$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa File: 922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa (raw, json) Hash identifier: krDdJh5hDxBvF0vsCA/rt3PJeHqpw1Pfi5JBe8lfggE= Subject key identifier: 78:5E:98:C6:54:72:B0:28:C7:78:9A:CA:A8:54:86:69:7E:8A:05:70 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F432858471E7067F52273823EC0C3FFC0 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 14977 IP address blocks: 137.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:67:f5:22:73:82:3e:c0:c3:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=ffc862a1-9189-48dd-851d-ec194867526e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:3c:41:42:60:01:99:20:af:3e:4b:37:5e: f8:76:03:a5:3e:cc:0f:ee:36:45:63:ca:42:68:99: 34:02:3c:40:fc:25:23:d5:e5:a7:79:26:cd:09:42: 17:09:22:c3:b0:b4:d4:e5:1b:f4:ba:f3:2e:d4:fc: 44:fe:81:ff:5a:c6:57:c9:0d:0c:38:db:88:a0:3c: 15:f4:a5:27:cc:8d:b0:6b:e8:aa:c9:9f:db:ec:a1: 2e:f6:b6:b2:8d:a1:2b:26:d4:34:83:2f:d7:a1:d4: bc:a0:6f:f9:d8:a6:1f:cd:5d:aa:b8:d7:15:b8:2b: f1:b7:92:fa:e7:c4:ba:5e:6f:20:11:35:dc:1b:e6: 83:0b:01:91:b1:5f:2a:b7:29:49:0d:b8:f9:31:96: 24:1b:19:59:24:0c:2d:40:aa:cd:cd:5e:9d:55:56: 0d:12:25:cb:04:e6:7b:a6:51:f4:c1:59:fc:7c:fc: 1e:fd:01:11:ec:48:61:47:7c:2f:66:a4:19:df:04: 1b:4e:78:8c:db:da:3c:08:42:45:99:b2:0a:56:58: a8:fd:11:5f:b8:c4:32:73:81:0b:66:06:1f:56:dd: 11:41:ce:16:42:af:d3:f9:44:03:42:66:f3:ae:7b: f4:16:ee:96:d5:57:c3:74:67:a9:2a:5d:a6:25:f8: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:98:C6:54:72:B0:28:C7:78:9A:CA:A8:54:86:69:7E:8A:05:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c8:10:84:cf:fc:0f:b7:c4:06:23:45:14:91:a0:5d:f1:2f: e1:aa:5a:13:56:0a:4f:d1:ed:4e:e7:72:b8:2d:a5:ef:b3:ac: c2:75:64:e8:15:52:b1:c1:14:c6:b9:5b:61:fd:46:a2:4f:00: 28:ff:b6:38:91:de:a1:59:8a:34:cd:00:a6:d6:89:05:c0:9a: ea:05:ac:95:2f:a8:fa:88:19:43:a5:b3:7e:4f:6d:18:07:6c: 58:a7:a8:05:f3:dd:5a:5c:80:b1:b7:cd:e4:51:31:52:59:e2: 48:db:78:0a:d9:9e:1b:94:4f:2f:5d:05:41:06:87:69:e5:e2: 5f:0d:4e:14:27:58:03:c3:81:e8:0d:cb:e1:4f:fd:86:fd:2d: b6:8a:73:73:fc:ac:9a:e7:b2:cf:75:cb:96:c7:29:05:60:c5: 56:0f:71:79:d3:a6:87:73:ea:cd:8f:2f:64:8a:f9:bd:95:66: 04:5e:21:7e:9f:e5:5b:9b:af:ec:7a:ce:10:1f:2d:79:65:09: ee:60:aa:cf:de:4b:01:fd:a7:d7:c7:0d:f1:1f:17:a7:2d:7b: 73:c9:73:e9:31:e1:b5:24:c5:40:7c:d4:27:95:82:5d:84:a2: 00:90:c4:42:de:ed:0c:fd:e7:c4:d1:57:4f:1b:58:ac:a0:46: 2b:90:82:e7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecGf1InOCPsDD/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZmZjODYyYTEtOTE4OS00OGRkLTg1MWQtZWMxOTQ4Njc1MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLM8QUJgAZkgrz5LN174dgOlPswP7jZFY8pC aJk0AjxA/CUj1eWneSbNCUIXCSLDsLTU5Rv0uvMu1PxE/oH/WsZXyQ0MONuIoDwV 9KUnzI2wa+iqyZ/b7KEu9rayjaErJtQ0gy/XodS8oG/52KYfzV2quNcVuCvxt5L6 58S6Xm8gETXcG+aDCwGRsV8qtylJDbj5MZYkGxlZJAwtQKrNzV6dVVYNEiXLBOZ7 plH0wVn8fPwe/QER7EhhR3wvZqQZ3wQbTniM29o8CEJFmbIKVlio/RFfuMQyc4EL ZgYfVt0RQc4WQq/T+UQDQmbzrnv0Fu6W1VfDdGepKl2mJfi8YQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHhemMZUcrAox3iayqhUhml+igVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvOTIyYTdlYWYtM2JhMy0z YjMwLWJlZmEtOGJiZWRmZWYwNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdMgQhM/8D7fEBiNFFJGgXfEv4apaE1YKT9HtTudyuC2l77OswnVk6BVS scEUxrlbYf1Gok8AKP+2OJHeoVmKNM0AptaJBcCa6gWslS+o+ogZQ6Wzfk9tGAds WKeoBfPdWlyAsbfN5FExUlniSNt4CtmeG5RPL10FQQaHaeXiXw1OFCdYA8OB6A3L 4U/9hv0ttopzc/ysmueyz3XLlscpBWDFVg9xedOmh3PqzY8vZIr5vZVmBF4hfp/l W5uv7HrOEB8teWUJ7mCqz95LAf2n18cN8R8Xpy17c8lz6THhtSTFQHzUJ5WCXYSi AJDEQt7tDP3nxNFXTxtYrKBGK5CC5w== -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org