$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa File: 09223a2e-2947-361f-938a-98cbd7de56d5.roa (raw, json) Hash identifier: nyScjJdj8p/iCKw6aG3VsUkPF9pDrETPCh7Gl2LqhyU= Subject key identifier: D3:76:83:E0:34:E3:D0:91:77:34:FC:68:B1:80:52:9B:F3:AE:F2:0A Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285847CA3F7C97B6E62596BC1D5680 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 1239 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7c:97:b6:e6:25:96:bc:1d:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=80a8cd51-f85f-4efe-af0d-79fa00e9a546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:ac:c6:40:10:fd:fc:29:b7:87:fd:9f:7e: 07:04:10:4b:24:64:65:06:96:55:7f:89:0a:81:0c: db:2e:de:5e:64:62:8a:4c:9f:e4:4f:3a:28:eb:06: 0f:06:76:22:de:79:45:74:03:fc:82:bc:5a:52:45: 54:a7:b3:09:58:89:70:1e:22:66:a9:bf:0b:4e:15: 6c:0a:2e:58:e3:7f:42:3f:9b:83:09:b2:01:01:57: 1b:de:8d:ba:b9:56:be:21:7c:d8:6c:f9:d2:9e:7a: e0:49:15:76:a7:10:a9:32:b4:b1:16:f1:68:fb:2e: 29:1e:1a:ab:89:fe:73:40:d5:92:ad:72:35:91:f7: f1:bb:65:f3:64:47:30:29:4f:eb:55:d4:c3:1f:f3: c5:ec:0c:60:66:0b:ba:fe:0e:39:38:9b:17:5b:d5: 28:33:6c:a0:53:d9:14:69:60:47:bd:7e:c2:f6:bd: 9f:69:55:3c:8d:75:80:d5:b9:5f:da:9f:5e:e7:8d: 43:3a:87:12:49:96:f2:5b:df:2b:8b:6a:3f:81:2e: d7:7c:ea:03:94:be:4e:af:70:ab:11:ba:02:7d:19: 82:cb:50:ef:37:f2:bb:33:f3:7e:75:7f:81:33:4a: 72:15:89:34:38:0c:85:53:e1:ff:7b:5a:da:bb:2d: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:76:83:E0:34:E3:D0:91:77:34:FC:68:B1:80:52:9B:F3:AE:F2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:80:36:3f:14:57:7b:13:70:71:ca:d6:38:bf:37:fb:94:32: 11:ac:07:dc:0a:0d:80:4a:43:8f:79:e0:e8:f6:d9:17:9c:d4: a9:d8:ff:77:5e:40:77:79:45:c3:22:b3:08:04:37:7e:76:a9: a6:0f:5a:0e:dd:ac:ee:93:08:5f:4a:e7:7e:38:e5:d0:0c:cf: 2f:fe:e6:9f:14:1c:92:2e:52:e1:c7:f9:8a:21:f9:48:73:aa: c9:f7:10:d5:79:16:43:44:59:30:8f:fe:58:d3:05:26:24:f0: 84:77:85:38:af:86:bd:78:5e:7b:c3:cd:c6:29:b2:2d:4e:b6: 8e:a6:12:4f:b7:c3:f5:b9:ea:9d:f4:36:5c:41:cf:6c:ab:78: f1:61:d9:71:8a:63:4b:10:25:2f:d6:e2:c1:41:7f:46:0a:48: ef:d2:2c:a3:8c:56:e7:da:b0:45:67:0f:be:a1:7b:3d:3b:e8: 8c:aa:8e:af:4f:be:6f:bf:7c:79:56:ed:f6:5a:ef:fb:c4:60: 67:04:47:9d:6e:c1:84:5a:15:2d:58:d4:63:bb:e0:0f:a1:0a: 31:65:09:5e:53:70:88:7b:a6:fa:0e:db:25:eb:73:89:0b:36: 1a:d5:21:32:b1:57:27:e0:a7:8d:59:70:1f:36:40:68:4a:cb: cd:57:9f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3yXtuYllrwdVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODBhOGNkNTEtZjg1Zi00ZWZlLWFmMGQtNzlmYTAwZTlhNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rGsxkAQ/fwpt4f9n34HBBBLJGRlBpZVf4kK gQzbLt5eZGKKTJ/kTzoo6wYPBnYi3nlFdAP8grxaUkVUp7MJWIlwHiJmqb8LThVs Ci5Y439CP5uDCbIBAVcb3o26uVa+IXzYbPnSnnrgSRV2pxCpMrSxFvFo+y4pHhqr if5zQNWSrXI1kffxu2XzZEcwKU/rVdTDH/PF7AxgZgu6/g45OJsXW9UoM2ygU9kU aWBHvX7C9r2faVU8jXWA1blf2p9e541DOocSSZbyW98ri2o/gS7XfOoDlL5Or3Cr EboCfRmCy1DvN/K7M/N+dX+BM0pyFYk0OAyFU+H/e1rauy0HCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN2g+A049CRdzT8aLGAUpvzrvIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDkyMjNhMmUtMjk0Ny0z NjFmLTkzOGEtOThjYmQ3ZGU1NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWANj8UV3sTcHHK1ji/N/uUMhGsB9wKDYBKQ4954Oj22Rec1KnY/3de QHd5RcMiswgEN352qaYPWg7drO6TCF9K53445dAMzy/+5p8UHJIuUuHH+Yoh+Uhz qsn3ENV5FkNEWTCP/ljTBSYk8IR3hTivhr14XnvDzcYpsi1Oto6mEk+3w/W56p30 NlxBz2yrePFh2XGKY0sQJS/W4sFBf0YKSO/SLKOMVufasEVnD76hez076Iyqjq9P vm+/fHlW7fZa7/vEYGcER51uwYRaFS1Y1GO74A+hCjFlCV5TcIh7pvoO2yXrc4kL NhrVITKxVyfgp41ZcB82QGhKy81Xn+w= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org