$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa File: 51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa (raw, json) Hash identifier: PxrhEBFybRExSKRIWzqRvMzIrJf4+e2eHh4jjfhAoLo= Subject key identifier: 45:13:5F:AA:B2:47:C9:FB:A5:E2:48:2A:EF:6A:51:DD:74:6A:91:26 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F432858478E1BB3DD91240EEB56264B00 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 13332 IP address blocks: 172.84.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:b3:dd:91:24:0e:eb:56:26:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=fa8427d0-eeb7-4c37-99cc-b98b576e5a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:26:ca:f1:4d:63:cc:d3:fc:f2:74:09:a1: ae:58:5b:07:52:5d:8d:fa:5d:0f:cd:21:64:ae:54: a7:1e:a0:c4:8a:ce:04:89:f1:50:77:5a:c1:ba:61: 90:f5:11:cb:4f:14:8c:0c:b2:d4:5a:17:13:d2:a5: 83:9d:39:fd:c5:f1:a5:de:ff:98:b8:86:a8:67:db: cf:9f:ba:8c:2b:83:30:89:fe:65:8e:e9:82:85:0c: c8:bc:05:38:d5:6b:e5:2a:65:bd:6b:40:56:f6:77: 11:06:ad:50:42:99:dd:14:ff:10:60:7d:e0:6c:b8: 90:b1:a3:a4:0b:70:02:17:df:b4:a0:41:8d:94:e9: 55:5d:e4:97:4c:7e:d7:9f:39:56:e7:47:8d:42:40: 0e:a1:8b:92:2c:93:e9:1b:89:e6:9a:bc:a5:de:5a: 1c:37:cd:e0:c9:7f:f7:55:97:8c:50:f0:04:76:92: 9c:05:0b:d4:4d:9e:b5:8c:35:81:fa:21:1a:6d:1c: 96:3b:b3:50:d1:0e:0f:72:21:44:7b:4f:ee:ee:20: 38:69:d2:e3:29:0e:b6:6a:76:a8:36:ac:6f:75:76: af:5e:e7:21:69:45:4c:48:38:d0:e1:ee:69:42:7d: 59:eb:67:1e:6c:c1:6d:41:74:6a:db:12:40:82:f9: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:5F:AA:B2:47:C9:FB:A5:E2:48:2A:EF:6A:51:DD:74:6A:91:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c0:42:e7:1b:e6:49:d3:78:55:82:a1:b6:40:c3:50:56:12: d8:f2:e0:77:65:1d:7e:cb:e0:c6:6a:08:0d:d0:e2:31:cd:29: 9c:c3:a3:1d:6d:4a:b8:2c:2c:b6:e2:0f:c0:3a:46:1a:f0:50: 4a:ab:4c:86:6f:4d:f9:a4:dd:25:e5:68:3e:5e:14:fe:16:5c: 4a:e4:3f:e0:f4:95:fe:b9:00:9d:d1:2f:b8:61:35:70:c7:86: 68:fa:fa:9c:1f:54:82:8a:ee:f8:66:27:59:4e:ca:23:7c:d1: af:78:4d:b0:3c:69:50:89:6b:70:c2:8e:33:f7:f0:9b:52:53: c9:3b:96:21:70:bd:5f:a2:b3:ce:32:3d:ac:9a:bc:87:52:c4: 85:a3:df:5e:31:4a:ce:ab:ad:77:8b:74:ff:67:e7:ab:34:b8: 7b:a5:92:ca:3e:94:0d:cb:47:a1:01:5a:a0:35:2e:29:37:dc: c0:73:e0:ef:14:f6:90:8b:31:17:a9:c6:a8:09:3a:91:9b:f0: 0e:ea:0c:e2:65:6f:28:c6:89:93:60:fe:d3:1e:24:bc:b9:00: 5d:64:b0:43:bf:44:ee:7e:2d:11:fd:06:4c:85:36:c3:fb:ff: dc:fd:5d:f2:18:75:fd:54:d8:a8:51:2c:a8:bb:4b:2d:22:18: 88:8d:eb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7PdkSQO61YmSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmE4NDI3ZDAtZWViNy00YzM3LTk5Y2MtYjk4YjU3NmU1YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym4myvFNY8zT/PJ0CaGuWFsHUl2N+l0PzSFk rlSnHqDEis4EifFQd1rBumGQ9RHLTxSMDLLUWhcT0qWDnTn9xfGl3v+YuIaoZ9vP n7qMK4Mwif5ljumChQzIvAU41WvlKmW9a0BW9ncRBq1QQpndFP8QYH3gbLiQsaOk C3ACF9+0oEGNlOlVXeSXTH7XnzlW50eNQkAOoYuSLJPpG4nmmryl3locN83gyX/3 VZeMUPAEdpKcBQvUTZ61jDWB+iEabRyWO7NQ0Q4PciFEe0/u7iA4adLjKQ62anao NqxvdXavXuchaUVMSDjQ4e5pQn1Z62cebMFtQXRq2xJAgvlg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUTX6qyR8n7peJIKu9qUd10apEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNTFjNGVmMGUtOTZkYi0z NzFjLTk2OTgtYTg3ZTcyZGZkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3AQucb5knTeFWCobZAw1BWEtjy4HdlHX7L4MZqCA3Q4jHNKZzDox1t SrgsLLbiD8A6RhrwUEqrTIZvTfmk3SXlaD5eFP4WXErkP+D0lf65AJ3RL7hhNXDH hmj6+pwfVIKK7vhmJ1lOyiN80a94TbA8aVCJa3DCjjP38JtSU8k7liFwvV+is84y PayavIdSxIWj314xSs6rrXeLdP9n56s0uHulkso+lA3LR6EBWqA1Lik33MBz4O8U 9pCLMRepxqgJOpGb8A7qDOJlbyjGiZNg/tMeJLy5AF1ksEO/RO5+LRH9BkyFNsP7 /9z9XfIYdf1U2KhRLKi7Sy0iGIiN69I= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org