$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa File: a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa (raw, json) Hash identifier: CYd88Y/TVAQq8AWUufoFPD9M2/NOaryfsryedkp7jjI= Subject key identifier: 10:AF:18:7B:6C:21:4F:BB:82:A0:E6:50:10:86:D5:52:08:98:57:92 Certificate issuer: /CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881 Certificate serial: 010D0C9F432858479C112543FBD680CF2A8B1E80 Authority key identifier: 76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 31930 IP address blocks: 142.137.0.0/16 maxlen: 16 2620:fa:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:25:43:fb:d6:80:cf:2a:8b:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=12497971-d60b-402d-9215-c13405bf81d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:67:36:97:6c:36:6d:e6:7f:50:9a:69:a4: f2:8d:2b:8c:78:54:33:eb:14:55:3d:94:12:85:02: 34:89:81:e3:e0:64:14:d3:f1:31:9d:b0:95:b5:3e: c1:15:30:df:85:03:a3:8b:1d:2d:e4:d0:6e:50:51: 88:57:45:fc:e6:94:26:45:57:f4:df:08:7b:c4:17: c5:6a:9b:91:3a:2b:3a:bd:55:b0:54:fd:f9:66:2b: 58:c3:c9:23:5f:91:65:83:40:21:d4:8a:c0:8c:d4: 11:0c:f7:14:6f:a9:23:e9:5d:94:4a:17:f0:b9:04: 49:ca:1f:f2:48:6b:03:74:de:b9:92:4a:4a:91:c0: c7:08:7f:8d:10:c9:76:50:0b:ef:bc:2b:48:eb:1b: e5:78:05:a4:d6:39:c4:b2:a0:e2:e6:47:0b:eb:3f: 5a:79:41:3d:77:5d:d5:53:bb:26:e0:1d:50:05:aa: 1d:ef:88:20:c1:3c:b5:b5:03:b2:72:df:c4:f0:4a: b6:f3:3c:54:a0:a5:4d:4c:8f:25:ce:34:99:b1:b9: 0b:92:24:71:2e:26:38:94:37:9c:dd:eb:60:c8:7f: 94:ce:b4:81:f7:75:1e:94:ac:f5:bc:78:d7:bf:83: c9:1a:11:53:93:92:23:09:95:84:6e:85:ad:47:46: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:18:7B:6C:21:4F:BB:82:A0:E6:50:10:86:D5:52:08:98:57:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.crl X509v3 Authority Key Identifier: keyid:76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer sbgp-ipAddrBlock: critical IPv4: 142.137.0.0/16 IPv6: 2620:fa:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ae:c2:69:be:f9:c8:d0:7d:2c:be:21:39:0a:cc:b2:2d:4b: 96:2d:13:ab:7f:64:ee:30:72:1b:85:89:ee:f0:1e:73:6f:49: a5:75:50:1c:6a:61:48:81:5e:c1:87:53:69:23:c5:6f:7c:c3: 8d:1e:37:cf:da:40:71:9f:68:6f:60:36:d3:4b:41:d7:9f:41: 30:c3:a3:ec:85:61:49:51:41:7b:87:f3:ed:ef:ee:33:7b:ed: e3:a9:44:85:cb:9c:0c:41:bf:4f:20:80:3e:47:7f:f6:8b:a4: d7:3d:ad:8c:f3:e0:51:8c:a9:5a:97:d0:02:61:e3:fa:39:d5: 1c:5d:b5:40:94:39:09:be:6f:4a:54:0b:36:c5:b0:65:35:88: a2:72:be:ef:89:79:ca:ad:30:87:16:f7:20:3a:fb:0b:7e:24: a6:80:5e:2e:3a:32:04:c7:80:17:6e:ce:45:57:d7:a4:6a:e6: 36:b7:e6:6e:3d:19:6f:e6:7d:dc:28:70:a6:b6:7c:ce:41:23: c5:dd:ad:ba:4f:e1:c2:35:1c:1b:56:97:f8:00:77:17:81:4d: 71:47:c7:e4:a2:7a:8d:3f:29:77:28:47:87:bf:e7:8d:38:42: 2c:d9:de:76:0f:92:6f:3a:67:1f:7b:19:48:f9:9f:ec:14:88: c0:57:be:e7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEecESVD+9aAzyqLHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM2MzhiYTctMjJlZS00ZmIwLThhMWQtZDFlMjEzZmEy ODgxMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MTI0OTc5NzEtZDYwYi00MDJkLTkyMTUtYzEzNDA1YmY4MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzZnNpdsNm3mf1CaaaTyjSuMeFQz6xRVPZQS hQI0iYHj4GQU0/ExnbCVtT7BFTDfhQOjix0t5NBuUFGIV0X85pQmRVf03wh7xBfF apuROis6vVWwVP35ZitYw8kjX5Flg0Ah1IrAjNQRDPcUb6kj6V2UShfwuQRJyh/y SGsDdN65kkpKkcDHCH+NEMl2UAvvvCtI6xvleAWk1jnEsqDi5kcL6z9aeUE9d13V U7sm4B1QBaod74ggwTy1tQOyct/E8Eq28zxUoKVNTI8lzjSZsbkLkiRxLiY4lDec 3etgyH+UzrSB93UelKz1vHjXv4PJGhFTk5IjCZWEboWtR0aOLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBCvGHtsIU+7gqDmUBCG1VIImFeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MzYz OGJhNy0yMmVlLTRmYjAtOGExZC1kMWUyMTNmYTI4ODEvYTMxMGQwOGUtMmQ3YS0z OWNlLTg5MmItZWQ3MWY5NmFlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTM2MzhiYTctMjJlZS00ZmIwLThh MWQtZDFlMjEzZmEyODgxLzkzNjM4YmE3LTIyZWUtNGZiMC04YTFkLWQxZTIxM2Zh Mjg4MS5jcmwwHwYDVR0jBBgwFoAUdlXLq2UDE+Qeirxkaj2hYDNp5OwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MzYzOGJhNy0yMmVlLTRmYjAtOGExZC1kMWUy MTNmYTI4ODEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAjokwDwQC AAIwCQMHACYgAPqAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtrsJpvvnI0H0sviE5CsyyLUuWLROrf2Tu MHIbhYnu8B5zb0mldVAcamFIgV7Bh1NpI8VvfMONHjfP2kBxn2hvYDbTS0HXn0Ew w6PshWFJUUF7h/Pt7+4ze+3jqUSFy5wMQb9PIIA+R3/2i6TXPa2M8+BRjKlal9AC YeP6OdUcXbVAlDkJvm9KVAs2xbBlNYiicr7viXnKrTCHFvcgOvsLfiSmgF4uOjIE x4AXbs5FV9ekauY2t+ZuPRlv5n3cKHCmtnzOQSPF3a26T+HCNRwbVpf4AHcXgU1x R8fkonqNPyl3KEeHv+eNOEIs2d52D5JvOmcfexlI+Z/sFIjAV77n -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:40 2024 by rpki-client on console-fra.rpki-client.org