$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1f94ccb-5e92-3836-b99c-5ab481b45041.roa File: b1f94ccb-5e92-3836-b99c-5ab481b45041.roa (raw, json) Hash identifier: h7n/8l5Doe1L+rugfXFBOvRTJeOG40HwFLUGIj4YF5w= Subject key identifier: 20:B6:5F:C9:FF:51:10:6F:6C:ED:BC:CF:51:05:DB:39:45:66:17:B7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285847EBBF849CA98D02AF3E7E09CF Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1f94ccb-5e92-3836-b99c-5ab481b45041.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 2000 IP address blocks: 192.147.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:84:9c:a9:8d:02:af:3e:7e:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=73f74359-e5ac-4e9b-a012-b41c3797b387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:1b:f2:e9:1b:07:92:0a:20:2e:00:e7:e1: 61:ca:71:76:0f:d6:9a:27:08:b3:21:70:24:9c:8d: b0:6f:9d:ae:61:69:3e:33:18:9d:36:b6:eb:fb:5e: cf:32:8e:a5:21:a9:2e:06:90:49:cf:a6:53:78:44: 25:b1:8e:4a:ee:30:ca:f8:82:ca:e4:8f:c8:62:19: d3:e3:cc:d0:fa:00:63:73:66:1e:0e:cf:23:7c:57: 67:ec:c3:e0:a5:1c:80:6c:fa:24:a3:86:4b:a4:6b: f4:b8:aa:56:df:03:7c:13:f5:72:ac:d1:7d:4f:02: 49:7f:59:1c:80:30:87:57:be:c6:ac:f0:69:01:4f: bf:d9:d0:36:5d:f5:89:d4:3f:1b:15:c1:39:6b:00: 2a:fe:2e:c6:c7:71:c7:fb:4d:54:48:e1:32:e3:bd: 12:d3:9c:83:fb:37:9f:e9:77:27:27:92:26:54:dd: 21:7c:99:6a:28:28:2d:0a:37:e7:03:48:14:0e:78: 94:24:e8:1e:03:5f:a6:fe:ce:6b:9b:2e:1d:6d:18: b0:e9:de:0c:85:b0:a1:0b:30:59:47:6e:34:39:08: be:69:b8:cd:e9:57:7d:cc:58:d2:e5:57:f7:36:b4: 48:f9:d3:52:ae:f2:85:33:09:46:a8:e4:c6:e5:b3: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:5F:C9:FF:51:10:6F:6C:ED:BC:CF:51:05:DB:39:45:66:17:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1f94ccb-5e92-3836-b99c-5ab481b45041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.147.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:61:2c:0b:30:00:e3:56:86:16:5f:21:78:80:a6:58:2e:05: 16:57:18:3e:40:af:99:9d:bb:73:2c:0e:39:bf:85:4f:5a:ff: 54:42:92:9b:e2:b0:89:10:bc:a7:28:ae:e5:8a:1d:c9:51:1f: 87:16:72:37:60:66:5f:1f:66:03:47:9c:fb:7a:a8:2c:56:8f: 43:dd:d0:c2:6c:2d:aa:22:0d:aa:17:d4:75:3c:36:c0:a9:af: 6e:ac:f8:f1:3d:55:0d:d8:03:ac:35:5b:dd:42:8a:1a:be:f3: 8b:68:51:31:4e:3b:0e:36:d8:f6:7b:d9:d9:ad:fa:9d:94:8d: 72:b4:5d:7b:46:89:0f:c4:0a:ff:bf:89:ea:f7:74:c3:b0:e5: 40:73:c7:79:02:0d:da:df:71:28:92:85:2e:6a:bf:0e:d7:dc: 5d:02:38:c3:35:61:e0:18:98:74:c6:0b:b2:21:62:a2:81:0b: b1:7c:96:8e:a5:e5:30:2d:68:9d:5b:56:b5:ca:f1:ef:d2:da: f7:d8:55:63:5c:a0:ba:7f:82:01:3f:2d:de:e4:3a:39:57:15: 17:59:13:3c:be:6c:30:b6:c9:3d:2f:f4:e2:61:e3:51:47:12: 0e:4c:fc:cd:1d:27:73:11:56:55:a7:f7:9b:5f:9d:af:fe:a5: 77:85:2f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4ScqY0Crz5+Cc8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk NzNmNzQzNTktZTVhYy00ZTliLWEwMTItYjQxYzM3OTdiMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEwb8ukbB5IKIC4A5+FhynF2D9aaJwizIXAk nI2wb52uYWk+MxidNrbr+17PMo6lIakuBpBJz6ZTeEQlsY5K7jDK+ILK5I/IYhnT 48zQ+gBjc2YeDs8jfFdn7MPgpRyAbPoko4ZLpGv0uKpW3wN8E/VyrNF9TwJJf1kc gDCHV77GrPBpAU+/2dA2XfWJ1D8bFcE5awAq/i7Gx3HH+01USOEy470S05yD+zef 6XcnJ5ImVN0hfJlqKCgtCjfnA0gUDniUJOgeA1+m/s5rmy4dbRiw6d4MhbChCzBZ R240OQi+abjN6Vd9zFjS5Vf3NrRI+dNSrvKFMwlGqOTG5bP+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC2X8n/URBvbO28z1EF2zlFZhe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjFmOTRjY2ItNWU5Mi0z ODM2LWI5OWMtNWFiNDgxYjQ1MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFhLAswAONWhhZfIXiAplguBRZXGD5Ar5mdu3MsDjm/hU9a/1RCkpvi sIkQvKcoruWKHclRH4cWcjdgZl8fZgNHnPt6qCxWj0Pd0MJsLaoiDaoX1HU8NsCp r26s+PE9VQ3YA6w1W91Cihq+84toUTFOOw422PZ72dmt+p2UjXK0XXtGiQ/ECv+/ ier3dMOw5UBzx3kCDdrfcSiShS5qvw7X3F0COMM1YeAYmHTGC7IhYqKBC7F8lo6l 5TAtaJ1bVrXK8e/S2vfYVWNcoLp/ggE/Ld7kOjlXFRdZEzy+bDC2yT0v9OJh41FH Eg5M/M0dJ3MRVlWn95tfna/+pXeFL8g= -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:16 2024 by rpki-client on console-ams.rpki-client.org