$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa File: 8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa (raw, json) Hash identifier: QIvwO0sONi6tAv9MMegqFroFW9fqnJx8myX9eXjrHOU= Subject key identifier: D9:6A:26:15:0F:38:94:BE:FE:E8:21:26:03:85:B0:F9:DF:B0:50:77 Certificate issuer: /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Certificate serial: 010D0C9F4328584733609820B1621F5FA9E07D40 Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa Signing time: Fri 13 Sep 2024 13:00:41 +0000 ROA not before: Fri 13 Sep 2024 13:00:41 +0000 ROA not after: Thu 12 Dec 2024 14:00:41 +0000 asID: 62537 IP address blocks: 162.222.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:60:98:20:b1:62:1f:5f:a9:e0:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f Validity Not Before: Sep 13 13:00:41 2024 GMT Not After : Dec 12 14:00:41 2024 GMT Subject: CN=f9b5d461-6536-48d2-ab7c-d4b967160267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:62:34:f9:07:cd:16:c4:af:81:1f:11:d0: 1b:2f:49:c4:d3:eb:38:08:8c:cc:df:18:de:6d:5b: 71:76:43:ef:b8:5f:08:39:02:3f:f1:d4:5b:cf:2d: 1e:ea:87:92:6a:81:1f:6e:0f:9d:03:ab:06:55:21: 84:87:6c:bc:0b:2e:3e:13:2f:87:4d:db:4a:1e:cb: 9e:25:2f:28:81:6e:03:a3:c8:82:29:a7:b5:69:7e: 4f:82:6c:82:6a:32:cb:19:0b:61:a7:9e:f1:bb:69: 9b:83:6e:da:30:7f:d5:45:b4:a0:93:ee:5d:26:97: f4:5d:cb:f8:cc:89:3c:5a:48:3d:5e:af:06:fa:05: 59:35:0f:27:60:af:14:fb:17:c6:c2:19:c5:1c:99: b7:cd:90:fa:48:f7:66:10:ed:19:ab:ba:a5:30:a6: 6d:71:78:ca:87:7b:c1:cb:92:d0:2e:ac:89:a1:39: df:3d:ce:45:7b:11:13:e3:28:0b:13:45:86:0f:62: 13:cc:13:82:8d:50:4d:da:ad:96:a1:5d:92:67:d9: 35:61:05:43:74:a8:c7:1a:c3:d9:d6:67:8b:37:7f: 3c:01:4c:0e:15:b6:ef:22:23:cc:1b:32:99:80:94: 0f:1c:0d:6f:19:9a:0e:6d:14:0e:d8:0c:71:4c:e1: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:26:15:0F:38:94:BE:FE:E8:21:26:03:85:B0:F9:DF:B0:50:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/8dd4b4ac-cebb-3a39-80ab-e5a98349748b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl X509v3 Authority Key Identifier: keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:87:33:35:b3:99:7b:95:b2:b0:87:da:bd:df:a8:ea:0d:67: d6:8c:8b:a4:ec:e2:c5:4b:6b:2f:53:53:e7:3c:54:ab:84:ba: f4:53:35:c2:0d:82:cd:72:ef:04:7d:10:8c:dd:ac:10:cf:a9: 28:4e:59:d1:4e:76:de:16:6f:6a:e2:fa:c3:52:29:4a:40:b7: 48:58:c3:4c:53:ba:45:74:6d:e2:bc:69:fb:02:95:cf:b8:a3: 5a:f6:d2:28:8a:78:b1:a3:97:dc:e9:09:b0:c4:4f:b1:36:5c: 58:fa:95:bd:b4:f4:fb:8e:e2:4c:55:c8:48:22:d9:4d:1b:8f: 2f:a6:e6:c4:78:52:c6:a9:ae:ec:bf:15:ed:c3:a7:f0:71:88: 2d:50:0e:52:58:52:a1:f3:2f:b1:ce:b0:d8:7b:bc:a4:a8:47: cc:5c:c3:f5:3d:92:5d:74:8c:ee:c7:33:15:4e:31:6e:33:0c: 15:b6:7c:6a:b3:ff:87:fe:16:d4:75:43:4b:9c:23:d5:66:9d: 91:a4:2a:d1:55:5a:a3:67:d9:75:ac:32:39:ef:c2:ad:40:bd: c1:b3:21:b8:56:51:07:21:ca:60:9e:b8:4a:61:21:c5:0c:41: e1:24:4f:ef:f8:71:e4:33:2b:b1:eb:c4:a7:4b:73:b3:01:bc: 0a:d7:d1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJggsWIfX6ngfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3Y2E3OWEtZjhmNS00MDhhLTg2ZmItNDcyZDYzZWQx NTZmMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZjliNWQ0NjEtNjUzNi00OGQyLWFiN2MtZDRiOTY3MTYwMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC5iNPkHzRbEr4EfEdAbL0nE0+s4CIzM3xje bVtxdkPvuF8IOQI/8dRbzy0e6oeSaoEfbg+dA6sGVSGEh2y8Cy4+Ey+HTdtKHsue JS8ogW4Do8iCKae1aX5PgmyCajLLGQthp57xu2mbg27aMH/VRbSgk+5dJpf0Xcv4 zIk8Wkg9Xq8G+gVZNQ8nYK8U+xfGwhnFHJm3zZD6SPdmEO0Zq7qlMKZtcXjKh3vB y5LQLqyJoTnfPc5FexET4ygLE0WGD2ITzBOCjVBN2q2WoV2SZ9k1YQVDdKjHGsPZ 1meLN388AUwOFbbvIiPMGzKZgJQPHA1vGZoObRQO2AxxTOEn4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlqJhUPOJS+/ughJgOFsPnfsFB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdj YTc5YS1mOGY1LTQwOGEtODZmYi00NzJkNjNlZDE1NmYvOGRkNGI0YWMtY2ViYi0z YTM5LTgwYWItZTVhOTgzNDk3NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGY3Y2E3OWEtZjhmNS00MDhhLTg2 ZmItNDcyZDYzZWQxNTZmL2RmN2NhNzlhLWY4ZjUtNDA4YS04NmZiLTQ3MmQ2M2Vk MTU2Zi5jcmwwHwYDVR0jBBgwFoAUzSXSHbTlO8LOT0VcD3Q2TcqiRZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjdjYTc5YS1mOGY1LTQwOGEtODZmYi00NzJk NjNlZDE1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGHMzWzmXuVsrCH2r3fqOoNZ9aMi6Ts4sVLay9TU+c8VKuEuvRTNcIN gs1y7wR9EIzdrBDPqShOWdFOdt4Wb2ri+sNSKUpAt0hYw0xTukV0beK8afsClc+4 o1r20iiKeLGjl9zpCbDET7E2XFj6lb209PuO4kxVyEgi2U0bjy+m5sR4Usapruy/ Fe3Dp/BxiC1QDlJYUqHzL7HOsNh7vKSoR8xcw/U9kl10jO7HMxVOMW4zDBW2fGqz /4f+FtR1Q0ucI9VmnZGkKtFVWqNn2XWsMjnvwq1AvcGzIbhWUQchymCeuEphIcUM QeEkT+/4ceQzK7HrxKdLc7MBvArX0TE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org