$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: AWrNksEmAhpPKmyaPElY0WnxQU2iT31UIv6x9kiO6d8= Subject key identifier: 90:4B:B0:16:A9:69:18:F3:82:00:29:01:1F:39:CC:20:84:B9:3B:AE Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F43285847B10152BC5642A384905C8500 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:52:bc:56:42:a3:84:90:5c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=47b54768-b6f6-48c9-b8f1-d92f524bb1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:1b:62:33:5e:09:e9:45:bf:5e:17:9f:bb: 91:d7:63:cd:0f:d0:ff:0d:a3:6b:2d:8c:79:8c:24: 36:bb:3e:07:d9:d7:e1:72:bd:bd:6b:7c:a6:4f:ff: 4c:ed:0f:2c:c5:a3:e3:ac:be:b0:fd:bd:80:68:3f: 5f:c3:19:f8:cb:6b:79:a0:67:fc:0a:42:fa:52:da: 53:d9:7a:cd:e2:52:ed:4b:f2:a0:59:a9:4b:5a:9b: 36:de:35:b7:cc:1c:bd:88:2d:03:a9:c2:c1:87:42: 67:ce:67:8f:d1:50:c3:d2:a1:91:1c:41:5d:18:6b: f5:54:eb:aa:1c:2d:10:5a:da:65:d7:c0:c8:75:c1: e3:20:42:68:75:b8:c8:a9:1e:13:8c:59:7c:fc:85: 77:4c:8a:f2:bb:23:c7:19:7e:2f:d3:f3:93:ed:d8: 63:f4:5d:f9:f4:1a:81:f4:da:45:34:1e:e3:85:9a: 28:96:63:16:92:36:6b:9d:c8:6c:84:1b:84:fe:c0: 64:75:b0:ea:8d:08:7b:ad:c7:a5:ae:f9:a0:62:19: 97:fb:04:3f:95:73:6c:fe:26:6c:ca:68:24:3a:12: eb:e6:ab:2a:8e:0a:04:1e:55:6c:44:7b:00:73:cc: b3:2f:f4:e3:03:d1:b7:76:e2:a2:fd:19:4b:ab:e2: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:B0:16:A9:69:18:F3:82:00:29:01:1F:39:CC:20:84:B9:3B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f3:ad:c9:b2:8e:f4:71:43:9d:1e:bd:61:84:e6:34:59:7f: c9:f2:1a:55:2d:f3:80:78:65:86:82:06:e9:c5:9f:ff:ad:02: 2d:c9:1c:7e:9c:01:10:b1:22:eb:20:6a:30:aa:88:27:44:5f: 5c:06:cc:6f:15:4c:be:d4:62:dd:51:84:f4:d0:c6:81:f8:a0: bc:6f:64:11:fa:47:3a:3a:b1:e2:e2:cb:8e:04:7f:d2:e0:48: 53:76:f3:1d:44:9a:3a:7a:f1:e0:c9:13:18:7d:61:df:f1:f1: 98:48:bf:3f:b2:0a:29:2f:4c:e5:e6:b8:36:07:80:06:d2:13: 13:1b:a1:b8:a9:c8:df:3c:f6:9c:6d:70:b5:6c:8a:46:49:4c: b6:7f:41:6d:4e:2b:f5:ed:f0:86:cd:ea:e0:00:44:36:10:72: 40:06:f2:73:d4:c4:de:4a:c1:7c:80:e2:23:75:61:e8:10:6f: 3e:47:b8:22:54:d8:e5:58:b3:dc:3d:31:eb:a8:3e:b4:ef:19: 86:f0:bb:0d:e6:5a:ff:07:44:45:30:6a:ac:eb:59:6d:14:02: 17:62:29:44:0e:39:57:a2:7b:3e:dd:db:81:55:ae:b7:80:06: 35:9d:d0:a7:ca:53:bb:67:51:98:4b:1a:7b:28:a8:cf:e6:22: dd:c1:7d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVK8VkKjhJBchQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NDdiNTQ3NjgtYjZmNi00OGM5LWI4ZjEtZDkyZjUyNGJiMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGEbYjNeCelFv14Xn7uR12PND9D/DaNrLYx5 jCQ2uz4H2dfhcr29a3ymT/9M7Q8sxaPjrL6w/b2AaD9fwxn4y2t5oGf8CkL6UtpT 2XrN4lLtS/KgWalLWps23jW3zBy9iC0DqcLBh0JnzmeP0VDD0qGRHEFdGGv1VOuq HC0QWtpl18DIdcHjIEJodbjIqR4TjFl8/IV3TIryuyPHGX4v0/OT7dhj9F359BqB 9NpFNB7jhZoolmMWkjZrnchshBuE/sBkdbDqjQh7rcelrvmgYhmX+wQ/lXNs/iZs ymgkOhLr5qsqjgoEHlVsRHsAc8yzL/TjA9G3duKi/RlLq+LssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBLsBapaRjzggApAR85zCCEuTuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnzrcmyjvRxQ50evWGE5jRZf8nyGlUt84B4ZYaCBunFn/+tAi3JHH6c ARCxIusgajCqiCdEX1wGzG8VTL7UYt1RhPTQxoH4oLxvZBH6Rzo6seLiy44Ef9Lg SFN28x1Emjp68eDJExh9Yd/x8ZhIvz+yCikvTOXmuDYHgAbSExMbobipyN889pxt cLVsikZJTLZ/QW1OK/Xt8IbN6uAARDYQckAG8nPUxN5KwXyA4iN1YegQbz5HuCJU 2OVYs9w9MeuoPrTvGYbwuw3mWv8HREUwaqzrWW0UAhdiKUQOOVeiez7d24FVrreA BjWd0KfKU7tnUZhLGnsoqM/mIt3BfdU= -----END CERTIFICATE-----Generated at Fri Nov 22 21:10:15 2024 by rpki-client on console-fra.rpki-client.org