$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa File: d493a96c-5614-370f-90f2-65885e80479e.roa (raw, json) Hash identifier: f/+Wzif8So8Ue5LgzWFw1U+ESw9cmrcWYCutm9vRZNM= Subject key identifier: D2:C2:41:56:38:26:D6:AC:87:59:BF:16:0B:6B:22:DC:5A:71:BA:80 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F43285848035CA8134791F45DD2726640 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa Signing time: Wed 27 Nov 2024 01:01:00 +0000 ROA not before: Wed 27 Nov 2024 01:01:00 +0000 ROA not after: Tue 25 Feb 2025 01:01:00 +0000 asID: 22418 IP address blocks: 192.157.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:5c:a8:13:47:91:f4:5d:d2:72:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Nov 27 01:01:00 2024 GMT Not After : Feb 25 01:01:00 2025 GMT Subject: CN=4a67cfe1-516c-4997-b506-430568195516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:20:8b:49:99:fa:d9:f2:1f:f7:2b:46:8c:52: 83:18:39:86:da:4a:b4:67:60:25:80:99:ca:64:8f: 91:ab:9e:4d:80:73:d2:4f:ad:77:7d:83:3e:e2:1e: 2f:4d:93:a5:f1:81:b8:e0:5a:1f:ac:56:6f:a0:17: 0f:72:aa:49:6a:e9:d2:c6:26:c5:ca:b3:7f:83:20: 45:99:bf:14:b2:47:ea:e5:7c:a3:74:44:ea:eb:03: bb:00:d8:a9:a9:c9:68:b5:a3:b9:58:e8:c8:16:74: bd:de:6d:2a:6b:07:b3:9b:6c:5f:51:75:d9:60:a2: c4:97:72:ff:ca:28:5b:08:e7:17:27:8a:f6:b0:d8: bf:28:5d:91:af:c7:00:a2:0c:cc:a6:7b:58:02:4a: 83:35:4c:08:e2:51:12:8e:75:97:6f:51:58:f6:a1: ce:d9:f4:e4:c4:66:82:92:72:3f:64:9e:b6:5d:c5: 3e:c9:38:b3:4e:ce:ec:4d:78:0a:f4:ff:10:30:1b: 53:a2:ba:3e:d8:b1:ae:89:15:0a:5b:4f:c2:6c:a1: 6b:e1:68:68:fd:8c:57:c2:3e:45:22:4a:6b:da:ba: 87:65:3f:eb:48:94:e8:f5:0c:2a:c4:9d:fb:db:0b: d8:26:f7:68:8b:71:f2:e5:1c:3d:9c:08:7f:bc:4c: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C2:41:56:38:26:D6:AC:87:59:BF:16:0B:6B:22:DC:5A:71:BA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d493a96c-5614-370f-90f2-65885e80479e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2e:3d:75:81:f9:b9:a4:f1:dc:3f:b0:3b:04:38:ba:f4:8c: b7:0d:3a:b8:63:9d:a7:b8:a1:29:2a:02:b2:69:24:cc:46:6f: 97:0f:a1:96:3d:2c:a0:50:22:6a:57:ed:50:15:ef:dd:4f:e5: 3f:61:30:5d:53:06:34:b4:f6:18:18:a6:e6:4c:73:26:58:10: 92:5a:bb:54:08:d6:1b:42:8c:d8:75:78:46:b1:e1:19:5c:17: cd:dc:c7:61:6b:6a:2c:47:b7:52:1a:f6:2d:d6:59:dc:d3:46: 27:6c:3d:d4:af:81:b6:f6:95:8f:e0:7a:b3:5b:ce:8b:15:19: ed:cb:e0:05:5b:df:72:14:58:7b:02:e3:3b:56:d8:2d:e4:a4: 1a:76:58:19:f0:37:e2:27:b0:cb:6b:c6:18:4e:9b:9b:1d:e2: 3d:0b:1c:10:34:fa:cc:76:69:f6:31:19:dd:e1:d1:68:82:39: e6:fe:5f:98:59:8f:36:f5:ce:89:69:09:d6:0f:53:4b:02:c4: de:9a:b2:5a:87:f3:76:c8:3d:02:8a:e0:85:cd:b0:22:ed:f6: fe:22:68:b7:8f:43:b2:41:77:a5:fd:9b:7b:03:1f:2c:dd:a6: 8c:56:c7:c3:dc:56:3f:92:55:43:0f:3c:1c:50:c6:a4:2c:8a: ba:b2:bf:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDXKgTR5H0XdJyZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI0MTEyNzAxMDEwMFoXDTI1MDIyNTAxMDEwMFowLzEtMCsGA1UEAxMk NGE2N2NmZTEtNTE2Yy00OTk3LWI1MDYtNDMwNTY4MTk1NTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyCLSZn62fIf9ytGjFKDGDmG2kq0Z2AlgJnK ZI+Rq55NgHPST613fYM+4h4vTZOl8YG44FofrFZvoBcPcqpJaunSxibFyrN/gyBF mb8Uskfq5XyjdETq6wO7ANipqclotaO5WOjIFnS93m0qawezm2xfUXXZYKLEl3L/ yihbCOcXJ4r2sNi/KF2Rr8cAogzMpntYAkqDNUwI4lESjnWXb1FY9qHO2fTkxGaC knI/ZJ62XcU+yTizTs7sTXgK9P8QMBtToro+2LGuiRUKW0/CbKFr4Who/YxXwj5F Ikpr2rqHZT/rSJTo9QwqxJ372wvYJvdoi3Hy5Rw9nAh/vEyDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLCQVY4Jtash1m/FgtrItxacbqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvZDQ5M2E5NmMtNTYxNC0z NzBmLTkwZjItNjU4ODVlODA0NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMuPXWB+bmk8dw/sDsEOLr0jLcNOrhjnae4oSkqArJpJMxGb5cPoZY9 LKBQImpX7VAV791P5T9hMF1TBjS09hgYpuZMcyZYEJJau1QI1htCjNh1eEax4Rlc F83cx2FraixHt1Ia9i3WWdzTRidsPdSvgbb2lY/gerNbzosVGe3L4AVb33IUWHsC 4ztW2C3kpBp2WBnwN+InsMtrxhhOm5sd4j0LHBA0+sx2afYxGd3h0WiCOeb+X5hZ jzb1zolpCdYPU0sCxN6aslqH83bIPQKK4IXNsCLt9v4iaLePQ7JBd6X9m3sDHyzd poxWx8PcVj+SVUMPPBxQxqQsirqyvwM= -----END CERTIFICATE-----Generated at Sat Dec 28 02:57:57 2024 by rpki-client on console-fra.rpki-client.org