$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa File: a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa (raw, json) Hash identifier: s1zVQT8XHhg+jPwKOmeDP6GR/xio4DPZJ4UJOK3CJug= Subject key identifier: CF:12:53:23:50:9C:D0:10:EC:35:BD:86:B6:A3:D3:AF:E5:04:78:21 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285847EBBF89AC48AC0B971782549A Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 13335 IP address blocks: 150.48.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:89:ac:48:ac:0b:97:17:82:54:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=be3f1286-69ba-4cb5-b0ae-cabb405f8982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:e8:74:6c:3e:08:b2:f9:8b:14:25:d4:cd: fb:f4:15:38:10:fc:58:fe:19:9c:c9:4c:1f:0b:97: 57:74:d2:ea:9c:e6:e9:ad:2e:66:5d:3e:5b:d1:6b: 8a:eb:ec:77:ae:27:0f:b9:92:a6:aa:82:a8:dc:c2: e4:68:b6:51:ad:b2:5d:c4:1c:56:57:f1:bd:65:8a: 5c:a9:42:14:41:b0:55:c9:ef:33:0c:af:4d:e7:9d: ac:cb:f2:19:7d:d1:48:3c:f3:1c:01:74:51:71:56: 48:a4:a1:30:98:85:58:5a:d7:60:eb:4e:3f:7e:2b: 93:c8:b3:e8:bc:1e:73:b3:0d:11:f7:7e:7f:67:e7: 3b:d5:02:ea:8a:b7:41:01:2d:bb:92:27:9b:bb:c8: 1b:42:30:4a:06:f1:c2:8a:a2:a2:aa:dc:5a:e2:87: 83:f2:b1:1b:f0:c7:dc:71:79:7c:c1:13:33:c2:6f: 7b:00:e6:f3:71:77:b4:03:a5:fc:45:7e:8f:a8:c5: 39:31:e9:7b:32:fa:6d:55:b3:53:0d:d4:0f:9d:6c: a4:10:94:bc:a7:1b:d1:ec:ac:02:45:35:38:bf:a0: db:d9:64:35:1f:40:cc:a0:d0:4b:02:67:18:49:db: 3e:29:a7:c0:52:4c:c8:b5:2f:f7:e5:eb:d8:23:62: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:12:53:23:50:9C:D0:10:EC:35:BD:86:B6:A3:D3:AF:E5:04:78:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6ff0fdd-285d-31f1-9aa8-2cb268dfd681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c6:62:00:7a:b4:e2:30:19:57:fd:72:09:1c:75:1c:fd:03: f5:35:74:8f:fe:2a:5c:51:79:ac:6e:79:73:3e:0e:7c:92:d6: ce:3a:00:da:2a:c8:94:05:49:e5:3d:31:ab:32:d3:7a:87:f0: 09:74:a6:88:e9:27:8c:4c:3d:c1:e5:7c:bc:cd:7f:24:0a:aa: 8e:c9:34:65:1b:e4:a5:eb:c1:0e:bd:9f:37:86:f1:49:18:0c: d4:98:e7:85:a4:83:60:23:15:d9:d8:60:16:e0:d8:d8:58:9f: 54:61:07:a3:bb:3d:51:17:4a:8b:45:e8:31:b9:88:cd:62:84: 2b:9e:ec:ad:20:98:06:4b:ea:5e:92:47:df:7d:c5:a7:3b:da: 33:3a:b6:b8:01:2d:5f:57:cc:72:28:28:1e:bc:dc:83:f5:71: f1:48:88:93:4b:e7:4a:44:4b:a7:aa:42:1d:70:62:d0:bc:a3: ce:c3:13:45:99:b5:04:05:18:e4:0a:52:9f:76:5c:22:6d:ff: 6c:2b:26:90:45:bb:4d:8b:d4:aa:4c:2c:d8:bd:41:ef:d0:ae: 57:a6:65:2e:d5:12:66:d3:87:5e:bd:16:78:50:f9:3a:00:3f: c2:79:39:fb:bd:a0:42:e9:f5:a1:0d:28:f7:84:91:28:4a:4f: d7:66:63:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4msSKwLlxeCVJowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk YmUzZjEyODYtNjliYS00Y2I1LWIwYWUtY2FiYjQwNWY4OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbodGw+CLL5ixQl1M379BU4EPxY/hmcyUwf C5dXdNLqnObprS5mXT5b0WuK6+x3ricPuZKmqoKo3MLkaLZRrbJdxBxWV/G9ZYpc qUIUQbBVye8zDK9N552sy/IZfdFIPPMcAXRRcVZIpKEwmIVYWtdg604/fiuTyLPo vB5zsw0R935/Z+c71QLqirdBAS27kiebu8gbQjBKBvHCiqKiqtxa4oeD8rEb8Mfc cXl8wRMzwm97AObzcXe0A6X8RX6PqMU5Mel7MvptVbNTDdQPnWykEJS8pxvR7KwC RTU4v6Db2WQ1H0DMoNBLAmcYSds+KafAUkzItS/35evYI2LWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8SUyNQnNAQ7DW9hraj06/lBHghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTZmZjBmZGQtMjg1ZC0z MWYxLTlhYTgtMmNiMjY4ZGZkNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjGYgB6tOIwGVf9cgkcdRz9A/U1dI/+KlxReaxueXM+DnyS1s46ANoq yJQFSeU9Masy03qH8Al0pojpJ4xMPcHlfLzNfyQKqo7JNGUb5KXrwQ69nzeG8UkY DNSY54Wkg2AjFdnYYBbg2NhYn1RhB6O7PVEXSotF6DG5iM1ihCue7K0gmAZL6l6S R999xac72jM6trgBLV9XzHIoKB683IP1cfFIiJNL50pES6eqQh1wYtC8o87DE0WZ tQQFGOQKUp92XCJt/2wrJpBFu02L1KpMLNi9Qe/QrlemZS7VEmbTh169FnhQ+ToA P8J5Ofu9oELp9aENKPeEkShKT9dmYx0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:15 2024 by rpki-client on console-ams.rpki-client.org