$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json) Hash identifier: hdQPR9DG5KBYDVqfDsGfTnjU6cRRAcIUV0zW55MKfOI= Subject key identifier: 09:F2:54:D8:B1:9B:D6:9C:33:A6:E5:80:07:72:A4:9C:9A:F7:03:8B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858478CB6AA722E70D2B5A5598C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:aa:72:2e:70:d2:b5:a5:59:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=f24a9236-8528-4363-ad4a-063e9e7725d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:da:22:bb:45:54:b9:25:4e:ca:a7:86:7b: 2c:fb:33:c0:50:d6:ef:7a:15:22:80:16:46:9b:bf: 4f:96:05:2c:72:6c:8d:9b:c8:af:1e:27:3a:b7:bb: 20:b7:a8:35:58:19:79:43:d5:52:2a:ab:21:a4:83: 8d:91:81:45:6c:fe:59:82:98:0a:93:b3:3b:f1:ba: 65:97:3b:c1:b5:fd:2e:3b:e6:da:d8:c3:c0:03:1a: ae:74:9f:d4:42:0c:d1:96:80:e1:17:0d:44:28:7e: 4e:95:08:ce:a9:99:b2:ac:cc:fa:e6:48:bb:82:05: 88:f6:87:e8:62:50:ac:b2:cd:b3:96:03:37:3f:1b: b1:24:09:65:91:da:fb:0a:aa:4b:a2:bf:47:8a:3e: bb:6f:d7:cd:63:f4:94:08:f8:03:c3:87:40:21:48: 98:9f:ef:6e:7e:bb:b9:b1:34:32:0f:03:11:0d:ca: 96:76:1f:bf:63:8b:06:e2:53:19:7d:91:af:cd:09: c7:83:b7:62:ed:6f:ed:44:4f:94:6c:47:10:8b:52: c2:9d:dd:92:ef:b7:93:a4:1a:61:a1:58:d7:da:e0: 54:81:4f:e4:15:1f:90:7f:59:3f:c5:6f:d6:d9:ef: 67:c7:c0:43:9e:8e:b9:46:28:bd:bc:1f:5f:17:c8: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:54:D8:B1:9B:D6:9C:33:A6:E5:80:07:72:A4:9C:9A:F7:03:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cd:c0:2c:bb:0e:bc:ae:5d:c0:f4:79:ca:a0:14:03:10:6e: 76:4a:cd:d0:70:7e:02:cd:4e:be:9d:24:a9:dd:ae:1a:c7:ae: a2:38:ac:15:b5:44:96:44:c3:73:a8:1a:34:97:89:31:db:86: c8:51:6e:87:ec:e0:d6:db:13:80:55:18:20:5b:1e:c3:28:ab: a6:55:da:3a:3a:24:5d:59:09:af:d1:6f:fe:a8:13:44:60:4f: fd:f9:c4:32:3e:97:13:73:b9:62:52:38:d3:1a:17:94:87:0d: 37:87:74:7e:f8:45:b3:40:88:bd:3e:03:b7:f9:cd:2a:bc:d0: dc:72:30:9b:07:b9:fb:ee:f4:97:ec:ad:c6:96:0c:09:17:3f: 65:f8:58:ec:86:b9:d8:9a:5b:4b:72:22:cb:82:9c:5a:94:77: a4:0a:f7:a4:0c:b4:99:fc:01:7e:98:df:82:4e:48:3d:b8:fb: e9:b8:f3:eb:9f:67:7a:5e:35:28:72:2b:39:07:23:39:2b:66: 86:4d:b6:5c:e4:1e:30:77:72:c2:ec:ee:53:3d:cb:ee:10:8b: 6e:3d:6b:6b:53:ed:07:52:18:fd:b6:90:7a:b2:94:d4:ce:24: ec:e7:af:7b:3d:0d:65:2e:10:ea:96:4c:22:41:02:f9:c5:9a: f9:d2:38:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtqpyLnDStaVZjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZjI0YTkyMzYtODUyOC00MzYzLWFkNGEtMDYzZTllNzcyNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWTaIrtFVLklTsqnhnss+zPAUNbvehUigBZG m79PlgUscmyNm8ivHic6t7sgt6g1WBl5Q9VSKqshpIONkYFFbP5ZgpgKk7M78bpl lzvBtf0uO+ba2MPAAxqudJ/UQgzRloDhFw1EKH5OlQjOqZmyrMz65ki7ggWI9ofo YlCsss2zlgM3PxuxJAllkdr7CqpLor9Hij67b9fNY/SUCPgDw4dAIUiYn+9ufru5 sTQyDwMRDcqWdh+/Y4sG4lMZfZGvzQnHg7di7W/tRE+UbEcQi1LCnd2S77eTpBph oVjX2uBUgU/kFR+Qf1k/xW/W2e9nx8BDno65Rii9vB9fF8iYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnyVNixm9acM6blgAdypJya9wOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGY2YWE5YTAtYjMyZi0z ZDI5LWExNDctMDRkNjJhYTFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvNwCy7DryuXcD0ecqgFAMQbnZKzdBwfgLNTr6dJKndrhrHrqI4rBW1 RJZEw3OoGjSXiTHbhshRbofs4NbbE4BVGCBbHsMoq6ZV2jo6JF1ZCa/Rb/6oE0Rg T/35xDI+lxNzuWJSONMaF5SHDTeHdH74RbNAiL0+A7f5zSq80NxyMJsHufvu9Jfs rcaWDAkXP2X4WOyGudiaW0tyIsuCnFqUd6QK96QMtJn8AX6Y34JOSD24++m48+uf Z3peNShyKzkHIzkrZoZNtlzkHjB3csLs7lM9y+4Qi249a2tT7QdSGP22kHqylNTO JOznr3s9DWUuEOqWTCJBAvnFmvnSOHo= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org