$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa File: c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa (raw, json) Hash identifier: B7oN3X1zlE57ggKupWEQQrlPlGcl9VVoJug5T6xTM2g= Subject key identifier: 1F:AF:AF:FB:CC:8D:76:10:4F:DF:6F:B5:73:57:3A:11:F9:6D:50:30 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285847DF2F574EBB76E52C9BB70C90 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 0 IP address blocks: 192.74.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:57:4e:bb:76:e5:2c:9b:b7:0c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=511b1cf6-136d-4ebf-9848-624e0ff2c884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:61:f2:4d:c8:91:3a:4a:38:de:90:b0:66:ee: 2e:bf:77:97:ed:01:29:c5:3c:65:1e:d4:18:97:1f: 3a:28:95:15:5b:c5:d2:1b:0e:3d:90:70:16:4b:33: 5f:6e:c7:92:ed:54:bb:86:9c:46:65:81:41:e4:54: 08:a7:23:bd:a4:7e:76:9d:f8:13:0a:26:4d:14:17: 0a:84:60:fe:07:75:bc:3a:7b:50:53:4d:71:ff:ca: b5:dc:c8:87:b5:ad:b7:dd:f9:e5:07:53:0b:f8:fc: 6b:b9:47:06:e8:01:b0:11:47:50:7a:b8:7f:59:a4: ed:0e:c8:cf:c5:30:2a:a8:6a:d4:de:f2:5e:76:7f: aa:e3:05:ab:aa:f7:15:7b:93:27:df:da:08:b6:16: 79:50:f7:9c:c6:d3:fd:01:ea:a4:14:2d:cc:7b:21: 8c:0f:ed:dc:ca:f9:f2:b2:07:33:58:c1:91:0f:65: af:8b:72:e9:76:be:d7:09:47:80:80:46:b4:a5:49: af:f9:cb:81:d0:41:b9:78:e9:bc:c4:c6:34:a0:50: b3:2a:2b:21:33:d6:d1:8f:41:d5:b0:9c:d5:d6:15: ee:e9:07:4e:a7:0e:d0:12:e8:0e:99:b6:30:6a:c9: 13:6b:a5:74:77:22:55:a4:e5:a3:22:69:f5:b4:ad: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:AF:FB:CC:8D:76:10:4F:DF:6F:B5:73:57:3A:11:F9:6D:50:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/c2fcd16d-d220-3b8d-8e0f-1a55e321c3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.74.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d7:63:0e:0e:98:3e:bc:0c:d8:68:04:ae:5d:3f:c9:b5:d4: a0:3e:7f:f1:d8:9a:c6:92:10:a8:b6:8c:29:1a:1c:70:5f:c2: 80:fd:1c:3d:a2:8a:2f:68:df:66:5a:2e:71:87:b2:0a:ed:03: 50:27:a0:9a:57:d1:5d:87:26:0c:ce:65:95:be:f8:cd:cd:db: b6:5f:07:25:fc:15:28:06:f0:1d:15:02:fd:aa:4d:25:4e:27: 86:ef:9c:ea:7c:8c:c6:19:26:32:7d:5e:f1:05:07:bc:5f:50: 7e:5c:18:ee:ce:ff:02:91:91:3e:c0:62:e5:66:02:31:06:19: 3a:76:c1:cf:73:0e:2f:ed:7b:31:97:b7:4a:dc:94:99:30:d0: 32:b7:99:86:82:8e:71:54:e3:aa:68:9e:ed:5b:91:ea:3d:33: b3:23:be:a2:a3:4d:92:4d:3f:de:89:64:05:b0:a5:6c:94:be: a4:f6:c5:65:55:f6:87:07:45:32:79:db:1e:69:14:73:61:ea: a0:b4:4b:4e:4d:53:44:88:a1:18:50:3e:09:fd:63:69:f0:a1: 78:c8:74:29:6c:ef:16:8b:11:c6:82:e0:e3:d3:ca:f8:17:14: a0:fe:bb:b3:8d:cb:cf:05:96:58:28:3a:f5:1a:f7:46:8f:ce: 53:25:91:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1dOu3blLJu3DJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk NTExYjFjZjYtMTM2ZC00ZWJmLTk4NDgtNjI0ZTBmZjJjODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmHyTciROko43pCwZu4uv3eX7QEpxTxlHtQY lx86KJUVW8XSGw49kHAWSzNfbseS7VS7hpxGZYFB5FQIpyO9pH52nfgTCiZNFBcK hGD+B3W8OntQU01x/8q13MiHta233fnlB1ML+PxruUcG6AGwEUdQerh/WaTtDsjP xTAqqGrU3vJedn+q4wWrqvcVe5Mn39oIthZ5UPecxtP9AeqkFC3MeyGMD+3cyvny sgczWMGRD2Wvi3Lpdr7XCUeAgEa0pUmv+cuB0EG5eOm8xMY0oFCzKishM9bRj0HV sJzV1hXu6QdOpw7QEugOmbYwaskTa6V0dyJVpOWjImn1tK0UKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vr/vMjXYQT99vtXNXOhH5bVAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYzJmY2QxNmQtZDIyMC0z YjhkLThlMGYtMWE1NWUzMjFjM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwErZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/XYw4OmD68DNhoBK5dP8m11KA+f/HYmsaSEKi2jCkaHHBfwoD9HD2i ii9o32ZaLnGHsgrtA1AnoJpX0V2HJgzOZZW++M3N27ZfByX8FSgG8B0VAv2qTSVO J4bvnOp8jMYZJjJ9XvEFB7xfUH5cGO7O/wKRkT7AYuVmAjEGGTp2wc9zDi/tezGX t0rclJkw0DK3mYaCjnFU46ponu1bkeo9M7MjvqKjTZJNP96JZAWwpWyUvqT2xWVV 9ocHRTJ52x5pFHNh6qC0S05NU0SIoRhQPgn9Y2nwoXjIdCls7xaLEcaC4OPTyvgX FKD+u7ONy88FllgoOvUa90aPzlMlkQs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org