc:5a:9b:7b:4f:29:2c:d5:ca:17:e3: c7:74:d4:4a:f2:78:4a:80:f2:ac:fe:af:00:9b:3b:b3:46:7d: 58:6f:68:b1:33:e5:39:ab:8b:92:fb:71:c5:3b:9a:9d:42:17: ce:6b:36:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOngVrm12bY+JlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk MzM1OTcxNjItZjVhMy00MzM1LTg5N2UtMTFhNzE3M2E4MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2v+d/zYZlEj6CBK4VdIO88d0RabthTVhvYs F9dsUPWW80keAiDnSBbmXgcYPp1kSOolgXs19qWNyyrUoJzO2pt9esk1lHALhbvN rC9YqH9bO2XBoPM5DL1eDJBiuO2GydXv9Ku6dP/auU3FkLMMnO41Jbrsd8c79U58 OTXnhOG5eUYTi0GWdjohlGeg7sS32Dszyc/xoxB+tOgTnMmZEkWd74DP+5WVhlwW hVKPinqrKPuwvK0uwLIwcr2PzfsyS+atNTNf/W8wf9A7RMQKqs+X4zLq3AJ8Zrqr ZxbJZ3O6JP9zDt68x0UAME455yI2DIDSHfCYUQtbcpHzDb88dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOIU68buUjRGlpauJsh9CPb9Hr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMWI3ZmEwODYtZjZjNS0z OTg0LThkYjMtOWIxZDlkYWNhZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE5t9oI8QxM0XbVJnHLcsCqYg4iHTsE0JvTJyq+lKqO4ASlohUaMsd2 gTa+FVqoxBgliX1MTuQF4VHWmA8KE6qe5AMA/BgyBnegG6gPLqV5G734QNniZYmX g7z/M1lrla5rGViNkmAW80LTJRm22U5Sk6iIl4MAoc/z5WjOxDoj92W7tCg/mgyC ygm0V+4sEh3pjr9Z9LHwRBvWec8Yvjlw0JVrOVKrkhxBTcJmq2E+VjPYFfg5xRPs l51hOoYqU8WQIDHS8mVMdvMzvhi8Wpt7Tyks1coX48d01EryeEqA8qz+rwCbO7NG fVhvaLEz5Tmri5L7ccU7mp1CF85rNhI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:11 2025 by rpki-client