$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa File: d9dee4cd-e720-378c-ae57-f470d4345094.roa (raw, json) Hash identifier: iFVHFZjytjy5qnb1aAP/eS5jMkeoGxqR9J3OA9y4+wg= Subject key identifier: 3A:42:DD:C8:17:A6:64:92:59:C2:04:E7:B4:4C:5E:DC:E7:F9:D1:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847D56A21E8DAC4DA1A58220FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa Signing time: Sun 10 Nov 2024 14:00:37 +0000 ROA not before: Sun 10 Nov 2024 14:00:37 +0000 ROA not after: Sat 08 Feb 2025 14:00:37 +0000 asID: 396576 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d5:6a:21:e8:da:c4:da:1a:58:22:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 10 14:00:37 2024 GMT Not After : Feb 8 14:00:37 2025 GMT Subject: CN=b46bfa7e-023e-4e21-96d2-a2a5302ff88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:ff:9f:fd:51:4e:1e:9b:34:82:f5:50:96: 91:c9:e3:6b:09:19:0a:1d:84:00:64:c5:fe:da:6f: c7:5b:ce:78:ae:7f:34:46:ed:09:a1:e5:62:ed:65: 3f:4a:9b:b5:bf:1b:b4:b6:14:fe:a5:83:d6:cd:ac: 8e:cf:73:97:fc:01:fd:ab:2c:55:9c:15:be:4e:95: b9:97:6e:e6:3e:db:44:15:5e:b1:8d:02:c9:99:98: f6:2f:10:84:65:85:12:08:13:98:cd:58:ca:6c:3c: 46:ce:a0:dd:2e:2e:00:80:88:04:d2:c2:27:06:8e: 0b:b0:61:72:92:6e:95:66:f1:0b:aa:43:bd:f1:9c: 42:f6:d8:f3:c4:28:ac:91:f1:68:9e:2b:71:78:19: f8:27:6a:ba:46:60:28:92:3d:1b:1a:a9:27:a9:cd: 32:cd:cd:e6:2b:bf:09:bc:32:ac:87:22:f8:02:99: 04:81:b4:4e:37:77:30:33:f8:5f:68:30:c4:6f:01: 20:64:ed:0c:91:93:3f:97:a7:10:75:be:b3:2a:ce: dc:d5:ca:f9:4b:f8:56:54:3c:43:12:d3:eb:30:ec: ae:86:a9:c2:aa:3f:dc:d4:36:97:f7:42:2d:b7:85: 5a:45:7b:c7:86:da:b1:d3:d6:25:5a:7f:5a:dc:39: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:DD:C8:17:A6:64:92:59:C2:04:E7:B4:4C:5E:DC:E7:F9:D1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:af:28:cd:cc:11:48:5b:80:55:d3:82:70:56:ad:ac:5a:f8: 8a:2d:ee:76:4b:e7:9d:44:48:bb:17:af:2d:73:28:9b:04:b8: 2f:2f:44:e6:c9:4f:58:04:92:28:c2:3e:07:91:28:13:a5:69: 72:8e:e8:81:60:12:40:40:72:e6:e7:6c:78:f9:b0:9c:8e:1c: 7d:6f:39:0d:dd:bd:b2:dc:70:a8:b9:56:8e:08:6a:c1:ac:00: 9f:84:e0:b5:05:eb:f4:d2:d3:37:b2:6d:14:c1:15:90:62:0b: 2d:2e:23:e4:74:7b:20:c7:b9:d7:ce:34:f1:98:90:5e:52:2b: f6:bd:15:d8:93:48:38:89:bb:d1:3a:d8:9b:e7:0b:1b:c4:49: ce:f5:e5:67:dc:48:f9:12:7b:60:e3:fd:07:09:5c:b2:fb:b0: 04:f6:0f:93:34:bd:9e:ce:50:2b:06:10:38:fd:72:8a:f7:98: 13:b0:b0:f6:17:da:0b:81:15:57:de:b8:6b:7d:56:85:34:02: 00:cc:da:72:f4:f3:25:c1:2d:62:bf:ca:a6:dc:f0:4d:76:59: 9a:a0:78:7c:b1:57:2a:95:dc:45:6e:64:7a:60:51:fa:cb:9d: ec:a0:07:07:09:ed:c2:a8:26:8e:63:3c:78:ba:b0:98:a4:ec: 71:74:56:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVaiHo2sTaGlgiD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk YjQ2YmZhN2UtMDIzZS00ZTIxLTk2ZDItYTJhNTMwMmZmODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNv/n/1RTh6bNIL1UJaRyeNrCRkKHYQAZMX+ 2m/HW854rn80Ru0JoeVi7WU/Spu1vxu0thT+pYPWzayOz3OX/AH9qyxVnBW+TpW5 l27mPttEFV6xjQLJmZj2LxCEZYUSCBOYzVjKbDxGzqDdLi4AgIgE0sInBo4LsGFy km6VZvELqkO98ZxC9tjzxCiskfFonitxeBn4J2q6RmAokj0bGqknqc0yzc3mK78J vDKshyL4ApkEgbRON3cwM/hfaDDEbwEgZO0MkZM/l6cQdb6zKs7c1cr5S/hWVDxD EtPrMOyuhqnCqj/c1DaX90Itt4VaRXvHhtqx09YlWn9a3DmyxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDpC3cgXpmSSWcIE57RMXtzn+dFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDlkZWU0Y2QtZTcyMC0z NzhjLWFlNTctZjQ3MGQ0MzQ1MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZryjNzBFIW4BV04JwVq2sWviKLe52S+edREi7F68tcyibBLgvL0Tm yU9YBJIowj4HkSgTpWlyjuiBYBJAQHLm52x4+bCcjhx9bzkN3b2y3HCouVaOCGrB rACfhOC1Bev00tM3sm0UwRWQYgstLiPkdHsgx7nXzjTxmJBeUiv2vRXYk0g4ibvR Otib5wsbxEnO9eVn3Ej5Entg4/0HCVyy+7AE9g+TNL2ezlArBhA4/XKK95gTsLD2 F9oLgRVX3rhrfVaFNAIAzNpy9PMlwS1iv8qm3PBNdlmaoHh8sVcqldxFbmR6YFH6 y53soAcHCe3CqCaOYzx4urCYpOxxdFZL -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:48 2024 by rpki-client on console-fra.rpki-client.org