$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json) Hash identifier: 83nYPSJgHmNM8YZpLMGgNgqHDLTL9Dq1RbnT0BAUof4= Subject key identifier: 01:91:C7:5E:C5:22:3B:0C:F2:92:30:94:A2:F4:06:A3:D3:ED:8A:8D Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F432858471E705F44EC8DD3F6033B8080 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 8987 IP address blocks: 192.16.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:5f:44:ec:8d:d3:f6:03:3b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=036ac339-7932-4c15-824a-24a79ea5809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:8a:ad:1b:02:b5:2c:a2:a2:eb:04:5e:98: d5:ac:ed:0b:7b:15:86:31:ce:8e:ba:63:0f:15:2b: 83:6f:6f:82:0c:70:e5:62:18:ad:7a:76:94:1e:c9: 3d:2f:ca:55:b1:12:94:4c:5c:f3:cd:9f:15:0a:cc: cd:68:89:27:e9:7f:dd:0c:86:82:18:c3:20:d7:a3: c7:95:8f:59:51:49:96:e4:ef:0f:ed:ff:01:67:d5: 69:bf:64:95:04:b3:c6:0b:c9:66:23:81:2e:d9:70: 94:54:f9:4a:be:16:a9:fb:80:07:01:2c:cb:c7:05: 93:5f:e2:26:35:f4:01:f8:96:c3:90:af:fc:d9:26: f5:e5:9e:4d:12:2f:3d:81:d4:11:31:52:2a:24:ea: e3:e2:86:49:21:33:ca:87:4e:fc:6e:82:a2:2c:19: 5c:18:65:99:3a:b1:15:de:0a:75:cb:66:a3:f8:36: 85:cc:b6:b7:8b:89:bf:e9:d6:bf:6b:cb:e2:c1:ff: 55:bf:c1:65:a5:12:f9:e4:97:02:d8:be:a9:9a:94: 43:ad:2f:88:13:1f:ff:46:70:62:db:c9:44:1b:45: dc:b1:a4:e2:69:a0:ca:4e:03:ad:d3:e8:70:50:70: aa:8b:ba:32:90:e8:ee:a3:77:3f:60:1d:63:32:88: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:C7:5E:C5:22:3B:0C:F2:92:30:94:A2:F4:06:A3:D3:ED:8A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:47:95:38:b8:e7:ef:23:c3:91:c2:76:28:af:7c:66:32:bb: e5:d4:1f:6d:d4:c9:64:40:30:72:1c:e4:34:e9:42:41:12:6a: af:a9:f1:64:fe:df:96:7e:1e:56:3d:08:f4:77:1c:8d:b4:2a: 94:be:6c:0e:32:63:4d:07:24:1a:8b:21:8b:46:a7:1a:91:fe: 2f:88:f7:d4:2b:e1:a5:bb:28:5e:dd:30:35:c6:fa:2b:63:9d: d9:a7:e7:3e:21:0c:1e:83:6f:75:67:aa:23:16:35:72:32:4a: 4f:22:21:27:84:07:a4:2b:ea:2d:04:87:f9:28:ca:ed:24:60: c6:a5:6e:d1:1b:76:b5:b7:ec:c5:c3:54:45:24:75:81:ef:f3: 07:18:ee:28:9b:07:64:3b:b8:b1:90:30:f3:3f:53:a2:c0:4d: 3b:e0:02:50:d7:0f:dd:9c:1b:fc:7d:fc:3d:bc:e9:50:dc:5d: 07:02:38:bf:69:0b:77:ce:f3:7a:d0:92:48:f6:15:70:96:51: 76:7d:5e:10:cf:89:af:b3:fa:14:43:71:fc:20:dd:3d:2f:d2: 41:7c:ae:b5:de:22:57:16:57:11:2d:11:62:55:57:40:73:49: bb:d2:69:09:64:56:d7:5a:a3:f1:cc:a1:b4:ff:5d:1e:c8:6b: e9:c8:41:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecF9E7I3T9gM7gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk MDM2YWMzMzktNzkzMi00YzE1LTgyNGEtMjRhNzllYTU4MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSeKrRsCtSyiousEXpjVrO0LexWGMc6OumMP FSuDb2+CDHDlYhitenaUHsk9L8pVsRKUTFzzzZ8VCszNaIkn6X/dDIaCGMMg16PH lY9ZUUmW5O8P7f8BZ9Vpv2SVBLPGC8lmI4Eu2XCUVPlKvhap+4AHASzLxwWTX+Im NfQB+JbDkK/82Sb15Z5NEi89gdQRMVIqJOrj4oZJITPKh078boKiLBlcGGWZOrEV 3gp1y2aj+DaFzLa3i4m/6da/a8viwf9Vv8FlpRL55JcC2L6pmpRDrS+IEx//RnBi 28lEG0XcsaTiaaDKTgOt0+hwUHCqi7oykOjuo3c/YB1jMoiilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGRx17FIjsM8pIwlKL0BqPT7YqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1HlTi45+8jw5HCdiivfGYyu+XUH23UyWRAMHIc5DTpQkESaq+p8WT+ 35Z+HlY9CPR3HI20KpS+bA4yY00HJBqLIYtGpxqR/i+I99Qr4aW7KF7dMDXG+itj ndmn5z4hDB6Db3VnqiMWNXIySk8iISeEB6Qr6i0Eh/koyu0kYMalbtEbdrW37MXD VEUkdYHv8wcY7iibB2Q7uLGQMPM/U6LATTvgAlDXD92cG/x9/D286VDcXQcCOL9p C3fO83rQkkj2FXCWUXZ9XhDPia+z+hRDcfwg3T0v0kF8rrXeIlcWVxEtEWJVV0Bz SbvSaQlkVtdao/HMobT/XR7Ia+nIQTo= -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:54 2024 by rpki-client on console-fra.rpki-client.org