$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa File: 8695139a-e96a-3566-9130-2d8de4f804d0.roa (raw, json) Hash identifier: 1nPw55t33fRb0jtVcVM9dGKYfs0Ft+Ul/kSTanOobxU= Subject key identifier: 59:21:6E:23:4E:3C:AC:F8:E0:00:95:61:8C:FD:24:AB:80:28:3B:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285847D999F9E928882A8E31CAA210 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 62759 IP address blocks: 140.174.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f9:e9:28:88:2a:8e:31:ca:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=05cda1b2-14a2-4b80-bed9-e94abd82ccd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:76:a3:2c:b7:06:61:79:50:f3:bf:18:b7:57: 20:3c:d6:51:eb:a2:bf:51:b4:c9:8c:9e:26:5b:76: 42:ec:97:95:3c:1c:da:f3:31:9f:5d:86:1c:6f:91: db:66:7a:96:78:a3:21:dd:eb:28:6b:86:a8:99:aa: ce:45:88:0b:f5:40:aa:d2:2f:27:dc:52:f6:82:ac: fa:ff:01:1d:a9:06:69:1c:90:df:41:9c:90:df:ad: cc:4b:f9:b2:4f:fb:73:c6:88:c2:dc:74:f7:73:b1: 2b:53:1c:b6:1b:42:94:77:4c:80:0b:95:00:08:c4: 56:a2:b8:5e:a4:04:14:ff:89:44:3b:43:44:65:71: 4f:a8:dd:a1:66:70:9b:93:a8:81:cd:49:74:17:92: b9:0b:75:db:77:4a:33:88:de:96:6b:c6:1f:5b:12: 5f:6a:c4:52:10:1f:7c:42:5f:be:d4:9e:c5:90:9f: 6d:81:de:7a:c5:d0:e9:64:3f:f4:71:4e:5e:7a:c3: fb:d2:5a:c3:fe:d1:8a:76:ba:f1:7d:12:0a:0a:f0: a8:b0:1d:10:62:8f:a1:72:53:90:05:87:1b:cf:8d: a2:24:89:3c:0f:c4:bd:cf:48:1b:84:9f:e8:f7:bc: d3:24:f5:b8:cd:52:27:7a:91:58:55:41:fd:8c:da: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:6E:23:4E:3C:AC:F8:E0:00:95:61:8C:FD:24:AB:80:28:3B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:43:c1:ab:5a:f1:69:f5:61:79:9d:a8:6b:a3:ed:12:06:cc: 1e:6b:44:82:ff:af:24:36:d2:75:1c:08:20:89:90:c2:45:64: 79:34:f3:86:f1:e3:5e:24:44:5b:6a:85:a5:4e:c9:95:8e:7b: d9:91:c8:b6:60:c0:98:92:19:e4:fd:6a:3a:f2:30:65:5f:38: ee:5b:76:04:f9:f2:c8:32:1b:ce:fc:88:b7:40:33:f3:97:ea: 1a:a6:bb:cf:b0:4f:07:09:49:e5:87:0c:a8:0a:87:05:0e:9f: fa:78:d7:bf:13:75:ba:f9:84:52:73:38:08:e9:d5:1e:b5:5f: 06:ae:8a:2a:2e:f8:0a:59:7a:45:c9:8e:27:0e:34:1c:08:8e: c5:d8:3d:2f:84:fe:18:b3:34:a3:c2:78:56:5c:ec:bd:90:0c: 60:1d:df:e9:8e:91:4b:78:41:05:41:a4:b8:03:46:a3:f9:65: 8c:56:99:28:29:63:79:01:2e:ef:bc:fe:ed:12:0e:5f:06:94: d1:d6:25:85:94:04:17:de:23:65:e0:ce:4b:98:7b:cc:c6:a5: 38:5d:4e:23:a2:5c:eb:98:09:04:ca:8b:01:c0:db:02:bf:97: 46:c4:35:ca:5b:df:35:2d:eb:9e:5e:f2:ed:85:73:c9:93:5f: ea:dd:39:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfnpKIgqjjHKohAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MDVjZGExYjItMTRhMi00YjgwLWJlZDktZTk0YWJkODJjY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHajLLcGYXlQ878Yt1cgPNZR66K/UbTJjJ4m W3ZC7JeVPBza8zGfXYYcb5HbZnqWeKMh3esoa4aomarORYgL9UCq0i8n3FL2gqz6 /wEdqQZpHJDfQZyQ363MS/myT/tzxojC3HT3c7ErUxy2G0KUd0yAC5UACMRWorhe pAQU/4lEO0NEZXFPqN2hZnCbk6iBzUl0F5K5C3Xbd0oziN6Wa8YfWxJfasRSEB98 Ql++1J7FkJ9tgd56xdDpZD/0cU5eesP70lrD/tGKdrrxfRIKCvCosB0QYo+hclOQ BYcbz42iJIk8D8S9z0gbhJ/o97zTJPW4zVInepFYVUH9jNqD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkhbiNOPKz44ACVYYz9JKuAKDvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY5NTEzOWEtZTk2YS0z NTY2LTkxMzAtMmQ4ZGU0ZjgwNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjK7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJDwata8Wn1YXmdqGuj7RIGzB5rRIL/ryQ20nUcCCCJkMJFZHk084bx 414kRFtqhaVOyZWOe9mRyLZgwJiSGeT9ajryMGVfOO5bdgT58sgyG878iLdAM/OX 6hqmu8+wTwcJSeWHDKgKhwUOn/p4178Tdbr5hFJzOAjp1R61Xwauiiou+ApZekXJ jicONBwIjsXYPS+E/hizNKPCeFZc7L2QDGAd3+mOkUt4QQVBpLgDRqP5ZYxWmSgp Y3kBLu+8/u0SDl8GlNHWJYWUBBfeI2XgzkuYe8zGpThdTiOiXOuYCQTKiwHA2wK/ l0bENcpb3zUt655e8u2Fc8mTX+rdORU= -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:04 2024 by rpki-client on console-fra.rpki-client.org