$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa File: cebdec51-99ad-378c-9ad6-936ea7e7b823.roa (raw, json) Hash identifier: xv1a2BhxuS8MYE69OaIYNLJ9AUS4GTny/z4oRbXbQio= Subject key identifier: CA:0D:B9:5E:ED:9E:6B:F7:DE:0D:45:3A:8A:2E:55:FF:2D:38:07:B4 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F432858478E1BB3F4E198456A81B0A380 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 19740 IP address blocks: 172.84.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:b3:f4:e1:98:45:6a:81:b0:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=6b07f6d5-6bff-4535-b11a-fe5ea51f716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:4f:52:cf:d5:55:ed:cb:36:82:86:21:4c: 64:7f:ec:00:d2:10:1c:88:3e:e8:bb:94:40:59:cb: 88:c0:2c:29:b4:d6:8c:02:06:ed:f9:f4:8f:6f:32: f8:74:7c:0b:ce:15:ec:3f:11:29:24:ba:1d:02:d7: 88:16:7a:d9:84:02:8d:8a:19:e0:13:57:2e:a7:a2: 79:68:37:16:94:38:7f:b4:f0:d9:40:47:e5:df:61: 26:5b:50:49:ca:ce:18:8d:fc:f0:6f:21:d0:fb:6e: 6c:cf:43:ed:dd:0e:be:33:36:0c:9f:56:7e:b4:27: 42:53:1d:4b:5a:79:c3:63:52:53:83:29:be:b9:8e: 74:66:e1:f4:15:d1:43:71:bb:fa:91:78:10:bb:30: ad:62:13:9d:23:9c:b3:8c:e6:5f:b3:d6:df:d9:a6: 7d:0a:10:50:72:3d:2c:dc:b7:64:3a:91:45:0e:ca: 52:ba:4d:5d:e4:c4:3b:67:a3:83:77:e2:75:3e:ef: ec:ce:b6:3c:a3:39:18:fb:c7:54:46:63:b4:78:01: c1:49:90:09:cd:e7:db:19:82:35:4d:5f:e1:38:00: 3b:fe:54:27:a8:14:52:a6:0e:ae:3f:c3:51:6c:af: 5a:8b:79:f4:41:4e:26:e8:4d:c5:f5:04:aa:00:f8: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0D:B9:5E:ED:9E:6B:F7:DE:0D:45:3A:8A:2E:55:FF:2D:38:07:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b7:6f:81:bd:b4:d0:a1:9e:b2:aa:19:6c:d8:6e:75:86:ff: 5e:87:ed:c0:b3:bf:0c:fd:f0:16:7b:69:fc:7a:9c:a3:5e:b0: 82:d6:fd:7e:63:92:1e:97:5e:a1:c0:82:6a:45:20:4c:bb:f3: 48:b9:c6:e8:ad:e8:da:ad:5d:b9:99:f8:4e:74:6f:8d:b2:33: a6:78:db:32:e2:bc:d3:6c:5d:6f:d7:55:5b:6b:0f:c0:41:e2: 46:fd:8f:28:72:2d:af:e9:8d:69:ed:37:52:13:78:6f:53:31: b6:56:a5:ee:0c:3b:ef:8e:2f:e3:a2:3a:e4:f3:b8:20:9a:f9: 62:4e:d9:e1:49:08:46:c5:d3:4c:ac:a0:ee:14:46:f9:dd:70: 5b:c1:70:65:93:fb:e9:2d:36:a3:f9:f6:e7:36:9a:78:ca:82: 17:b8:7c:16:7c:f6:ca:e6:b1:49:5a:fb:6d:c5:f0:25:8c:55: 90:b8:ff:09:85:b1:38:99:6d:1e:34:cf:89:65:c4:09:5d:38: c6:15:e3:0f:2c:08:91:23:a3:c3:08:45:0b:30:dd:45:e3:18: 39:ab:48:2f:9e:53:03:a1:80:b9:c4:88:7d:12:af:9c:51:81: 32:e0:45:80:af:39:62:17:c5:d3:30:32:82:05:c0:10:e8:7c: bc:e0:15:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7P04ZhFaoGwo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NmIwN2Y2ZDUtNmJmZi00NTM1LWIxMWEtZmU1ZWE1MWY3MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnahPUs/VVe3LNoKGIUxkf+wA0hAciD7ou5RA WcuIwCwptNaMAgbt+fSPbzL4dHwLzhXsPxEpJLodAteIFnrZhAKNihngE1cup6J5 aDcWlDh/tPDZQEfl32EmW1BJys4YjfzwbyHQ+25sz0Pt3Q6+MzYMn1Z+tCdCUx1L WnnDY1JTgym+uY50ZuH0FdFDcbv6kXgQuzCtYhOdI5yzjOZfs9bf2aZ9ChBQcj0s 3LdkOpFFDspSuk1d5MQ7Z6ODd+J1Pu/szrY8ozkY+8dURmO0eAHBSZAJzefbGYI1 TV/hOAA7/lQnqBRSpg6uP8NRbK9ai3n0QU4m6E3F9QSqAPhCFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoNuV7tnmv33g1FOoouVf8tOAe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvY2ViZGVjNTEtOTlhZC0z NzhjLTlhZDYtOTM2ZWE3ZTdiODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB63b4G9tNChnrKqGWzYbnWG/16H7cCzvwz98BZ7afx6nKNesILW/X5j kh6XXqHAgmpFIEy780i5xuit6NqtXbmZ+E50b42yM6Z42zLivNNsXW/XVVtrD8BB 4kb9jyhyLa/pjWntN1ITeG9TMbZWpe4MO++OL+OiOuTzuCCa+WJO2eFJCEbF00ys oO4URvndcFvBcGWT++ktNqP59uc2mnjKghe4fBZ89srmsUla+23F8CWMVZC4/wmF sTiZbR40z4llxAldOMYV4w8sCJEjo8MIRQsw3UXjGDmrSC+eUwOhgLnEiH0Sr5xR gTLgRYCvOWIXxdMwMoIFwBDofLzgFQc= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org