$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa File: 86de01fa-9f63-306f-8dd1-489d0d28672c.roa (raw, json) Hash identifier: rPjhhvaWXwZYBZwgDTV7i2ebz3mnT8wnVmx+ui7SrLc= Subject key identifier: 99:A1:8A:0C:88:32:AB:48:C9:3B:A4:70:4E:B9:7D:91:4A:2C:2C:B7 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F43285847B1016A52430D272A0A52ED80 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 7850 IP address blocks: 216.234.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:6a:52:43:0d:27:2a:0a:52:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=673c2f6e-fcbd-422d-85a6-edbbcc7811b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:a8:85:de:72:1c:55:4e:7e:a7:a2:ed:5c: 54:3b:1e:94:c5:e5:85:d6:32:5a:32:6e:83:27:d6: dc:f7:66:e5:70:a9:86:a7:47:7f:32:a2:1e:cd:95: dc:e0:c6:fa:3a:29:bd:da:15:41:ff:7e:bd:ad:b1: e0:ea:6e:a7:af:2c:44:5b:4f:61:77:c1:bc:b8:fd: 68:4d:3c:01:54:d7:2e:ca:a8:b3:1f:cb:33:f8:f5: 32:6c:47:b9:96:c3:62:0a:07:e7:bd:6f:3b:f2:a8: 1c:a4:39:df:6d:af:b8:98:51:3d:ee:12:59:98:87: ec:89:df:af:d0:49:67:a3:9e:cc:3a:59:04:47:7f: 92:05:d4:5b:3f:a8:e7:9b:d2:f9:13:33:ed:3f:66: 87:f4:59:12:0c:3b:72:ec:24:fc:d8:44:94:1e:6c: 15:da:e1:27:36:fd:ab:ec:24:2c:dd:c6:e1:bd:a4: 5c:04:53:a3:aa:5f:61:8d:c3:e2:6c:06:c1:71:10: 85:6e:5b:d6:ca:d0:d1:4a:d6:ea:7a:6b:64:6e:91: 8b:ea:c7:2e:5c:e7:10:6f:f9:43:ec:19:4d:ab:3d: c6:dd:24:ca:1d:0e:28:d9:c7:56:84:45:af:cf:e9: 25:52:5b:ae:f8:2f:c8:76:bf:d6:e3:33:75:4c:0e: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:8A:0C:88:32:AB:48:C9:3B:A4:70:4E:B9:7D:91:4A:2C:2C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/86de01fa-9f63-306f-8dd1-489d0d28672c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 216.234.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:19:d4:2d:15:1a:03:64:48:df:8d:bd:7c:a4:35:0b:2e:0d: c3:39:ab:a3:ee:7a:93:e1:a9:52:14:38:97:29:16:49:ac:4f: 72:b2:27:d7:17:a0:10:83:03:15:b0:03:d4:4a:7f:a5:a7:f7: 9a:0a:f5:2c:8f:15:68:45:bb:ec:5a:28:ae:32:2d:e8:4d:06: bd:61:84:a2:db:41:73:e3:93:70:b6:84:54:39:0e:a5:2b:dd: 71:90:79:7c:12:82:e4:64:cf:6d:b8:54:f1:fb:93:5d:48:38: 46:44:66:ea:29:36:a7:ee:a4:eb:df:48:19:57:41:82:4a:75: d2:2d:5a:52:98:1a:94:e9:a2:d4:96:15:58:e5:87:23:6c:20: 13:42:65:0f:52:81:99:95:61:52:9b:9a:36:1d:4c:b5:e7:4c: 6c:65:1f:bc:e3:fa:3d:03:7c:f1:a3:0c:7f:ed:7d:32:52:12: 9b:84:d1:72:6e:6c:c1:3f:a1:f8:7d:ce:ed:76:af:4d:84:11: 98:bc:6c:76:6b:31:15:04:fa:e3:12:d3:e0:37:20:9d:93:47: f6:60:d2:20:b6:30:1e:1a:a9:46:30:39:55:e2:a0:23:57:d9: b8:7c:a6:f9:58:8e:05:22:75:9d:57:c6:2f:af:e8:01:92:73: 23:70:c5:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWpSQw0nKgpS7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NjczYzJmNmUtZmNiZC00MjJkLTg1YTYtZWRiYmNjNzgxMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6ohd5yHFVOfqei7VxUOx6UxeWF1jJaMm6D J9bc92blcKmGp0d/MqIezZXc4Mb6Oim92hVB/369rbHg6m6nryxEW09hd8G8uP1o TTwBVNcuyqizH8sz+PUybEe5lsNiCgfnvW878qgcpDnfba+4mFE97hJZmIfsid+v 0Elno57MOlkER3+SBdRbP6jnm9L5EzPtP2aH9FkSDDty7CT82ESUHmwV2uEnNv2r 7CQs3cbhvaRcBFOjql9hjcPibAbBcRCFblvWytDRStbqemtkbpGL6scuXOcQb/lD 7BlNqz3G3STKHQ4o2cdWhEWvz+klUluu+C/Idr/W4zN1TA41uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmhigyIMqtIyTukcE65fZFKLCy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvODZkZTAxZmEtOWY2My0z MDZmLThkZDEtNDg5ZDBkMjg2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcZ1C0VGgNkSN+NvXykNQsuDcM5q6PuepPhqVIUOJcpFkmsT3KyJ9cX oBCDAxWwA9RKf6Wn95oK9SyPFWhFu+xaKK4yLehNBr1hhKLbQXPjk3C2hFQ5DqUr 3XGQeXwSguRkz224VPH7k11IOEZEZuopNqfupOvfSBlXQYJKddItWlKYGpTpotSW FVjlhyNsIBNCZQ9SgZmVYVKbmjYdTLXnTGxlH7zj+j0DfPGjDH/tfTJSEpuE0XJu bME/ofh9zu12r02EEZi8bHZrMRUE+uMS0+A3IJ2TR/Zg0iC2MB4aqUYwOVXioCNX 2bh8pvlYjgUidZ1Xxi+v6AGScyNwxe4= -----END CERTIFICATE-----Generated at Mon Nov 25 18:05:00 2024 by rpki-client on console-fra.rpki-client.org