$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa File: 9866eb47-8ef3-3d63-8638-76ae76aa2833.roa (raw, json) Hash identifier: u8cslnS8XvNT0gHpAqBu3OWj+jaCg35AOpuYgTVzHco= Subject key identifier: A7:99:34:F8:F8:3C:6C:9E:68:7F:0F:C9:2A:5C:C1:BE:55:25:D7:DE Certificate issuer: /CN=94f0eda7-0771-41a2-8806-38174b050cc8 Certificate serial: 010D0C9F43285847CE6F3B85917A644D5E984800 Authority key identifier: 74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 32549 IP address blocks: 216.168.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3b:85:91:7a:64:4d:5e:98:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f0eda7-0771-41a2-8806-38174b050cc8 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=c3fd5c78-6437-4655-864d-b8f9a243e355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:c3:58:9f:da:7b:04:a8:f3:b8:c6:ce:02: b1:0b:0e:02:76:b1:1e:e8:c3:21:c2:f7:6e:3d:0f: 58:2e:56:2d:04:6a:28:49:e9:d4:c2:c5:d5:1e:60: 43:09:a9:88:55:3f:e7:b4:77:77:dc:1f:f0:a6:5d: 94:b5:3a:81:64:6b:7a:c4:f7:cd:26:7c:cd:6d:48: 64:9c:57:ab:64:f7:f3:30:03:a2:53:c3:28:fa:da: ed:ff:6f:62:cd:25:3f:59:7a:49:4b:87:8a:99:c4: 29:d6:69:a6:a4:27:cf:f6:6f:fb:ba:d3:d8:6e:88: cd:e4:da:22:d8:b9:06:31:41:ea:7a:e6:1d:47:eb: c1:02:1e:bc:dd:ae:b0:d9:23:92:2d:40:48:dd:9f: a1:0f:76:f1:b7:9a:9e:f4:88:1c:4c:57:a0:e7:a5: e4:21:fb:de:89:e0:b5:f4:04:7f:3e:29:0d:18:35: 13:1a:ca:eb:d6:d3:5b:e1:26:ef:46:14:4c:fa:8d: 02:0e:96:f3:d1:dc:28:d1:5e:8d:07:ba:2c:91:1a: 9f:89:30:68:38:cd:af:e7:c7:f7:6c:5a:cc:0b:41: ad:3f:f2:07:c4:d7:e8:07:f4:9a:f2:65:23:dd:eb: 2a:fa:99:65:21:16:a0:78:29:fb:72:de:e5:9a:82: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:99:34:F8:F8:3C:6C:9E:68:7F:0F:C9:2A:5C:C1:BE:55:25:D7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/9866eb47-8ef3-3d63-8638-76ae76aa2833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.crl X509v3 Authority Key Identifier: keyid:74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer sbgp-ipAddrBlock: critical IPv4: 216.168.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6f:61:d5:e0:7a:eb:ce:64:81:5e:84:83:d4:89:6a:b3:95: e4:58:aa:b8:05:14:78:d7:cc:c6:b6:25:85:89:30:ec:ed:6d: d3:00:69:7b:99:fc:fb:45:1d:de:ac:1c:76:ae:79:63:6d:97: d2:29:fb:7b:60:96:2c:60:25:81:39:4a:68:1a:7e:e7:1f:1a: e7:09:6e:82:f8:55:fd:2f:98:3f:fe:5f:00:29:9a:9e:54:78: 6a:1c:27:74:07:92:81:af:80:7f:15:e1:86:7e:9d:64:39:64: 24:5e:8e:58:87:0e:e8:14:81:89:3c:b6:9a:ed:84:fc:6c:ba: c2:3a:9f:98:34:a3:51:45:49:00:c5:82:2e:de:b0:a0:41:c2: 11:db:94:25:7c:a0:6c:3d:5c:bb:94:e5:5a:b5:fb:81:4c:a1: 58:b2:0e:a8:46:18:12:e6:5f:cd:96:2c:1d:ea:cb:7c:1e:32: 08:7f:59:43:f3:a3:d1:09:6c:23:e7:01:c9:b8:37:4d:97:78: cd:31:aa:05:d7:9a:31:85:12:a4:4f:7d:94:ab:f7:9a:a9:43: 9c:57:e2:12:44:36:ab:10:bb:e2:77:75:6b:c3:22:69:62:c5: b8:74:cf:04:dc:eb:42:07:26:82:97:12:1f:11:64:78:33:26: 64:4d:ed:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzuFkXpkTV6YSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmMGVkYTctMDc3MS00MWEyLTg4MDYtMzgxNzRiMDUw Y2M4MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk YzNmZDVjNzgtNjQzNy00NjU1LTg2NGQtYjhmOWEyNDNlMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh/DWJ/aewSo87jGzgKxCw4CdrEe6MMhwvdu PQ9YLlYtBGooSenUwsXVHmBDCamIVT/ntHd33B/wpl2UtTqBZGt6xPfNJnzNbUhk nFerZPfzMAOiU8Mo+trt/29izSU/WXpJS4eKmcQp1mmmpCfP9m/7utPYbojN5Noi 2LkGMUHqeuYdR+vBAh683a6w2SOSLUBI3Z+hD3bxt5qe9IgcTFeg56XkIfveieC1 9AR/PikNGDUTGsrr1tNb4SbvRhRM+o0CDpbz0dwo0V6NB7oskRqfiTBoOM2v58f3 bFrMC0GtP/IHxNfoB/Sa8mUj3esq+pllIRageCn7ct7lmoLUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeZNPj4PGyeaH8PySpcwb5VJdfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NGYw ZWRhNy0wNzcxLTQxYTItODgwNi0zODE3NGIwNTBjYzgvOTg2NmViNDctOGVmMy0z ZDYzLTg2MzgtNzZhZTc2YWEyODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTRmMGVkYTctMDc3MS00MWEyLTg4 MDYtMzgxNzRiMDUwY2M4Lzk0ZjBlZGE3LTA3NzEtNDFhMi04ODA2LTM4MTc0YjA1 MGNjOC5jcmwwHwYDVR0jBBgwFoAUdCmN28VPa5BfIRgLhfzaNiex4VMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85NGYwZWRhNy0wNzcxLTQxYTItODgwNi0zODE3 NGIwNTBjYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5vYdXgeuvOZIFehIPUiWqzleRYqrgFFHjXzMa2JYWJMOztbdMAaXuZ /PtFHd6sHHaueWNtl9Ip+3tglixgJYE5SmgafucfGucJboL4Vf0vmD/+XwApmp5U eGocJ3QHkoGvgH8V4YZ+nWQ5ZCRejliHDugUgYk8tprthPxsusI6n5g0o1FFSQDF gi7esKBBwhHblCV8oGw9XLuU5Vq1+4FMoViyDqhGGBLmX82WLB3qy3weMgh/WUPz o9EJbCPnAcm4N02XeM0xqgXXmjGFEqRPfZSr95qpQ5xX4hJENqsQu+J3dWvDImli xbh0zwTc60IHJoKXEh8RZHgzJmRN7dI= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:21 2024 by rpki-client on console-ams.rpki-client.org