$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa File: e8c8d5c6-32bd-3820-990c-f66f5a163261.roa (raw, json) Hash identifier: NqGHfJRTYy0YZknsucjOItlHsZz+iq66I1yWKSRsm/0= Subject key identifier: A0:4A:F8:91:F5:D3:8F:AB:B6:36:3D:BB:09:CD:86:58:4B:37:75:B7 Certificate issuer: /CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6 Certificate serial: 010D0C9F43285847B3CC146A4261B52A3E51F100 Authority key identifier: 91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 398038 IP address blocks: 161.38.62.0/23 maxlen: 24 192.173.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:14:6a:42:61:b5:2a:3e:51:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=f6adf6e7-93c3-4f84-ac31-c53ed5dae26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:41:fd:d0:aa:65:31:95:43:b1:d7:90:17: a3:50:53:fc:1f:7c:2f:13:0b:6e:0e:aa:bd:a4:c8: 15:60:f5:72:fc:38:1a:fe:fe:cd:9b:eb:45:7f:12: 42:31:44:35:a0:37:56:19:d2:9c:80:5d:55:57:3f: 97:76:36:3d:a4:9b:49:70:92:89:2c:55:91:6d:1b: 68:58:b2:35:ee:74:06:8d:06:e8:b6:9d:8c:51:e3: b8:78:57:0b:aa:43:3e:75:5a:cd:e2:d9:1b:c9:7f: 09:0b:84:16:5d:5a:c1:ed:ca:6e:f6:2c:31:7d:50: 33:a7:8b:55:65:e6:b0:66:f2:20:d1:d3:7b:25:b9: 72:15:75:1a:5c:75:77:24:08:d7:89:04:d3:29:cb: c0:77:94:fb:3d:f3:c8:03:3f:38:da:4f:4e:a2:6b: 99:5d:b3:cd:1b:b8:1e:6c:c3:fd:4c:f4:5d:8b:f8: c5:80:2a:b4:3c:2e:ce:2f:1f:54:65:52:dd:2e:06: ef:4b:0e:c8:01:83:06:df:ad:2b:fb:07:fb:58:f2: 14:46:bf:c8:a2:2c:0a:0a:fa:7d:4c:02:c1:24:2f: b2:84:3b:64:81:3b:a7:89:c4:5d:6c:39:6f:2c:3b: ed:11:41:21:c2:3a:15:0e:a7:a0:b8:50:e9:2b:a2: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:F8:91:F5:D3:8F:AB:B6:36:3D:BB:09:CD:86:58:4B:37:75:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl X509v3 Authority Key Identifier: keyid:91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer sbgp-ipAddrBlock: critical IPv4: 161.38.62.0/23 192.173.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:32:34:84:06:76:3f:52:87:3c:36:9c:9d:be:24:58:73: 43:f3:fa:4f:35:da:7a:49:52:0a:0c:6d:6f:98:c2:db:91:82: 98:52:05:f4:b5:69:b5:42:48:29:aa:86:0c:3c:23:94:77:8e: 00:64:08:f0:02:5b:fc:1d:22:19:0a:aa:72:ee:9f:04:ef:6f: 45:42:55:12:03:7e:ac:df:29:72:a3:f2:de:ac:bf:06:81:db: d3:ce:8c:2d:10:6c:28:64:63:83:91:a2:10:a0:5a:f7:07:70: f8:02:a6:fd:10:4a:50:d8:6b:45:6f:db:a8:bd:1a:35:80:dc: d2:e0:53:7b:c7:15:ac:f9:74:ed:90:1c:0b:9b:7d:c0:16:e5: 9b:b7:e1:ad:53:e9:ab:30:a6:92:7f:86:1c:9d:c6:98:5e:05: 79:11:3c:e7:a0:eb:d2:77:73:98:11:d2:b8:68:4a:47:b8:a0: 77:c2:2c:cc:da:d9:43:14:19:f9:08:31:a6:a9:51:41:e7:b5: 13:c5:b3:cc:4d:3d:fb:50:d5:3b:82:47:9f:d2:23:85:d9:91: 8a:0b:50:29:03:98:65:a0:18:39:e0:a8:3b:0b:8c:15:49:4c: b0:d4:c2:2b:44:5d:7d:52:07:aa:1f:fd:42:29:64:1a:06:26: 36:84:a8:c6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEezzBRqQmG1Kj5R8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjYWYwNzItMTk5ZC00M2EzLThiOGEtMGEyYjI4OTQw YWM2MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZjZhZGY2ZTctOTNjMy00Zjg0LWFjMzEtYzUzZWQ1ZGFlMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GFB/dCqZTGVQ7HXkBejUFP8H3wvEwtuDqq9 pMgVYPVy/Dga/v7Nm+tFfxJCMUQ1oDdWGdKcgF1VVz+XdjY9pJtJcJKJLFWRbRto WLI17nQGjQbotp2MUeO4eFcLqkM+dVrN4tkbyX8JC4QWXVrB7cpu9iwxfVAzp4tV ZeawZvIg0dN7JblyFXUaXHV3JAjXiQTTKcvAd5T7PfPIAz842k9OomuZXbPNG7ge bMP9TPRdi/jFgCq0PC7OLx9UZVLdLgbvSw7IAYMG360r+wf7WPIURr/IoiwKCvp9 TALBJC+yhDtkgTunicRdbDlvLDvtEUEhwjoVDqeguFDpK6IDNwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKBK+JH104+rtjY9uwnNhlhLN3W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNh ZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJiMjg5NDBhYzYvZThjOGQ1YzYtMzJiZC0z ODIwLTk5MGMtZjY2ZjVhMTYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGRjYWYwNzItMTk5ZC00M2EzLThi OGEtMGEyYjI4OTQwYWM2LzBkY2FmMDcyLTE5OWQtNDNhMy04YjhhLTBhMmIyODk0 MGFjNi5jcmwwHwYDVR0jBBgwFoAUke2OiLD9kRVXrimqO8TepIdQPZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNhZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJi Mjg5NDBhYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoSY+AwQD wK2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH4cMjSEBnY/Uoc8NpydviRYc0Pz+k812npJUgoMbW+YwtuR gphSBfS1abVCSCmqhgw8I5R3jgBkCPACW/wdIhkKqnLunwTvb0VCVRIDfqzfKXKj 8t6svwaB29POjC0QbChkY4ORohCgWvcHcPgCpv0QSlDYa0Vv26i9GjWA3NLgU3vH Faz5dO2QHAubfcAW5Zu34a1T6aswppJ/hhydxpheBXkRPOeg69J3c5gR0rhoSke4 oHfCLMza2UMUGfkIMaapUUHntRPFs8xNPftQ1TuCR5/SI4XZkYoLUCkDmGWgGDng qDsLjBVJTLDUwitEXX1SB6of/UIpZBoGJjaEqMY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org