$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa File: 2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa (raw, json) Hash identifier: HrHatfHZM9fPYAzB8N3x2nObj/PeqNlfB8Je6NZEuq4= Subject key identifier: D9:70:7E:A3:BC:F5:AA:C8:0B:9D:3A:F9:5C:48:26:23:75:6E:1E:33 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858478FDE691E38C8CA7F6F2745C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa Signing time: Wed 16 Oct 2024 16:08:40 +0000 ROA not before: Wed 16 Oct 2024 16:08:40 +0000 ROA not after: Tue 14 Jan 2025 17:08:40 +0000 asID: 852 IP address blocks: 216.180.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:de:69:1e:38:c8:ca:7f:6f:27:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Oct 16 16:08:40 2024 GMT Not After : Jan 14 17:08:40 2025 GMT Subject: CN=923bc6b2-99ce-4b2c-b756-04314686f274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:3f:85:a2:24:7c:c1:96:8e:71:94:1f:05: 29:79:7e:fd:f1:cc:ac:5e:71:33:0c:41:51:c1:fe: e0:1b:37:66:23:cd:75:6f:5e:74:18:db:60:11:c3: 25:1a:0a:1f:a8:ba:ce:00:8a:7a:0d:9b:08:a6:ee: d7:0f:f4:8e:65:21:94:67:79:1c:83:08:a9:80:c9: 66:59:ad:90:8c:3e:46:c7:0c:08:57:aa:6b:36:a1: 4d:98:ad:7d:7c:a9:70:5c:95:0f:ff:45:ba:c7:4d: 7a:f0:60:a1:9e:10:e6:ce:b1:9f:a5:9f:89:a0:84: f7:cf:ab:6e:c3:d9:2a:4c:70:77:b1:89:c2:e2:f7: 96:ff:5a:f7:2b:55:2c:39:b5:54:73:97:0f:21:65: 04:ff:8c:2f:d9:e9:72:1a:82:83:fb:b8:81:d7:1d: 52:d2:9e:1d:c8:ee:ce:eb:3c:29:f2:01:c3:27:de: fe:a4:26:09:ee:19:6f:79:69:81:25:bf:0e:37:8d: f1:07:6e:1b:d6:4a:2f:ac:54:30:00:1b:a5:16:ce: a3:d7:7e:9a:f2:4e:9f:da:3b:3f:13:91:ab:2d:34: 12:a3:4e:7c:6d:0e:c3:9e:f3:a1:8f:f5:33:c4:83: 30:b6:10:96:e0:63:52:37:96:71:f3:8d:1b:6c:88: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:7E:A3:BC:F5:AA:C8:0B:9D:3A:F9:5C:48:26:23:75:6E:1E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d7:06:88:01:c3:0c:f6:20:2e:8f:86:60:19:06:d9:69:1f: 6e:59:50:b8:dc:42:5f:db:e0:fc:58:62:0a:21:5e:68:69:73: 6c:90:c5:b8:34:bc:f6:92:13:7e:9b:22:54:6e:e1:56:d0:ad: 3f:22:74:f6:2e:f4:1c:a6:22:e4:43:7a:c1:7e:85:d9:95:cb: 63:dc:bc:57:e3:93:61:e5:85:4d:3e:f5:51:4d:ed:1d:eb:aa: 97:85:2b:41:e7:4b:95:3d:6e:9c:fa:41:50:53:32:ac:ee:0c: 81:b3:b2:66:dd:24:03:45:9b:91:8a:98:70:17:40:d1:64:9c: ac:7e:07:9a:aa:ca:16:51:56:82:94:c3:e0:54:31:79:95:86: 48:74:ab:5f:47:25:bf:e7:ef:df:22:7d:fd:c2:76:68:07:12: 81:e8:67:a0:bf:c7:16:cd:09:a0:e5:c4:e8:58:8f:7b:11:83: 0d:0d:e4:31:43:4f:b4:80:d1:7a:91:de:80:26:51:ab:05:cd: 04:3a:68:04:37:2e:4d:d1:50:fc:c9:64:9f:dc:21:d9:c6:cf: 82:c8:d4:e5:58:36:b2:a7:3c:ac:e7:e7:38:e8:86:86:db:a9: b5:b5:4a:85:57:e8:c3:c0:a9:4f:20:e2:d0:ba:2d:61:08:be: 75:9b:e8:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeP3mkeOMjKf28nRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI0MTAxNjE2MDg0MFoXDTI1MDExNDE3MDg0MFowLzEtMCsGA1UEAxMk OTIzYmM2YjItOTljZS00YjJjLWI3NTYtMDQzMTQ2ODZmMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG4/haIkfMGWjnGUHwUpeX798cysXnEzDEFR wf7gGzdmI811b150GNtgEcMlGgofqLrOAIp6DZsIpu7XD/SOZSGUZ3kcgwipgMlm Wa2QjD5GxwwIV6prNqFNmK19fKlwXJUP/0W6x0168GChnhDmzrGfpZ+JoIT3z6tu w9kqTHB3sYnC4veW/1r3K1UsObVUc5cPIWUE/4wv2elyGoKD+7iB1x1S0p4dyO7O 6zwp8gHDJ97+pCYJ7hlveWmBJb8ON43xB24b1kovrFQwABulFs6j136a8k6f2js/ E5GrLTQSo058bQ7DnvOhj/UzxIMwthCW4GNSN5Zx840bbIiKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlwfqO89arIC506+VxIJiN1bh4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMmUzYTNhYjktMzU3ZC0z YWFjLWI0NDMtYTY0MjQ5OWQxYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELXBogBwwz2IC6PhmAZBtlpH25ZULjcQl/b4PxYYgohXmhpc2yQxbg0 vPaSE36bIlRu4VbQrT8idPYu9BymIuRDesF+hdmVy2PcvFfjk2HlhU0+9VFN7R3r qpeFK0HnS5U9bpz6QVBTMqzuDIGzsmbdJANFm5GKmHAXQNFknKx+B5qqyhZRVoKU w+BUMXmVhkh0q19HJb/n798iff3CdmgHEoHoZ6C/xxbNCaDlxOhYj3sRgw0N5DFD T7SA0XqR3oAmUasFzQQ6aAQ3Lk3RUPzJZJ/cIdnGz4LI1OVYNrKnPKzn5zjohobb qbW1SoVX6MPAqU8g4tC6LWEIvnWb6AI= -----END CERTIFICATE-----Generated at Mon Nov 25 18:05:02 2024 by rpki-client on console-fra.rpki-client.org