$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa File: 52db2717-1b9b-3731-b7ef-694372415cef.roa (raw, json) Hash identifier: qrFnDT6gyNznisr7YeFs5yuRKYT2ouKLZ9Ko5iznp2c= Subject key identifier: 88:06:1D:32:22:8C:78:68:92:B0:6D:01:6B:03:89:42:30:17:1C:A2 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F432858472C65D88F2F3B4146210253C0 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 394353 IP address blocks: 192.228.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:d8:8f:2f:3b:41:46:21:02:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=2b2da077-f348-44d2-bbfa-4c8930aab1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:e2:90:ee:42:a7:66:25:e4:9f:db:68:29: d2:a2:08:7a:37:40:e9:3e:9b:d9:92:2d:a8:4e:34: 45:47:57:c8:15:d6:41:79:b3:05:60:f3:bd:0d:7f: 0f:31:0d:0d:d1:51:09:1d:3f:18:e6:95:28:59:4e: 78:e0:c9:02:8a:8e:87:ca:c2:b1:aa:56:5a:4e:0d: 48:ea:a3:dc:da:3f:b2:94:f6:8a:ec:18:05:21:22: 1b:de:77:7a:1e:9e:bf:c0:33:64:ad:5a:06:a4:c1: d6:eb:b7:28:0c:f9:38:aa:65:ca:b9:1e:d5:33:bd: 65:44:72:ff:f0:e1:04:8a:69:d7:af:e2:57:7e:76: 48:2f:28:57:9a:d1:c6:1d:c6:3b:c7:67:2e:64:fb: 08:bc:77:9a:b5:a2:54:76:da:1c:24:26:47:6d:09: ee:58:2f:30:97:71:9c:56:93:b5:4a:7a:ce:fa:7e: b7:22:60:8e:e8:cd:55:cf:e0:28:6c:92:a7:cc:a0: 4c:a3:b0:f7:13:93:21:23:be:0c:46:79:ab:66:fc: 69:96:02:56:e1:77:cf:78:e1:98:0d:57:f4:64:48: 64:7a:e9:17:7b:d3:29:0d:4f:16:61:b4:0b:9e:14: f3:66:7c:81:83:d9:81:08:53:83:bc:83:a9:33:bb: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:1D:32:22:8C:78:68:92:B0:6D:01:6B:03:89:42:30:17:1C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 192.228.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:83:49:9d:85:f5:fb:55:66:27:a4:3b:90:a5:7a:19:83:74: bc:82:22:6e:97:eb:0c:c2:1b:cd:06:83:e9:3e:8b:95:fb:c3: 0c:e0:3f:68:8b:73:b6:43:e1:4b:da:ce:32:ae:b3:50:fd:ce: 04:70:e0:ed:75:e5:b7:d2:4b:43:a1:4c:7c:10:f5:d1:8d:14: 81:ea:bb:6e:73:ef:e8:2b:d3:6f:25:68:5f:45:b3:9f:aa:df: 6c:76:fa:35:c4:6b:16:d0:9f:00:e3:04:d5:7a:0f:9e:ee:3d: d1:57:63:bf:9f:31:14:b5:08:9f:9f:2a:07:17:14:86:7f:86: c1:dd:6d:b0:0e:da:42:6c:8f:94:af:30:a2:f2:9b:0d:a4:6a: 61:39:82:c9:c2:5c:80:a6:f1:64:39:95:78:b4:a7:6a:28:02: 55:fc:50:3c:7c:6d:83:2b:4e:2b:d4:1e:6c:89:62:7d:6d:86: e4:2b:1d:26:4d:d6:41:dc:42:52:6d:f8:e0:a4:5d:05:71:29: 77:a8:8d:c0:cc:0d:aa:b6:d4:35:c8:82:2d:68:e0:df:01:1c: 00:8c:70:d8:40:88:4a:2f:45:68:1d:07:59:0f:71:06:64:56: b6:a7:4d:2e:78:5b:92:cc:2d:48:61:c7:4f:93:c1:90:42:4b: 9e:6a:97:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdiPLztBRiECU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MmIyZGEwNzctZjM0OC00NGQyLWJiZmEtNGM4OTMwYWFiMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshvikO5Cp2Yl5J/baCnSogh6N0DpPpvZki2o TjRFR1fIFdZBebMFYPO9DX8PMQ0N0VEJHT8Y5pUoWU544MkCio6HysKxqlZaTg1I 6qPc2j+ylPaK7BgFISIb3nd6Hp6/wDNkrVoGpMHW67coDPk4qmXKuR7VM71lRHL/ 8OEEimnXr+JXfnZILyhXmtHGHcY7x2cuZPsIvHeataJUdtocJCZHbQnuWC8wl3Gc VpO1SnrO+n63ImCO6M1Vz+AobJKnzKBMo7D3E5MhI74MRnmrZvxplgJW4XfPeOGY DVf0ZEhkeukXe9MpDU8WYbQLnhTzZnyBg9mBCFODvIOpM7sXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgGHTIijHhokrBtAWsDiUIwFxyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNTJkYjI3MTctMWI5Yi0z NzMxLWI3ZWYtNjk0MzcyNDE1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuDSZ2F9ftVZiekO5ClehmDdLyCIm6X6wzCG80Gg+k+i5X7wwzgP2iL c7ZD4UvazjKus1D9zgRw4O115bfSS0OhTHwQ9dGNFIHqu25z7+gr028laF9Fs5+q 32x2+jXEaxbQnwDjBNV6D57uPdFXY7+fMRS1CJ+fKgcXFIZ/hsHdbbAO2kJsj5Sv MKLymw2kamE5gsnCXICm8WQ5lXi0p2ooAlX8UDx8bYMrTivUHmyJYn1thuQrHSZN 1kHcQlJt+OCkXQVxKXeojcDMDaq21DXIgi1o4N8BHACMcNhAiEovRWgdB1kPcQZk VranTS54W5LMLUhhx0+TwZBCS55qlyY= -----END CERTIFICATE-----Generated at Sun Nov 24 22:13:00 2024 by rpki-client on console-fra.rpki-client.org