$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa File: 88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa (raw, json) Hash identifier: h1B6X2sP2whxDirbILiYYUxVR6/hs9kb8UgUdOZPRJE= Subject key identifier: 39:BD:55:45:9E:40:DB:D5:57:CC:12:C1:3D:F8:37:42:F2:F6:D6:F6 Certificate issuer: /CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Certificate serial: 010D0C9F43285847A5D6A480F1588A6303EB2000 Authority key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 397265 IP address blocks: 158.51.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a4:80:f1:58:8a:63:03:eb:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=8cd7cc04-3697-4596-9657-f6c5a67ecddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:35:f3:5b:0a:3b:70:6e:e8:3c:b2:8e:3b: 19:c1:0c:67:fe:62:5b:a2:9c:ee:fa:92:5d:00:f7: d7:85:80:f6:9f:b7:97:4b:58:7a:80:82:ab:c1:40: 0f:df:b6:71:a8:ab:8c:a7:74:3b:a9:be:1a:a4:a1: 1f:94:6e:56:15:e8:90:58:57:50:2a:34:f3:a8:7e: fc:80:ce:6b:13:ef:22:a0:1f:a7:10:35:62:00:f1: 22:85:11:42:78:7d:a9:f1:20:08:aa:e0:6c:b5:ff: f5:5f:d1:5b:97:64:ad:43:1d:24:a5:19:d5:f2:48: fe:73:c6:02:a6:38:4a:f4:4f:6d:f8:fc:62:52:15: ff:33:52:69:4b:7a:76:b6:f2:09:8d:88:44:57:30: 46:2e:4f:ac:0b:a4:98:23:33:d2:4f:a2:5d:0f:70: 2d:8f:91:01:61:93:ae:5f:b1:09:57:60:45:25:5f: 0d:c7:cc:06:1e:be:9c:07:01:77:6b:f0:10:d1:41: c7:13:fd:16:86:e3:54:f9:8d:d0:7d:c5:64:7a:e2: f3:0a:2e:0d:c5:88:58:f4:04:47:02:47:ce:a8:b8: 5f:a5:a9:5b:07:d9:ca:d5:7d:91:61:7e:31:a8:ac: 24:63:58:ba:0d:dc:b3:1e:cf:03:bc:76:3f:9c:18: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BD:55:45:9E:40:DB:D5:57:CC:12:C1:3D:F8:37:42:F2:F6:D6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/88c3cfdb-1c95-378e-98ed-7259a5d31ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.crl X509v3 Authority Key Identifier: keyid:71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer sbgp-ipAddrBlock: critical IPv4: 158.51.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:62:dd:85:55:cc:6b:de:aa:48:fc:ab:f1:96:20:57:d0:43: 37:4a:fe:fa:5c:81:c1:b9:30:e3:06:8a:5a:c6:0b:ec:fe:e3: 22:7f:50:fc:44:bb:1a:6b:cd:40:c2:16:46:ee:4c:cb:69:45: 3c:2e:92:0e:3a:97:76:a7:ff:bf:f0:22:9d:2d:0c:b8:47:46: cb:ba:21:dd:d1:79:83:72:f7:5c:40:90:f3:2d:38:4b:68:22: f3:4b:c9:f5:bc:1f:17:55:90:4d:92:90:62:30:94:70:fa:bd: 65:40:6e:6f:7e:88:b0:3b:4d:7d:64:a5:39:e4:48:89:d1:48: 84:c8:16:07:da:2b:53:9a:f9:0a:57:f3:88:86:67:8a:24:07: 1e:d4:0b:b3:f4:5b:2d:54:8a:24:09:60:9c:ed:79:c6:a2:0a: b1:3f:aa:83:8c:b6:90:65:e7:96:be:4b:73:ac:9c:55:ec:ef: 8b:cd:18:4e:65:8d:38:9f:0c:66:a5:d1:e4:f3:15:5c:b2:75: e9:0d:57:bb:48:59:9c:e6:05:1d:26:db:ff:59:c3:dc:0b:1e: fa:b0:bb:cf:b0:da:15:af:04:ff:1e:1a:bc:2e:96:ed:03:7a: 03:c8:1f:ec:1b:50:9a:6f:ea:94:71:06:3b:82:e3:b1:e2:40: e3:e4:16:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qSA8ViKYwPrIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRkNzBlMDYtM2FhMC00NTM2LWEzYzctZWUyN2E4ZGRl NWZjMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk OGNkN2NjMDQtMzY5Ny00NTk2LTk2NTctZjZjNWE2N2VjZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzM181sKO3Bu6DyyjjsZwQxn/mJbopzu+pJd APfXhYD2n7eXS1h6gIKrwUAP37ZxqKuMp3Q7qb4apKEflG5WFeiQWFdQKjTzqH78 gM5rE+8ioB+nEDViAPEihRFCeH2p8SAIquBstf/1X9Fbl2StQx0kpRnV8kj+c8YC pjhK9E9t+PxiUhX/M1JpS3p2tvIJjYhEVzBGLk+sC6SYIzPST6JdD3Atj5EBYZOu X7EJV2BFJV8Nx8wGHr6cBwF3a/AQ0UHHE/0WhuNU+Y3QfcVkeuLzCi4NxYhY9ARH AkfOqLhfpalbB9nK1X2RYX4xqKwkY1i6DdyzHs8DvHY/nBjIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm9VUWeQNvVV8wSwT34N0Ly9tb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGQ3 MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThkZGU1ZmMvODhjM2NmZGItMWM5NS0z NzhlLTk4ZWQtNzI1OWE1ZDMxZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRkNzBlMDYtM2FhMC00NTM2LWEz YzctZWUyN2E4ZGRlNWZjLzA0ZDcwZTA2LTNhYTAtNDUzNi1hM2M3LWVlMjdhOGRk ZTVmYy5jcmwwHwYDVR0jBBgwFoAUcV2GtUGYTVFt6cBKmFr3iMZqJeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3 YThkZGU1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpi3YVVzGveqkj8q/GWIFfQQzdK/vpcgcG5MOMGilrGC+z+4yJ/UPxE uxprzUDCFkbuTMtpRTwukg46l3an/7/wIp0tDLhHRsu6Id3ReYNy91xAkPMtOEto IvNLyfW8HxdVkE2SkGIwlHD6vWVAbm9+iLA7TX1kpTnkSInRSITIFgfaK1Oa+QpX 84iGZ4okBx7UC7P0Wy1UiiQJYJztecaiCrE/qoOMtpBl55a+S3OsnFXs74vNGE5l jTifDGal0eTzFVyydekNV7tIWZzmBR0m2/9Zw9wLHvqwu8+w2hWvBP8eGrwulu0D egPIH+wbUJpv6pRxBjuC47HiQOPkFg0= -----END CERTIFICATE-----Generated at Sat Nov 23 21:54:52 2024 by rpki-client on console-fra.rpki-client.org