$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa File: 4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa (raw, json) Hash identifier: 1DmCWPyxQ6Nma/z5SZ0HuSi5jl2TvsGJS72TztJnHvU= Subject key identifier: 57:7A:88:6D:EF:A0:16:F8:0C:D7:34:78:19:0C:81:18:20:69:8C:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847D56A24D7A4DFFBDA22F5A710 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa Signing time: Sun 10 Nov 2024 14:00:37 +0000 ROA not before: Sun 10 Nov 2024 14:00:37 +0000 ROA not after: Sat 08 Feb 2025 14:00:37 +0000 asID: 396597 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d5:6a:24:d7:a4:df:fb:da:22:f5:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 10 14:00:37 2024 GMT Not After : Feb 8 14:00:37 2025 GMT Subject: CN=59e83a74-634c-4d8d-ae19-0ea2b87aea55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:2d:eb:d8:9e:26:25:9c:9e:a8:5d:5b:8b: 9d:1d:fc:7b:02:48:80:01:3d:3b:6c:9f:f8:2e:75: 36:13:53:82:9d:33:c4:d4:f1:40:4d:62:bc:7c:f9: 5c:42:4d:18:2a:92:de:74:6b:e3:c3:36:b4:a9:84: 14:cc:01:0c:a3:17:14:32:48:64:e6:23:ad:87:4b: 45:93:43:47:ea:0e:7e:93:51:59:b1:46:9c:99:c5: cb:a7:02:85:23:10:70:a8:a5:8e:ca:f3:c3:8f:1e: 9b:e9:97:d3:66:40:fc:8f:47:ab:e9:2d:13:a6:1e: 9a:bc:c2:59:eb:09:76:d4:61:d6:07:46:65:06:9f: c1:21:fb:72:f9:31:7e:8c:c0:18:ef:93:d7:cd:28: 71:f2:b3:df:76:31:26:e0:ad:33:3a:af:22:71:06: 0d:83:ee:6f:c6:56:14:be:d7:17:1a:48:76:12:cc: 80:dd:13:83:b1:d0:76:54:ce:f0:c9:07:9f:90:23: 7f:95:39:84:07:18:ae:15:30:cb:7e:79:59:c5:b5: cf:b7:8e:fa:0e:4f:b8:60:cb:97:cd:4c:ff:25:9a: b0:9f:3d:5b:c8:42:80:2a:93:c5:28:0a:1d:26:d6: d5:a6:c8:2c:cd:81:07:88:b2:49:14:96:2c:7d:1b: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:88:6D:EF:A0:16:F8:0C:D7:34:78:19:0C:81:18:20:69:8C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:74:b5:a0:f6:88:92:50:a6:e7:8d:51:32:11:fe:1a:d8:78: 46:10:6e:fc:23:b3:ec:cb:6d:09:16:b4:f9:a9:5a:91:d5:33: 6f:e4:9f:a1:0b:89:49:5a:89:59:cc:34:6c:dc:e9:8f:ec:ed: 41:02:7a:8a:06:03:11:bd:56:73:01:65:eb:64:04:66:43:12: 6d:cc:e3:ff:7e:6f:2f:f2:2b:fa:33:32:95:00:45:f1:24:de: 4a:78:2e:f0:b4:09:bf:5f:29:06:dc:c4:6f:07:5e:6d:45:7b: b8:f3:68:c4:81:c7:05:06:c8:09:91:8a:18:4c:09:15:30:e5: 37:6d:3e:61:c6:6a:d8:23:9d:10:20:3c:c7:da:bf:a3:76:31: eb:24:c2:77:44:66:af:2e:e8:8d:8b:88:51:75:bb:d2:54:f9: 42:49:08:8a:e2:39:07:e8:cb:1e:cd:8f:87:de:e8:94:d8:b9: 01:8e:04:11:00:ca:58:e5:78:a2:ab:e2:d8:65:9f:43:ed:6e: a5:bb:39:e5:e5:9b:b3:2b:20:ca:27:47:6e:50:1e:5e:bc:2e: fb:c7:a9:e9:09:ea:5a:45:cb:a4:c2:0e:bb:6b:36:46:9a:00: 25:c6:ee:01:36:f2:8a:7b:55:e6:0d:84:f7:88:43:d1:52:2e: 0f:17:07:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVaiTXpN/72iL1pxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk NTllODNhNzQtNjM0Yy00ZDhkLWFlMTktMGVhMmI4N2FlYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kgt69ieJiWcnqhdW4udHfx7AkiAAT07bJ/4 LnU2E1OCnTPE1PFATWK8fPlcQk0YKpLedGvjwza0qYQUzAEMoxcUMkhk5iOth0tF k0NH6g5+k1FZsUacmcXLpwKFIxBwqKWOyvPDjx6b6ZfTZkD8j0er6S0Tph6avMJZ 6wl21GHWB0ZlBp/BIfty+TF+jMAY75PXzShx8rPfdjEm4K0zOq8icQYNg+5vxlYU vtcXGkh2EsyA3RODsdB2VM7wyQefkCN/lTmEBxiuFTDLfnlZxbXPt476Dk+4YMuX zUz/JZqwnz1byEKAKpPFKAodJtbVpsgszYEHiLJJFJYsfRs3fwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFd6iG3voBb4DNc0eBkMgRggaYxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGEwMjk2YzItZGU2Zi0z YzMyLWExMWUtOTFkZmU2ODEyZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsdLWg9oiSUKbnjVEyEf4a2HhGEG78I7Psy20JFrT5qVqR1TNv5J+h C4lJWolZzDRs3OmP7O1BAnqKBgMRvVZzAWXrZARmQxJtzOP/fm8v8iv6MzKVAEXx JN5KeC7wtAm/XykG3MRvB15tRXu482jEgccFBsgJkYoYTAkVMOU3bT5hxmrYI50Q IDzH2r+jdjHrJMJ3RGavLuiNi4hRdbvSVPlCSQiK4jkH6MsezY+H3uiU2LkBjgQR AMpY5Xiiq+LYZZ9D7W6luznl5ZuzKyDKJ0duUB5evC77x6npCepaRcukwg67azZG mgAlxu4BNvKKe1XmDYT3iEPRUi4PFwcI -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:29 2024 by rpki-client on console-fra.rpki-client.org