$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: m6uYQL3JG0W1bZ6WXur4c7f9CSkJMcn7xJTmjD8VXWE= Subject key identifier: 7B:DF:65:5D:D8:3D:B4:D3:06:D9:40:32:FB:C1:A0:C2:46:11:C7:8D Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F432858478026568D85DBE433FA060680 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:56:8d:85:db:e4:33:fa:06:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=150f3a59-bef4-4d37-9863-b567d6bea054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6e:65:3f:b4:b3:5f:d9:51:6d:c9:eb:12:e9: 54:5a:b6:28:43:ae:eb:d0:cb:e6:68:1e:5b:64:f5: 21:3a:36:4a:8a:eb:49:2a:d4:78:47:41:cc:91:1c: d1:e9:56:d5:a1:17:b9:d4:27:3b:de:14:22:4b:94: 81:25:24:b9:a4:c2:a1:5e:b6:6c:f6:db:03:93:bc: d2:30:c2:ed:f7:4b:77:fa:c3:48:37:34:67:c9:ac: 85:9c:5a:d6:8b:ca:ea:15:8d:25:4c:7f:23:a5:18: b6:da:be:34:be:8e:61:31:84:98:08:ba:46:75:ce: d1:41:23:45:a4:5c:b7:1e:e6:53:b3:a6:32:db:56: 95:90:6c:94:3b:41:61:d9:01:ba:d2:7f:19:40:1d: c3:47:0a:0a:11:02:24:ee:98:e3:5b:24:05:fb:41: b8:ea:3d:7b:04:bd:79:a8:4e:3d:b0:8c:46:8d:6d: 5a:82:72:e8:3b:5a:e4:b6:6a:06:c8:2f:6a:cc:e5: d6:5a:3c:63:58:d8:40:03:96:44:bf:97:c7:5f:45: c7:b5:6d:31:cf:f9:78:94:1e:93:99:d1:c5:15:ca: 69:6e:4f:81:e7:cc:81:dd:93:8b:45:0c:65:9f:a0: 01:0c:35:87:3c:c7:71:a8:34:51:27:f7:f9:42:17: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:65:5D:D8:3D:B4:D3:06:D9:40:32:FB:C1:A0:C2:46:11:C7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bb:40:8a:43:fd:4e:c3:b5:f4:38:13:99:dd:3a:55:ff:64: 1b:8f:a9:98:cb:17:68:f6:23:e9:90:d4:03:03:c2:99:e8:56: 6d:aa:fa:d0:b7:d5:15:ab:a8:9e:ec:dc:11:85:8d:c3:bf:26: 4d:9b:48:69:14:4c:b3:f6:b8:c2:27:68:21:66:f4:bb:0c:db: 28:1b:42:d2:78:50:9d:a1:e4:16:1b:e1:9b:b9:d6:aa:42:54: a8:66:50:66:6b:58:6d:d6:3e:9d:50:84:ac:64:92:d1:60:a9: 2f:6f:f6:45:45:fc:a5:03:7b:05:31:04:25:90:9d:9c:0e:f5: d8:d7:88:56:03:65:a3:d5:93:9d:d4:51:35:a3:a3:71:42:87: b5:c4:bd:d2:a1:e7:7e:55:aa:58:2c:89:26:ef:67:de:2d:07: e0:e3:33:14:2d:de:00:fb:04:f1:46:96:42:35:79:17:87:33: 25:9b:65:0f:12:45:80:78:5b:92:18:cc:24:89:bd:0f:8c:41: 09:d1:62:09:16:68:31:fd:d4:8d:3d:07:01:56:a9:83:77:a5: b3:dd:e9:f1:07:30:a5:07:f1:75:a0:a5:ae:44:d1:c6:63:8c: 08:0f:fa:90:d9:b4:a6:81:ec:07:d0:b7:b8:d5:c8:ec:39:a4: 52:43:64:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlaNhdvkM/oGBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk MTUwZjNhNTktYmVmNC00ZDM3LTk4NjMtYjU2N2Q2YmVhMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G5lP7SzX9lRbcnrEulUWrYoQ67r0MvmaB5b ZPUhOjZKiutJKtR4R0HMkRzR6VbVoRe51Cc73hQiS5SBJSS5pMKhXrZs9tsDk7zS MMLt90t3+sNINzRnyayFnFrWi8rqFY0lTH8jpRi22r40vo5hMYSYCLpGdc7RQSNF pFy3HuZTs6Yy21aVkGyUO0Fh2QG60n8ZQB3DRwoKEQIk7pjjWyQF+0G46j17BL15 qE49sIxGjW1agnLoO1rktmoGyC9qzOXWWjxjWNhAA5ZEv5fHX0XHtW0xz/l4lB6T mdHFFcppbk+B58yB3ZOLRQxln6ABDDWHPMdxqDRRJ/f5Qhe3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvfZV3YPbTTBtlAMvvBoMJGEceNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC7QIpD/U7DtfQ4E5ndOlX/ZBuPqZjLF2j2I+mQ1AMDwpnoVm2q+tC3 1RWrqJ7s3BGFjcO/Jk2bSGkUTLP2uMInaCFm9LsM2ygbQtJ4UJ2h5BYb4Zu51qpC VKhmUGZrWG3WPp1QhKxkktFgqS9v9kVF/KUDewUxBCWQnZwO9djXiFYDZaPVk53U UTWjo3FCh7XEvdKh535VqlgsiSbvZ94tB+DjMxQt3gD7BPFGlkI1eReHMyWbZQ8S RYB4W5IYzCSJvQ+MQQnRYgkWaDH91I09BwFWqYN3pbPd6fEHMKUH8XWgpa5E0cZj jAgP+pDZtKaB7AfQt7jVyOw5pFJDZJI= -----END CERTIFICATE-----Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org