$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa File: d6bb9957-3d87-340e-a18c-043fc02daa3a.roa (raw, json) Hash identifier: 1TucD5vP9lN1JijF2Nab1Df7rk5o4txIn9/RdNWACTc= Subject key identifier: 25:A7:91:27:CF:5F:FE:2C:85:CF:46:AF:75:31:A4:C4:26:E7:DB:C9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858478CB69BEE9F41B620EAB50580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 54858 IP address blocks: 192.175.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:9b:ee:9f:41:b6:20:ea:b5:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=a8cd32d7-9609-4a9e-a055-50f297758db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:58:ac:f2:3d:cb:33:44:1b:3a:b7:01:43: 4c:4c:5e:cd:b0:3a:a1:8a:10:00:4a:59:87:f8:ac: bb:03:df:91:99:e9:97:e5:7f:8c:02:ff:6a:61:82: 1d:4c:65:7e:17:13:67:92:67:80:cd:a2:77:2c:cb: 9b:49:7b:46:33:c9:96:c6:2e:8f:29:35:f1:b3:3d: 6d:76:06:bd:f2:85:00:2c:0a:00:5b:78:49:e5:a4: 32:29:7d:6d:81:39:7b:1a:7c:0f:d8:ae:c2:1c:8a: c5:ee:f9:35:74:34:26:08:a6:c7:8b:93:9b:1c:c7: 72:82:e1:5f:ea:61:2a:c6:05:ec:0e:b4:8f:00:cf: 33:96:28:ee:88:b5:3a:d7:eb:d0:c8:cf:9f:30:77: e2:7a:55:5e:4b:88:bc:e8:80:5d:cd:e4:01:77:83: e5:0a:70:74:08:0f:bc:ef:86:87:9b:0a:59:7b:76: de:98:9f:3d:22:2c:60:1b:0e:7d:6c:b7:cc:56:57: d2:bd:f8:40:ef:f6:80:a0:ff:9f:8e:99:7b:55:fe: 3a:28:4a:77:b3:23:1c:8a:7d:21:5a:46:cb:d5:ae: a5:58:99:f6:9d:7b:da:02:49:3c:43:17:42:6a:40: 62:83:bf:d5:8f:03:4c:98:62:a8:17:a0:22:b7:f3: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A7:91:27:CF:5F:FE:2C:85:CF:46:AF:75:31:A4:C4:26:E7:DB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d6bb9957-3d87-340e-a18c-043fc02daa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 192.175.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:88:09:b7:c4:50:78:48:ef:94:6b:ea:71:8c:2b:0e:47:26: 80:76:e0:65:bb:2b:a4:0c:dd:54:1f:d8:22:e0:a9:6f:c9:e4: 4c:94:f6:ce:91:c4:07:93:fb:2f:4b:d7:0e:5a:9d:cf:1a:64: 18:a8:8c:85:70:9c:76:52:67:af:a8:c8:b0:2b:b5:8f:76:f6: 68:be:b2:bb:c8:72:6a:5e:1d:90:4d:d8:52:5f:a4:0a:96:7f: 05:da:13:93:f3:ad:47:87:25:73:95:af:63:3d:4e:df:28:8c: 7a:22:72:0e:71:a2:6f:09:91:c2:da:1c:21:c3:d7:76:f4:4a: 4b:66:5e:7a:e8:47:b1:af:4a:de:19:19:3c:ff:3f:a8:2c:84: e5:97:95:cc:9c:3f:9a:5e:38:43:f1:33:75:9f:be:51:10:4c: c1:81:a8:9d:ab:44:1f:91:c8:45:fc:eb:14:f7:15:c5:59:81: a3:00:62:35:c4:2e:9b:86:e4:be:9e:b4:51:d3:63:88:bd:6a: 04:6a:a2:c6:f2:ef:58:12:e6:69:cf:ea:a7:07:87:01:a4:00: e0:a1:fa:16:32:50:e2:1c:46:f0:28:03:54:d1:89:f8:d8:53: 81:8a:fc:a5:ab:9a:54:c8:96:e9:39:49:52:c6:6b:df:95:e8: 60:15:af:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpvun0G2IOq1BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk YThjZDMyZDctOTYwOS00YTllLWEwNTUtNTBmMjk3NzU4ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtYrPI9yzNEGzq3AUNMTF7NsDqhihAASlmH +Ky7A9+RmemX5X+MAv9qYYIdTGV+FxNnkmeAzaJ3LMubSXtGM8mWxi6PKTXxsz1t dga98oUALAoAW3hJ5aQyKX1tgTl7GnwP2K7CHIrF7vk1dDQmCKbHi5ObHMdyguFf 6mEqxgXsDrSPAM8zlijuiLU61+vQyM+fMHfielVeS4i86IBdzeQBd4PlCnB0CA+8 74aHmwpZe3bemJ89IixgGw59bLfMVlfSvfhA7/aAoP+fjpl7Vf46KEp3syMcin0h WkbL1a6lWJn2nXvaAkk8QxdCakBig7/VjwNMmGKoF6Ait/O5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWnkSfPX/4shc9Gr3UxpMQm59vJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDZiYjk5NTctM2Q4Ny0z NDBlLWExOGMtMDQzZmMwMmRhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwK8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWICbfEUHhI75Rr6nGMKw5HJoB24GW7K6QM3VQf2CLgqW/J5EyU9s6R xAeT+y9L1w5anc8aZBiojIVwnHZSZ6+oyLArtY929mi+srvIcmpeHZBN2FJfpAqW fwXaE5PzrUeHJXOVr2M9Tt8ojHoicg5xom8JkcLaHCHD13b0SktmXnroR7GvSt4Z GTz/P6gshOWXlcycP5peOEPxM3WfvlEQTMGBqJ2rRB+RyEX86xT3FcVZgaMAYjXE LpuG5L6etFHTY4i9agRqosby71gS5mnP6qcHhwGkAOCh+hYyUOIcRvAoA1TRifjY U4GK/KWrmlTIluk5SVLGa9+V6GAVryE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org