$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa File: acc5bd5d-5f68-3673-813c-63c52d3a1683.roa (raw, json) Hash identifier: gcFMz3xq0Sw73oukzf+A5urvmzWJ8pjg8sQAWW3lgPc= Subject key identifier: C5:DA:88:84:76:59:15:6C:A5:10:8B:DF:BA:22:EB:3D:23:43:D1:AC Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Certificate serial: 010D0C9F43285847AB6C189B75EF8D1813F58D00 Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 21521 IP address blocks: 192.252.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:18:9b:75:ef:8d:18:13:f5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=3fe7dc90-7da6-4246-b1ca-f30fdef7ab01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:8b:ba:47:c7:4d:a7:8b:06:2c:d0:4b:18: 47:ce:e1:c1:19:8d:45:1c:e2:c4:fe:ae:d5:f6:57: 08:42:51:6d:5a:a1:01:2c:a6:58:2b:4c:74:d5:90: 61:db:a2:56:a5:28:ef:17:bc:2b:47:a9:2c:5f:83: 23:5e:8e:1e:ae:8b:5b:f8:bc:ae:b6:d4:1e:20:6d: 7e:88:d0:6d:54:70:75:3d:62:b6:45:a6:b2:f5:a6: 47:61:3b:30:70:9c:7d:c4:4f:9d:93:8c:c9:c4:c2: d5:a3:ae:ce:11:95:3f:0b:4f:00:9e:ac:20:84:86: c9:06:2e:1d:03:07:92:09:0d:f9:85:ef:be:be:14: 82:38:57:24:86:76:f0:49:76:6b:4c:5a:2d:44:39: 94:dc:44:c7:5d:1e:f6:b3:e3:ef:54:2c:74:3c:cc: 3c:a0:08:85:bd:54:99:10:98:55:fa:f4:76:51:66: 0d:b4:89:89:c8:82:87:57:ac:2b:e8:3e:e5:83:c4: a0:50:b7:da:3a:8e:cc:92:6b:cc:10:46:f1:7a:1a: 8a:9a:4b:ed:0c:5f:0a:90:71:5a:0d:6b:6e:3c:f7: 9d:d0:af:b7:23:db:c7:d3:ed:67:1c:17:86:70:65: 36:d1:fd:71:17:11:aa:2a:02:53:e4:ad:1a:3c:a7: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DA:88:84:76:59:15:6C:A5:10:8B:DF:BA:22:EB:3D:23:43:D1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl X509v3 Authority Key Identifier: keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e6:9d:42:68:89:e4:ee:e0:ea:ad:90:13:d5:10:23:4c:65: b4:ee:0b:fe:f6:55:43:31:bf:36:c2:b8:30:67:d2:51:5c:ec: 0f:76:6b:c9:4f:dc:24:70:88:ae:c4:96:57:aa:1a:9f:68:63: 77:af:ab:eb:5c:3e:65:dc:73:c5:ea:28:8d:04:48:58:9e:a8: 45:2f:9b:25:28:a1:70:2c:52:42:9c:17:28:b6:c3:86:69:8a: 5e:13:d6:a2:d0:1a:fc:09:4c:7a:e3:04:2b:f1:6a:b0:17:0a: 25:47:30:71:6e:3d:70:06:3e:77:5b:f6:db:81:60:81:32:72: 77:14:58:1b:b6:f0:77:a3:e0:99:72:f7:9b:40:eb:93:e9:6b: 33:84:97:07:32:18:b6:57:71:22:bb:36:28:16:5e:e1:b3:00: 82:1b:2b:9f:c7:1f:63:fd:77:46:f5:75:a2:1f:7a:8b:f7:df: b0:4b:db:a9:8e:94:72:af:76:e7:38:2f:30:e2:61:53:94:16: 77:3b:f8:30:e5:61:6a:ab:b0:84:96:3e:f9:8f:31:0c:33:47: 1b:e6:0e:38:0e:dd:c5:1a:6b:70:18:0d:93:20:e9:14:68:40: e4:dc:d0:b8:8d:b5:29:7b:a8:fa:5e:12:cf:1b:a1:f6:c8:ed: 20:ce:db:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbBibde+NGBP1jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl N2E1MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk M2ZlN2RjOTAtN2RhNi00MjQ2LWIxY2EtZjMwZmRlZjdhYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8eLukfHTaeLBizQSxhHzuHBGY1FHOLE/q7V 9lcIQlFtWqEBLKZYK0x01ZBh26JWpSjvF7wrR6ksX4MjXo4erotb+LyuttQeIG1+ iNBtVHB1PWK2Raay9aZHYTswcJx9xE+dk4zJxMLVo67OEZU/C08AnqwghIbJBi4d AweSCQ35he++vhSCOFckhnbwSXZrTFotRDmU3ETHXR72s+PvVCx0PMw8oAiFvVSZ EJhV+vR2UWYNtImJyIKHV6wr6D7lg8SgULfaOo7MkmvMEEbxehqKmkvtDF8KkHFa DWtuPPed0K+3I9vH0+1nHBeGcGU20f1xFxGqKgJT5K0aPKf3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXaiIR2WRVspRCL37oi6z0jQ9GsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5 NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvYWNjNWJkNWQtNWY2OC0z NjczLTgxM2MtNjNjNTJkM2ExNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj OGUzZWU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnmnUJoieTu4OqtkBPVECNMZbTuC/72VUMxvzbCuDBn0lFc7A92a8lP 3CRwiK7ElleqGp9oY3evq+tcPmXcc8XqKI0ESFieqEUvmyUooXAsUkKcFyi2w4Zp il4T1qLQGvwJTHrjBCvxarAXCiVHMHFuPXAGPndb9tuBYIEycncUWBu28Hej4Jly 95tA65PpazOElwcyGLZXcSK7NigWXuGzAIIbK5/HH2P9d0b1daIfeov337BL26mO lHKvduc4LzDiYVOUFnc7+DDlYWqrsISWPvmPMQwzRxvmDjgO3cUaa3AYDZMg6RRo QOTc0LiNtSl7qPpeEs8bofbI7SDO21k= -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:57 2024 by rpki-client on console-fra.rpki-client.org