$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa File: 2319d758-c98d-395e-8e3d-c34f7f632200.roa (raw, json) Hash identifier: sVZ3FqnmfSMFlNrzpwPoOMEmtAxlfJumJLxxMC48F3s= Subject key identifier: 42:93:14:A3:90:6E:3B:F5:E6:AC:7C:AA:1C:17:F5:83:0A:CD:4F:A6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858473D25FDB4783F05B9FD2FDB00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 16696 IP address blocks: 148.59.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:fd:b4:78:3f:05:b9:fd:2f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=d68b2000-1288-4d17-956b-1147ba4501a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:32:30:ba:ce:0e:14:ad:72:5b:e9:8b:00: b3:1c:50:7d:e9:c7:c6:b4:f3:5d:7c:83:09:4c:8d: fe:12:90:5d:0c:4f:f1:81:9b:24:2a:06:b8:02:a8: ce:68:c4:c0:a1:eb:08:86:77:98:fb:14:50:98:28: 14:43:af:e2:83:7f:5d:67:d0:36:db:25:71:11:05: a6:4e:54:b1:2d:f0:7c:e2:5e:a0:f1:b9:f6:de:5a: 3c:83:cb:8b:a3:b2:d0:a9:61:b1:f3:37:43:9a:62: c5:b2:57:a2:f7:d1:71:e3:cc:6c:eb:10:11:2a:1b: ad:a7:b3:98:6b:15:21:de:93:6e:15:24:b0:14:ed: c6:72:7f:06:96:1c:1e:4b:1f:35:5b:de:60:de:f2: ab:19:84:be:05:c2:3e:9b:7d:70:fd:b6:09:59:82: 31:0e:85:a3:fb:72:04:64:5a:19:15:fc:79:ba:b9: fc:99:5e:59:0d:46:b3:80:fb:15:24:ef:a3:8b:cb: 17:0e:f4:8c:26:dc:f2:50:48:24:e9:e6:59:79:2e: 74:42:ed:03:7a:fe:c7:6b:77:d4:99:e3:b8:4c:0d: c5:11:56:4a:aa:00:48:b1:86:16:d3:f4:32:0d:b4: 60:48:51:f7:70:71:1f:50:c7:01:bd:b1:40:31:cc: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:14:A3:90:6E:3B:F5:E6:AC:7C:AA:1C:17:F5:83:0A:CD:4F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:15:7b:23:1d:ba:38:1d:c8:1d:06:cb:ca:6a:84:2b:bb:41: d1:1c:23:6c:90:7f:84:4e:eb:17:37:e8:b6:02:48:59:52:dd: fe:b7:ec:63:d9:71:18:f2:74:98:22:3c:37:b4:60:93:d6:da: a4:4d:79:05:01:01:71:bc:44:50:43:ee:c8:88:83:db:77:8d: 5d:4e:aa:19:b6:e7:02:cc:42:d0:77:50:35:6a:83:c9:1f:1f: 8b:58:ae:53:0f:a3:9b:65:6f:0d:f7:c8:0c:d3:c4:f9:59:b9: ee:c5:ed:ad:d9:40:e9:24:45:9c:83:b0:f7:bb:0b:f0:dd:15: 1b:e1:3e:2c:95:55:59:52:49:fc:29:1b:52:20:c4:ac:38:ff: 1c:0b:df:5d:f6:06:a2:29:59:97:b4:33:72:c0:54:41:dd:4a: c9:6f:ca:ef:81:af:ba:10:1a:15:36:7a:30:ff:96:a7:d0:ba: d6:ac:33:6e:f0:3f:2b:2e:b3:04:30:f8:a6:02:2a:07:85:a9: 77:dd:92:c5:28:1f:aa:92:c1:ff:e3:21:bd:c6:39:b8:cc:e9: 2d:f1:20:96:e4:4f:84:37:4c:f8:ea:2a:47:36:75:9a:ba:1c: ee:59:d0:cd:8e:68:20:6d:3a:2f:35:ab:1e:86:a2:82:be:8a: 40:c6:5a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jf20eD8Fuf0v2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDY4YjIwMDAtMTI4OC00ZDE3LTk1NmItMTE0N2JhNDUwMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9IyMLrODhStclvpiwCzHFB96cfGtPNdfIMJ TI3+EpBdDE/xgZskKga4AqjOaMTAoesIhneY+xRQmCgUQ6/ig39dZ9A22yVxEQWm TlSxLfB84l6g8bn23lo8g8uLo7LQqWGx8zdDmmLFslei99Fx48xs6xARKhutp7OY axUh3pNuFSSwFO3Gcn8GlhweSx81W95g3vKrGYS+BcI+m31w/bYJWYIxDoWj+3IE ZFoZFfx5urn8mV5ZDUazgPsVJO+ji8sXDvSMJtzyUEgk6eZZeS50Qu0Dev7Ha3fU meO4TA3FEVZKqgBIsYYW0/QyDbRgSFH3cHEfUMcBvbFAMcxFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKTFKOQbjv15qx8qhwX9YMKzU+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjMxOWQ3NTgtYzk4ZC0z OTVlLThlM2QtYzM0ZjdmNjMyMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMVeyMdujgdyB0Gy8pqhCu7QdEcI2yQf4RO6xc36LYCSFlS3f637GPZ cRjydJgiPDe0YJPW2qRNeQUBAXG8RFBD7siIg9t3jV1Oqhm25wLMQtB3UDVqg8kf H4tYrlMPo5tlbw33yAzTxPlZue7F7a3ZQOkkRZyDsPe7C/DdFRvhPiyVVVlSSfwp G1IgxKw4/xwL3132BqIpWZe0M3LAVEHdSslvyu+Br7oQGhU2ejD/lqfQutasM27w PysuswQw+KYCKgeFqXfdksUoH6qSwf/jIb3GObjM6S3xIJbkT4Q3TPjqKkc2dZq6 HO5Z0M2OaCBtOi81qx6GooK+ikDGWpc= -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:34 2024 by rpki-client on console-ams.rpki-client.org