$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa File: f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa (raw, json) Hash identifier: NwWDMEkAGvHO0U1wYiDq0KJEQyL5Ibv6KSAZPK+0enE= Subject key identifier: 72:76:98:C7:E8:9D:C3:01:D9:B5:DA:FA:20:10:A1:81:E1:60:C4:F8 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F43285848035C79C3865D3C8A4FF4C380 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa Signing time: Wed 27 Nov 2024 01:00:38 +0000 ROA not before: Wed 27 Nov 2024 01:00:38 +0000 ROA not after: Tue 25 Feb 2025 01:00:38 +0000 asID: 22418 IP address blocks: 192.157.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:5c:79:c3:86:5d:3c:8a:4f:f4:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Nov 27 01:00:38 2024 GMT Not After : Feb 25 01:00:38 2025 GMT Subject: CN=e035ff60-d595-41ba-969b-af1a37874a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:96:f0:21:c9:2a:04:da:56:fd:6a:b0:0f: fe:d7:f0:98:b9:23:51:b5:55:4e:cd:6c:62:38:45: 3d:63:f5:27:b6:99:45:18:ee:fe:bb:84:5c:26:c8: 4c:65:76:be:f8:03:9e:bd:70:24:3f:53:4d:a5:e2: 12:c3:1f:22:c9:86:d5:31:f6:21:18:51:f8:50:10: 13:da:68:e9:74:9b:3f:1a:6c:e9:88:8b:2d:7c:d4: 5a:2c:5e:da:fd:1d:ca:76:6e:b6:83:23:3d:ad:4d: 9a:b7:16:17:2d:7a:d9:3e:09:ba:16:c2:1a:c2:ba: 08:29:04:05:d4:b4:10:58:13:05:78:ca:25:92:f8: 72:4b:1c:77:91:99:cf:6b:f3:54:11:4d:89:39:03: 84:41:67:70:8c:c5:9e:0c:18:42:96:05:08:14:98: 2f:23:da:ca:a7:67:7b:08:eb:e9:df:f3:b6:d9:80: fd:47:f6:8c:1a:f0:48:4a:03:bc:b1:13:af:46:c2: 3a:02:98:a3:da:ec:55:ed:85:ca:4f:48:4d:e9:61: bb:71:8c:c8:5f:bb:bd:56:3f:43:0f:f8:67:f6:d5: 89:d7:7e:73:9b:bd:17:70:ec:53:bf:92:7f:01:f3: 57:4f:62:4f:f2:7f:38:38:d8:f3:95:4b:8e:93:de: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:98:C7:E8:9D:C3:01:D9:B5:DA:FA:20:10:A1:81:E1:60:C4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:72:60:d2:b9:ad:87:c0:54:78:28:cb:a9:5d:37:3a:8a:82: d0:a0:dc:54:f2:d9:0e:79:80:3e:e9:a9:0d:7d:74:43:eb:4f: 55:33:9d:93:7d:77:d1:69:7c:94:f0:89:f9:68:5c:ab:e6:fb: 53:59:76:b0:66:a2:d9:90:9d:a9:67:ee:6c:2c:1d:dc:02:f7: 64:d9:b1:2d:bf:a0:7d:91:4d:e1:e3:de:7c:eb:33:78:ba:a9: f4:62:8f:3e:e4:e9:57:4b:9b:98:17:36:af:ae:83:1f:b4:2a: 7a:02:eb:67:96:86:6c:87:cc:1d:c1:4e:33:85:9f:4d:69:4f: a9:80:39:33:90:a7:bf:2c:85:60:51:ce:84:c0:3a:5c:64:38: d2:7a:33:92:61:d2:9b:c9:45:f0:62:67:bc:51:6f:c5:63:47: bf:42:e1:c7:ca:4f:53:71:bd:71:b9:e2:9b:17:d3:05:3a:de: 96:a0:2f:3d:d5:b0:2d:3a:7f:7a:d6:7a:7c:8b:92:b4:65:c5: 03:8d:92:fc:9d:28:e5:60:b2:b6:eb:76:21:78:ff:3e:09:1a: 20:16:25:82:89:2b:07:c0:fb:dd:29:a3:6e:ef:8f:65:92:a5: 45:83:49:d1:78:97:07:25:fb:fc:93:b9:43:4f:22:ea:38:f7: 41:1e:dd:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDXHnDhl08ik/0w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI0MTEyNzAxMDAzOFoXDTI1MDIyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZTAzNWZmNjAtZDU5NS00MWJhLTk2OWItYWYxYTM3ODc0YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod6W8CHJKgTaVv1qsA/+1/CYuSNRtVVOzWxi OEU9Y/UntplFGO7+u4RcJshMZXa++AOevXAkP1NNpeISwx8iyYbVMfYhGFH4UBAT 2mjpdJs/GmzpiIstfNRaLF7a/R3Kdm62gyM9rU2atxYXLXrZPgm6FsIawroIKQQF 1LQQWBMFeMolkvhySxx3kZnPa/NUEU2JOQOEQWdwjMWeDBhClgUIFJgvI9rKp2d7 COvp3/O22YD9R/aMGvBISgO8sROvRsI6Apij2uxV7YXKT0hN6WG7cYzIX7u9Vj9D D/hn9tWJ135zm70XcOxTv5J/AfNXT2JP8n84ONjzlUuOk96/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ2mMfoncMB2bXa+iAQoYHhYMT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvZjgzY2Y3ZjUtODBjZC0z NGYwLWJkMmEtZjU4N2ExNDJmMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNyYNK5rYfAVHgoy6ldNzqKgtCg3FTy2Q55gD7pqQ19dEPrT1UznZN9 d9FpfJTwifloXKvm+1NZdrBmotmQnaln7mwsHdwC92TZsS2/oH2RTeHj3nzrM3i6 qfRijz7k6VdLm5gXNq+ugx+0KnoC62eWhmyHzB3BTjOFn01pT6mAOTOQp78shWBR zoTAOlxkONJ6M5Jh0pvJRfBiZ7xRb8VjR79C4cfKT1NxvXG54psX0wU63pagLz3V sC06f3rWenyLkrRlxQONkvydKOVgsrbrdiF4/z4JGiAWJYKJKwfA+90po27vj2WS pUWDSdF4lwcl+/yTuUNPIuo490Ee3RI= -----END CERTIFICATE-----Generated at Sat Dec 28 02:57:57 2024 by rpki-client on console-fra.rpki-client.org