$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa File: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json) Hash identifier: N6NEcUtibN1baN1wYcjKjROlnzdmx7xos9Z8KQ2UYNM= Subject key identifier: 5E:EC:7D:01:A3:11:E9:36:DD:96:4A:BA:94:77:0A:E3:1A:68:A4:A9 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F43285847C34486A964AA131C98170700 Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 23162 IP address blocks: 128.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:86:a9:64:aa:13:1c:98:17:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=ac4e6247-bd35-4f09-8fb2-6143ced3a4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:af:a0:a6:7b:d8:86:c5:91:12:93:00:a8: b1:ee:c9:ab:90:49:d0:21:93:54:66:4b:34:40:11: f7:5b:31:cb:46:21:26:13:8b:05:90:6b:67:b7:1a: ad:20:1a:aa:3f:ea:90:a5:00:62:49:2b:3c:e0:f9: fc:2d:86:cc:29:c2:68:ed:8c:37:cb:db:21:32:14: f2:09:b6:7a:3b:58:05:65:9c:40:b1:0c:ca:6e:c5: fb:86:31:b8:9f:b5:89:74:0e:af:5c:5a:49:a8:ea: d3:0a:28:6e:00:18:42:0f:c5:6c:1d:ec:28:0b:87: d9:75:ee:08:99:82:3e:c3:ea:80:96:0d:65:8f:42: 69:c1:9d:bc:5d:38:4a:6c:98:a5:05:eb:52:e3:82: 98:8d:41:ef:02:e7:aa:56:58:d5:aa:ad:22:a0:83: 88:16:7c:8e:f9:41:42:46:a1:c9:38:9b:c1:41:0e: 81:ba:ac:ab:20:bd:a0:35:69:ff:a1:31:73:0b:30: 25:ec:da:6f:b4:cb:7f:04:76:de:fd:71:a0:95:54: fd:35:1e:41:39:0a:2e:a5:81:1f:bc:11:59:44:30: a6:4c:02:43:67:63:9d:fc:a7:70:88:a6:84:49:3a: 40:dc:50:0e:a3:9c:93:f0:e4:e8:71:13:de:27:0d: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EC:7D:01:A3:11:E9:36:DD:96:4A:BA:94:77:0A:E3:1A:68:A4:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: 128.163.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:04:0f:4a:ee:03:f7:ca:58:ba:23:05:e6:d4:95:90:3c:aa: a7:41:b5:da:ff:52:dc:ba:05:ca:73:fd:75:17:39:80:74:be: aa:af:d5:39:da:0d:85:a0:bd:f1:d7:1d:d9:36:dc:c3:26:6d: 52:49:05:76:33:f0:2e:23:13:b3:75:e5:d4:13:44:41:5d:40: b6:22:3a:37:6a:c2:de:0c:e5:de:63:84:a9:b3:56:36:2e:94: a2:39:ca:65:7d:58:78:1b:88:8b:75:f0:81:25:3e:87:d8:ae: 63:41:bf:10:2c:0a:c8:ca:39:34:a3:20:73:41:77:30:35:10: 09:96:eb:25:0d:e1:b1:29:5b:e2:e1:6f:2b:09:6b:da:93:f5: 60:06:70:54:9b:62:f0:f7:9f:e4:ef:e5:c9:06:d1:9b:96:1a: 34:40:d3:a6:3c:c6:a3:46:f8:33:3e:8f:3c:c6:35:37:c7:57: e8:f4:37:cc:e7:4d:aa:62:87:2e:7b:49:09:51:01:eb:fe:5a: 2c:68:3b:01:93:2d:d2:0b:ca:a1:53:76:fb:43:ed:a7:d1:d8: 96:4c:a3:93:89:d5:f4:2e:fa:60:e2:48:ff:65:1e:2a:90:28: 11:2d:f5:34:83:73:49:8d:74:5c:93:97:81:f5:9c:90:9b:35: 48:59:12:b0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfDRIapZKoTHJgXBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk YWM0ZTYyNDctYmQzNS00ZjA5LThmYjItNjE0M2NlZDNhNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQqvoKZ72IbFkRKTAKix7smrkEnQIZNUZks0 QBH3WzHLRiEmE4sFkGtntxqtIBqqP+qQpQBiSSs84Pn8LYbMKcJo7Yw3y9shMhTy CbZ6O1gFZZxAsQzKbsX7hjG4n7WJdA6vXFpJqOrTCihuABhCD8VsHewoC4fZde4I mYI+w+qAlg1lj0JpwZ28XThKbJilBetS44KYjUHvAueqVljVqq0ioIOIFnyO+UFC RqHJOJvBQQ6BuqyrIL2gNWn/oTFzCzAl7NpvtMt/BHbe/XGglVT9NR5BOQoupYEf vBFZRDCmTAJDZ2Od/KdwiKaESTpA3FAOo5yT8OTocRPeJw2XCQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF7sfQGjEek23ZZKupR3CuMaaKSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvZDliNWM4MGUtZWMyYS0z YTQ0LWE1NmYtZmM2NTk1NjVmZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEQQPSu4D98pYuiMF5tSVkDyqp0G12v9S3LoFynP9dRc5gHS+qq/VOdoN haC98dcd2TbcwyZtUkkFdjPwLiMTs3Xl1BNEQV1AtiI6N2rC3gzl3mOEqbNWNi6U ojnKZX1YeBuIi3XwgSU+h9iuY0G/ECwKyMo5NKMgc0F3MDUQCZbrJQ3hsSlb4uFv Kwlr2pP1YAZwVJti8Pef5O/lyQbRm5YaNEDTpjzGo0b4Mz6PPMY1N8dX6PQ3zOdN qmKHLntJCVEB6/5aLGg7AZMt0gvKoVN2+0Ptp9HYlkyjk4nV9C76YOJI/2UeKpAo ES31NINzSY10XJOXgfWckJs1SFkSsA== -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:09 2024 by rpki-client on console-fra.rpki-client.org