$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa File: 0999b1e3-4785-38ae-a00d-63b70427c4f0.roa (raw, json) Hash identifier: pN8vS1KRBZWGWeP+a6ErIXURBhHrLTa5gNMQWeQ6/I8= Subject key identifier: 2D:4C:50:20:29:ED:D1:D5:07:31:CA:08:11:88:D7:F3:B1:BC:87:A9 Certificate issuer: /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Certificate serial: 010D0C9F43285847E094C05AE08E27C3A9802C40 Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 14618 IP address blocks: 192.190.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:c0:5a:e0:8e:27:c3:a9:80:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=d82147cf-f63e-46f5-8b19-73eaa6a8a963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:2b:05:12:90:44:c9:ab:ba:6d:39:6b:3c: 1f:f1:80:16:12:38:72:9e:82:02:6c:08:4b:f6:e6: 49:3f:b3:ed:58:a8:5f:ad:d8:36:5a:69:16:7d:57: d0:58:2e:c6:1c:de:d5:a4:03:b3:15:1c:3f:a6:fc: 4a:78:f1:c8:8a:47:fd:4a:a0:6d:a5:8d:60:a4:3d: 6c:75:be:07:b1:cd:7e:2d:63:6b:5e:e7:9a:2d:b1: 12:7e:0e:43:6a:95:13:6d:e9:8a:33:e8:b3:86:d3: 3d:dd:15:cf:87:47:04:0e:c7:7c:e2:47:45:19:bc: f4:a0:af:68:74:e9:18:c6:af:32:31:bb:b4:fa:43: 10:0a:3d:10:4c:b6:aa:09:2a:43:98:06:96:57:a7: 6d:ad:03:eb:f1:68:25:21:75:e0:6f:c3:fb:a5:63: 8b:a8:33:61:e6:0f:22:b5:e8:5e:3f:2d:38:33:18: 04:5e:49:d8:eb:03:10:d0:b8:8c:eb:60:61:b6:bd: 90:be:20:d1:8b:1f:ce:0f:3c:07:f6:2b:e3:fd:19: 7e:1b:0d:3b:99:e3:16:a3:b0:da:f3:33:31:e2:7a: 6e:6b:bc:71:04:bc:28:12:af:e6:e9:07:b3:38:a8: 26:4c:fb:37:94:02:b2:02:ca:60:c3:87:54:c8:ca: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:50:20:29:ED:D1:D5:07:31:CA:08:11:88:D7:F3:B1:BC:87:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl X509v3 Authority Key Identifier: keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer sbgp-ipAddrBlock: critical IPv4: 192.190.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ad:68:3a:30:87:df:26:de:1d:52:37:3f:40:be:4a:23:dc: ac:cc:e6:9e:2d:c1:8e:d7:91:9b:4d:3a:c2:49:b8:dc:52:0e: 24:c5:32:bc:28:0e:5f:1d:42:35:e9:52:9b:b5:1f:64:05:40: d7:67:1b:ed:dc:d9:5a:c7:ec:0d:cc:f2:f2:cd:a2:c4:68:0f: 63:bd:b4:38:81:a8:c7:60:bb:4d:1d:b0:ef:2e:4a:e9:cf:02: 51:f6:53:55:36:83:29:26:51:ce:14:ce:2d:e3:bb:18:bb:bf: f8:1b:f0:cd:33:a9:e0:bb:eb:4e:b4:a9:d3:b7:c0:01:9c:6a: de:c3:17:00:25:00:21:2a:4d:27:e6:00:d7:f5:49:35:27:e0: 69:fd:60:79:46:c2:f0:7c:c5:03:8d:1b:93:c4:ec:a9:ad:66: 5d:c2:6d:60:83:75:a3:a8:e2:7c:ae:e5:48:2b:ca:65:f2:10: d5:ef:dd:80:c8:6f:32:1d:2f:fa:24:9a:82:35:44:63:7c:c6: 3d:8f:3c:1d:7b:05:09:a9:a1:8e:5c:02:22:ad:37:66:dd:73: 9d:44:34:71:87:57:dd:2a:1f:b6:da:9f:46:68:8f:52:27:22: 74:17:db:a0:f5:fb:1f:45:cf:b1:1a:3f:91:2d:73:8e:bc:e2: 09:c0:eb:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMBa4I4nw6mALEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyYWI1ODEtYTBiNC00ZjAxLTlhYjEtOGRhYzZkODgx NTA4MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDgyMTQ3Y2YtZjYzZS00NmY1LThiMTktNzNlYWE2YThhOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2isrBRKQRMmrum05azwf8YAWEjhynoICbAhL 9uZJP7PtWKhfrdg2WmkWfVfQWC7GHN7VpAOzFRw/pvxKePHIikf9SqBtpY1gpD1s db4Hsc1+LWNrXueaLbESfg5DapUTbemKM+izhtM93RXPh0cEDsd84kdFGbz0oK9o dOkYxq8yMbu0+kMQCj0QTLaqCSpDmAaWV6dtrQPr8WglIXXgb8P7pWOLqDNh5g8i tehePy04MxgEXknY6wMQ0LiM62Bhtr2QviDRix/ODzwH9ivj/Rl+Gw07meMWo7Da 8zMx4npua7xxBLwoEq/m6QezOKgmTPs3lAKyAspgw4dUyMpNXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1MUCAp7dHVBzHKCBGI1/OxvIepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjJh YjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFjNmQ4ODE1MDgvMDk5OWIxZTMtNDc4NS0z OGFlLWEwMGQtNjNiNzA0MjdjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIyYWI1ODEtYTBiNC00ZjAxLTlh YjEtOGRhYzZkODgxNTA4LzgyMmFiNTgxLWEwYjQtNGYwMS05YWIxLThkYWM2ZDg4 MTUwOC5jcmwwHwYDVR0jBBgwFoAUQasLrQXsMOk8Ntl0D1mitgcdWtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjJhYjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFj NmQ4ODE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOtaDowh98m3h1SNz9Avkoj3KzM5p4twY7XkZtNOsJJuNxSDiTFMrwo Dl8dQjXpUpu1H2QFQNdnG+3c2VrH7A3M8vLNosRoD2O9tDiBqMdgu00dsO8uSunP AlH2U1U2gykmUc4Uzi3juxi7v/gb8M0zqeC76060qdO3wAGcat7DFwAlACEqTSfm ANf1STUn4Gn9YHlGwvB8xQONG5PE7KmtZl3CbWCDdaOo4nyu5UgrymXyENXv3YDI bzIdL/okmoI1RGN8xj2PPB17BQmpoY5cAiKtN2bdc51ENHGHV90qH7ban0Zoj1In InQX26D1+x9Fz7EaP5Etc4684gnA6y0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:37 2024 by rpki-client on console-fra.rpki-client.org