$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa File: 76f66401-c4fb-3b48-82d7-7873180a2d1b.roa (raw, json) Hash identifier: 8GkUqkFgTjc7IWf033JzpbJVHbznTi3g11IEmCBxxXY= Subject key identifier: 23:A8:77:01:41:82:F1:D8:39:49:D0:08:93:A0:92:4B:53:70:BF:5B Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858477BF657568DD277174A0A92C0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 14500 IP address blocks: 192.151.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:57:56:8d:d2:77:17:4a:0a:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=c8def00e-240a-4ad5-b2d1-be75b1bc0ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:72:b2:c1:9f:b9:9a:46:8a:c2:4e:0f:19: 1e:3d:41:87:b7:09:a6:bb:16:b2:44:52:b8:9a:e8: 12:1d:16:87:ae:e2:95:e8:f0:f9:a6:4c:8e:6b:48: df:ab:44:4e:34:d8:ee:e8:44:64:52:67:71:7f:d7: f7:d0:4a:68:b4:21:d0:fd:1f:ae:48:dc:4a:2d:de: d5:97:d4:83:bd:fe:c3:1a:a1:66:62:4b:60:5f:20: 04:22:bc:90:58:48:e3:fb:e4:0c:9d:8c:47:f1:be: ba:66:45:56:d7:53:12:4c:60:6b:38:d9:93:d9:99: 56:ed:5b:e9:b3:1a:e4:34:09:7d:6f:1d:91:e6:9a: 1d:19:b0:05:a7:0d:bc:92:d3:33:d5:05:fc:c2:12: 31:24:c9:a7:c6:6d:eb:e8:53:42:85:c5:64:37:59: 86:91:38:97:5e:71:ed:09:4b:6b:6c:94:d5:bd:bd: 30:78:35:d2:66:c0:aa:f1:be:40:90:c6:0b:db:a9: 05:db:aa:20:72:db:4d:95:82:ac:e9:33:6d:51:3e: 00:6b:da:df:4a:f7:0e:08:9b:f4:b4:d3:57:34:c3: ea:c6:bb:06:ad:a2:bc:6c:9b:92:90:9e:04:ed:a5: a4:d6:62:fd:88:c3:f9:ce:51:a3:f1:7d:5f:fc:0d: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A8:77:01:41:82:F1:D8:39:49:D0:08:93:A0:92:4B:53:70:BF:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:77:79:ce:05:49:6e:ff:e9:fd:2b:40:c6:d9:c8:bf:67:5f: 30:b8:0f:91:3c:a9:ea:f6:52:37:03:52:1f:8d:dd:88:3b:5e: 79:9f:58:53:ca:a7:5f:56:d6:bd:29:7b:95:04:16:1e:ed:4d: 79:91:74:ed:a1:d7:0b:28:53:f6:63:55:c8:b5:1f:e1:cc:dc: 74:bb:0a:d5:95:d8:c9:86:d0:4a:7c:2a:a0:3a:ba:01:34:5a: 51:14:a3:3d:59:dc:80:78:40:25:65:38:5c:e2:45:91:fb:4c: 8e:42:c0:33:ab:ad:84:c8:43:b8:27:de:3a:29:08:07:d7:dd: 13:99:8d:d8:bd:45:b1:a4:15:01:4f:13:21:b3:cb:81:0f:4d: 17:09:e4:6f:ae:3e:df:14:99:f3:c4:8e:00:64:18:04:c7:f9: 82:d4:84:10:8f:4d:79:56:2c:ad:eb:d6:99:9a:dc:36:3d:99: f2:1d:01:b1:9f:6d:11:15:bd:f2:db:f0:6e:c1:3a:be:ec:8f: d8:ba:ec:b4:27:1e:b0:69:b2:ab:94:82:35:30:88:12:10:ff: 95:3a:04:38:94:cd:f0:a8:42:eb:0f:e5:24:ac:19:54:5c:bc: 5a:cb:aa:56:aa:00:9b:f3:f1:8b:f0:4d:74:b1:68:52:38:62: 82:45:51:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79ldWjdJ3F0oKksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YzhkZWYwMGUtMjQwYS00YWQ1LWIyZDEtYmU3NWIxYmMwYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf5yssGfuZpGisJODxkePUGHtwmmuxayRFK4 mugSHRaHruKV6PD5pkyOa0jfq0RONNju6ERkUmdxf9f30EpotCHQ/R+uSNxKLd7V l9SDvf7DGqFmYktgXyAEIryQWEjj++QMnYxH8b66ZkVW11MSTGBrONmT2ZlW7Vvp sxrkNAl9bx2R5podGbAFpw28ktMz1QX8whIxJMmnxm3r6FNChcVkN1mGkTiXXnHt CUtrbJTVvb0weDXSZsCq8b5AkMYL26kF26ogcttNlYKs6TNtUT4Aa9rfSvcOCJv0 tNNXNMPqxrsGraK8bJuSkJ4E7aWk1mL9iMP5zlGj8X1f/A0sUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOodwFBgvHYOUnQCJOgkktTcL9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNzZmNjY0MDEtYzRmYi0z YjQ4LTgyZDctNzg3MzE4MGEyZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl3ec4FSW7/6f0rQMbZyL9nXzC4D5E8qer2UjcDUh+N3Yg7XnmfWFPK p19W1r0pe5UEFh7tTXmRdO2h1wsoU/ZjVci1H+HM3HS7CtWV2MmG0Ep8KqA6ugE0 WlEUoz1Z3IB4QCVlOFziRZH7TI5CwDOrrYTIQ7gn3jopCAfX3ROZjdi9RbGkFQFP EyGzy4EPTRcJ5G+uPt8UmfPEjgBkGATH+YLUhBCPTXlWLK3r1pma3DY9mfIdAbGf bREVvfLb8G7BOr7sj9i67LQnHrBpsquUgjUwiBIQ/5U6BDiUzfCoQusP5SSsGVRc vFrLqlaqAJvz8YvwTXSxaFI4YoJFUTY= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org