$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa File: 8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa (raw, json) Hash identifier: ep4/1ndG6itd/r0o5/aGSFkgP7wcz9VWJqEnkgkl6I0= Subject key identifier: F0:70:ED:4D:63:04:18:6D:59:E7:A3:10:7F:75:D2:EA:05:AB:DE:82 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285847DF2F54140B9DB08E14043D80 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 0 IP address blocks: 192.188.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:54:14:0b:9d:b0:8e:14:04:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=3dfaa876-a81b-49cc-a9b2-8c9aadac0461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:1b:9b:dc:ec:97:41:18:95:96:e8:0f:ed: b5:da:d5:aa:01:52:16:2f:d3:d8:f5:2b:26:fa:8e: 0c:eb:f2:13:ae:9f:8b:ed:32:16:aa:5c:d3:58:79: f2:9f:aa:fb:12:d9:df:06:71:e2:44:b0:40:b0:0c: b8:ae:cb:04:47:6d:d7:48:6c:78:0b:21:8f:0d:12: 63:95:a9:48:5d:d6:53:96:69:92:9e:d6:84:77:71: 4e:61:20:cb:3b:28:70:ff:b5:1d:38:ae:79:3a:89: 49:e0:a6:ac:59:7f:d6:c6:2f:b3:00:b3:53:17:c2: 0d:d2:d2:36:18:f2:03:ed:ca:9f:af:f8:3d:36:2a: be:05:60:c3:e9:7e:8c:2e:e7:01:8d:f0:a0:16:b8: b0:91:88:95:c8:62:d4:25:9b:f7:4c:46:b5:9d:7f: a3:81:23:87:19:00:9e:f2:9b:8c:dc:61:bc:c5:35: 3b:ba:a8:6a:9f:1d:ea:08:9a:de:7b:f5:e0:ef:23: ad:aa:66:6d:57:6d:4f:ee:35:c9:18:0e:c7:4d:40: a5:a3:51:18:59:f8:60:1d:49:b8:fb:f0:ce:23:ee: 48:f6:32:91:52:17:de:d3:09:82:26:e3:30:4f:74: 19:a4:dc:9e:7e:4e:c8:4b:30:89:86:29:53:83:3c: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:ED:4D:63:04:18:6D:59:E7:A3:10:7F:75:D2:EA:05:AB:DE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/8c5b42ca-1d65-3320-95f1-8638aec88cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d4:2d:bd:a4:61:97:22:6e:ef:7a:82:e1:62:fb:f9:64:37: 6e:9e:f7:dc:37:af:7f:e0:84:30:91:a8:0e:53:51:3c:8b:49: 14:7d:23:a7:e9:c8:21:8a:1e:ca:94:cf:30:f9:c5:39:31:c5: 25:de:a1:ab:83:ca:99:32:ed:32:28:c3:e9:a6:8c:b2:5d:9b: 88:64:a3:32:2b:33:08:e2:17:bc:9f:20:da:65:82:ef:c6:fa: 75:df:4c:7c:6d:96:fc:ef:15:93:37:d9:8f:fa:75:33:1f:04: 71:66:f5:cd:4a:09:51:b5:4b:03:68:7a:08:af:6c:a2:0c:4a: c8:fe:d0:27:5a:0e:9e:66:9d:34:bd:22:e8:fd:89:a1:77:6c: 8f:a7:66:68:11:3e:c2:42:75:87:c5:d3:0f:8e:58:58:dd:14: 49:8f:42:cd:c2:f5:af:05:e3:09:a4:c4:f1:06:00:cc:c7:a9: 23:ae:93:a4:42:48:57:67:b8:8f:9a:44:bd:b5:81:44:16:6e: ea:d5:fb:de:a5:1f:21:b4:1d:56:f2:97:2c:73:f6:ca:b0:a6: ab:4e:e9:79:e8:c4:09:b9:89:5e:04:f8:d3:a7:71:00:6f:bb: 4d:c2:e9:fe:87:49:ea:c1:1c:09:4d:d5:2c:f1:56:f7:c0:09: 38:37:f8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1QUC52wjhQEPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk M2RmYWE4NzYtYTgxYi00OWNjLWE5YjItOGM5YWFkYWMwNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJYbm9zsl0EYlZboD+212tWqAVIWL9PY9Ssm +o4M6/ITrp+L7TIWqlzTWHnyn6r7EtnfBnHiRLBAsAy4rssER23XSGx4CyGPDRJj lalIXdZTlmmSntaEd3FOYSDLOyhw/7UdOK55OolJ4KasWX/Wxi+zALNTF8IN0tI2 GPID7cqfr/g9Niq+BWDD6X6MLucBjfCgFriwkYiVyGLUJZv3TEa1nX+jgSOHGQCe 8puM3GG8xTU7uqhqnx3qCJree/Xg7yOtqmZtV21P7jXJGA7HTUClo1EYWfhgHUm4 +/DOI+5I9jKRUhfe0wmCJuMwT3QZpNyefk7ISzCJhilTgzw4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBw7U1jBBhtWeejEH910uoFq96CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOGM1YjQyY2EtMWQ2NS0z MzIwLTk1ZjEtODYzOGFlYzg4Y2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvULb2kYZcibu96guFi+/lkN26e99w3r3/ghDCRqA5TUTyLSRR9I6fp yCGKHsqUzzD5xTkxxSXeoauDypky7TIow+mmjLJdm4hkozIrMwjiF7yfINplgu/G +nXfTHxtlvzvFZM32Y/6dTMfBHFm9c1KCVG1SwNoegivbKIMSsj+0CdaDp5mnTS9 Iuj9iaF3bI+nZmgRPsJCdYfF0w+OWFjdFEmPQs3C9a8F4wmkxPEGAMzHqSOuk6RC SFdnuI+aRL21gUQWburV+96lHyG0HVbylyxz9sqwpqtO6XnoxAm5iV4E+NOncQBv u03C6f6HSerBHAlN1SzxVvfACTg3+Nk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org