$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa File: 4f49763f-ed78-345f-8b50-e6621c015ab1.roa (raw, json) Hash identifier: aJ0PTPeLXxvJFxw4b5nvxO9XpJvjHlWuMvinRWvv/Pk= Subject key identifier: 89:ED:9A:51:1F:76:0E:A0:4D:29:CE:B4:03:38:2E:AD:76:D0:FA:E2 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F432858479EDBCD3A9B78C4501606E200 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa Signing time: Tue 22 Oct 2024 01:00:31 +0000 ROA not before: Tue 22 Oct 2024 01:00:31 +0000 ROA not after: Mon 20 Jan 2025 02:00:31 +0000 asID: 3477 IP address blocks: 192.58.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:db:cd:3a:9b:78:c4:50:16:06:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 22 01:00:31 2024 GMT Not After : Jan 20 02:00:31 2025 GMT Subject: CN=0aa5fef1-64b4-40b3-9379-780f703d07fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:e8:61:17:19:89:e2:b6:4d:d7:f5:1d:f8: a7:41:b4:24:da:16:63:d9:a2:a0:5f:3f:d4:7a:6d: 61:65:45:33:4b:4a:4d:4f:8a:0c:d7:c2:8c:36:ac: 41:e0:84:9a:1c:4f:fc:2d:e7:84:7d:37:b6:05:30: f8:b8:c0:73:53:34:89:ff:c2:8b:54:a9:f4:45:32: 19:68:38:c5:06:dc:72:b7:c3:01:c4:c2:72:86:4b: d3:56:ea:29:64:0f:6d:41:a6:2f:6f:2c:60:cd:27: 88:08:d3:1e:02:5f:b6:c1:32:57:28:b8:c3:f5:fb: 6e:cb:05:25:c6:10:1d:09:ee:81:a6:29:2a:a2:4b: 89:04:74:9c:a0:1b:b2:cc:e2:4e:b7:97:92:d2:e4: 99:8e:7c:e6:06:18:14:90:51:be:28:11:e1:a2:75: f2:8b:e4:27:9f:12:7d:9d:57:16:76:f4:22:b6:e6: 3d:c2:87:40:0b:fd:2e:9a:d3:1a:83:32:14:32:6f: b1:b9:07:11:75:bf:22:2a:15:98:9c:d2:f7:41:6d: e4:d3:5a:2f:9f:ac:2e:fd:d1:95:4b:3f:2b:d4:1e: 00:a0:d3:c6:a5:72:66:50:21:c4:c8:86:55:b2:2f: 7d:8c:65:85:f5:bc:1e:02:e5:66:60:ed:8f:7f:d0: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:9A:51:1F:76:0E:A0:4D:29:CE:B4:03:38:2E:AD:76:D0:FA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/4f49763f-ed78-345f-8b50-e6621c015ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.58.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:60:66:f8:6e:22:12:c2:69:61:a7:43:a6:8a:b7:d5:a2:65: cf:28:49:92:e5:f8:57:ab:88:7d:71:0b:fa:ce:44:fa:01:42: e9:34:32:8b:c2:f7:a9:6a:e0:14:fa:b1:56:b7:ee:2a:a8:f8: 8b:4d:6a:72:74:07:74:2a:e4:cc:c5:ed:9b:66:ae:bb:4b:37: 46:10:1a:58:5e:19:32:b9:0d:31:b0:e9:6d:b8:59:f5:bb:b8: 22:ad:5e:01:cf:36:82:7a:15:d8:e1:94:3b:cb:0c:91:0e:ba: 87:76:ab:6f:5f:70:18:0f:18:bf:84:db:45:fc:3d:3c:93:33: 5e:85:71:8e:57:bd:3c:19:5d:30:74:6f:3a:a0:16:11:d3:90: 15:74:6c:63:02:26:1f:04:db:8d:43:de:60:b9:ca:89:c8:9e: 82:16:c5:b3:60:62:ee:d5:a4:1b:b4:a7:54:73:c3:0e:15:0a: cc:ea:bd:1c:4e:e8:b8:e0:1f:b6:e6:d3:35:7a:53:4d:c4:3e: 67:78:41:65:26:a6:32:27:04:9e:41:ec:d1:d5:48:ea:27:c4: 00:cb:31:2f:c4:f5:53:d8:06:03:58:c6:97:af:91:5b:ce:f6: ec:56:1b:4d:67:c8:7e:63:8c:62:05:cd:27:09:08:a9:08:fb: 5a:a1:cd:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEee2806m3jEUBYG4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI0MTAyMjAxMDAzMVoXDTI1MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGFhNWZlZjEtNjRiNC00MGIzLTkzNzktNzgwZjcwM2QwN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnnoYRcZieK2Tdf1HfinQbQk2hZj2aKgXz/U em1hZUUzS0pNT4oM18KMNqxB4ISaHE/8LeeEfTe2BTD4uMBzUzSJ/8KLVKn0RTIZ aDjFBtxyt8MBxMJyhkvTVuopZA9tQaYvbyxgzSeICNMeAl+2wTJXKLjD9ftuywUl xhAdCe6BpikqokuJBHScoBuyzOJOt5eS0uSZjnzmBhgUkFG+KBHhonXyi+QnnxJ9 nVcWdvQituY9wodAC/0umtMagzIUMm+xuQcRdb8iKhWYnNL3QW3k01ovn6wu/dGV Sz8r1B4AoNPGpXJmUCHEyIZVsi99jGWF9bweAuVmYO2Pf9CmQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIntmlEfdg6gTSnOtAM4Lq120PriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNGY0OTc2M2YtZWQ3OC0z NDVmLThiNTAtZTY2MjFjMDE1YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1gZvhuIhLCaWGnQ6aKt9WiZc8oSZLl+FeriH1xC/rORPoBQuk0MovC 96lq4BT6sVa37iqo+ItNanJ0B3Qq5MzF7ZtmrrtLN0YQGlheGTK5DTGw6W24WfW7 uCKtXgHPNoJ6FdjhlDvLDJEOuod2q29fcBgPGL+E20X8PTyTM16FcY5XvTwZXTB0 bzqgFhHTkBV0bGMCJh8E241D3mC5yonInoIWxbNgYu7VpBu0p1Rzww4VCszqvRxO 6LjgH7bm0zV6U03EPmd4QWUmpjInBJ5B7NHVSOonxADLMS/E9VPYBgNYxpevkVvO 9uxWG01nyH5jjGIFzScJCKkI+1qhzUk= -----END CERTIFICATE-----Generated at Tue Oct 22 21:16:22 2024 by rpki-client on console-ams.rpki-client.org