$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa File: 4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa (raw, json) Hash identifier: xIaMjiXJ++skYVdpxFIhjnYgs4S2zAa8hFov8PkGyDY= Subject key identifier: 0C:2C:B3:DF:2D:44:29:1C:83:77:6C:DB:F7:F1:16:1D:57:B2:7C:9D Certificate issuer: /CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Certificate serial: 010D0C9F4328584738F5F8A0FEACCA99D1866280 Authority key identifier: DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa Signing time: Sun 15 Sep 2024 13:00:42 +0000 ROA not before: Sun 15 Sep 2024 13:00:42 +0000 ROA not after: Sat 14 Dec 2024 14:00:42 +0000 asID: 16509 IP address blocks: 199.188.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:38:f5:f8:a0:fe:ac:ca:99:d1:86:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Validity Not Before: Sep 15 13:00:42 2024 GMT Not After : Dec 14 14:00:42 2024 GMT Subject: CN=3ad09b61-1d8e-46ab-b26b-0daa71cacbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:34:d5:8d:07:28:bc:37:7f:d2:f6:fc:86: 0f:57:e6:6b:bb:81:43:1c:f5:2d:cb:d5:1e:0b:e5: 46:02:b6:a7:40:32:ff:18:65:ad:b5:7b:46:71:cf: 6b:92:2a:89:06:4b:44:ab:ff:6d:8d:15:a5:d0:1e: 77:e3:3f:6e:23:1a:10:ff:5b:6e:b2:6d:43:91:2d: 6c:c2:d6:0e:8a:2d:5b:c8:e1:54:99:5c:11:84:69: ad:62:62:8d:3e:0f:f9:f2:76:bf:04:9f:5b:c3:2b: 18:08:b0:0c:af:9d:f8:2c:7a:06:bd:aa:18:ac:09: 50:8e:ce:ba:36:35:9c:57:b6:b4:de:2c:1d:fb:cf: 24:33:f3:cb:ed:c9:71:27:76:62:16:49:4c:8a:44: 9e:be:b5:41:15:30:2b:b0:87:72:fd:53:a2:29:53: 68:ef:98:91:3d:69:f3:be:32:1c:b9:59:07:e6:89: b6:9a:c7:e8:9d:3b:4a:d0:73:8b:72:01:62:cd:82: ac:f7:f4:89:11:13:f0:e5:57:85:6e:12:f7:db:a7: 2a:d8:dc:b6:21:90:d1:77:50:05:95:1d:6e:19:85: 07:51:47:a9:4a:53:71:3d:3e:85:1a:48:d6:10:b4: f9:aa:08:5b:d4:1e:d7:a6:ed:88:fe:42:7d:13:32: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:B3:DF:2D:44:29:1C:83:77:6C:DB:F7:F1:16:1D:57:B2:7C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl X509v3 Authority Key Identifier: keyid:DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer sbgp-ipAddrBlock: critical IPv4: 199.188.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a4:37:b6:34:71:d8:ad:d0:3f:d2:3c:e1:af:28:6c:a3:8b: f6:ad:db:57:ac:f4:c8:68:58:ec:50:83:3c:0a:5c:71:78:f8: cd:bb:1e:be:18:26:ee:12:ac:60:84:af:a1:17:03:38:2e:df: 8d:c2:2b:11:d3:44:89:b7:78:9a:04:fa:06:f2:8c:87:3b:f3: 15:bd:dd:a1:40:a2:d5:f1:cb:27:02:a7:2f:53:b4:96:91:d5: 56:76:9a:c4:21:2e:f6:ac:c0:c0:0b:08:78:39:6c:07:7a:36: a7:93:56:e4:12:91:87:84:0e:02:95:3f:47:26:ea:35:b4:05: af:d5:76:f6:be:58:1c:88:ce:bf:d0:3a:e5:fd:52:2c:8e:99: 35:73:70:1b:fd:16:c7:d4:78:0e:61:65:4e:f5:03:cf:ba:16: 79:d6:0d:2f:16:f1:32:65:ba:99:48:7f:26:4f:45:89:eb:64: 7f:b8:85:4b:66:28:43:33:a9:db:95:c5:c6:36:ce:5e:c9:8b: 96:cd:dd:5d:a8:c4:33:db:c7:c4:c9:e1:ed:ac:3b:35:a2:ed: 52:60:1b:82:bc:d0:99:49:48:f0:31:a2:54:08:e1:67:a2:c7: d9:1b:44:17:22:d1:df:61:94:f2:1a:cd:4c:e2:52:66:b0:41: c9:df:24:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc49fig/qzKmdGGYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkMGVkOGYtZmRmNC00YjI3LThkNGUtZWI0NGYyMWY3 ODcxMB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk M2FkMDliNjEtMWQ4ZS00NmFiLWIyNmItMGRhYTcxY2FjYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstM01Y0HKLw3f9L2/IYPV+Zru4FDHPUty9Ue C+VGAranQDL/GGWttXtGcc9rkiqJBktEq/9tjRWl0B534z9uIxoQ/1tusm1DkS1s wtYOii1byOFUmVwRhGmtYmKNPg/58na/BJ9bwysYCLAMr534LHoGvaoYrAlQjs66 NjWcV7a03iwd+88kM/PL7clxJ3ZiFklMikSevrVBFTArsIdy/VOiKVNo75iRPWnz vjIcuVkH5om2msfonTtK0HOLcgFizYKs9/SJERPw5VeFbhL326cq2Ny2IZDRd1AF lR1uGYUHUUepSlNxPT6FGkjWELT5qghb1B7Xpu2I/kJ9EzJauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwss98tRCkcg3ds2/fxFh1XsnydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWQw ZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0ZjIxZjc4NzEvNDE5MWE4NDAtYzNkNi0z ZWE5LWFkZDMtY2QyZmY3YzlhNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkMGVkOGYtZmRmNC00YjI3LThk NGUtZWI0NGYyMWY3ODcxL2I1ZDBlZDhmLWZkZjQtNGIyNy04ZDRlLWViNDRmMjFm Nzg3MS5jcmwwHwYDVR0jBBgwFoAU3GoVKg+iMFSCmPRmY0OX7mPE+28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWQwZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0 ZjIxZjc4NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEakN7Y0cdit0D/SPOGvKGyji/at21es9MhoWOxQgzwKXHF4+M27Hr4Y Ju4SrGCEr6EXAzgu343CKxHTRIm3eJoE+gbyjIc78xW93aFAotXxyycCpy9TtJaR 1VZ2msQhLvaswMALCHg5bAd6NqeTVuQSkYeEDgKVP0cm6jW0Ba/Vdva+WByIzr/Q OuX9UiyOmTVzcBv9FsfUeA5hZU71A8+6FnnWDS8W8TJluplIfyZPRYnrZH+4hUtm KEMzqduVxcY2zl7Ji5bN3V2oxDPbx8TJ4e2sOzWi7VJgG4K80JlJSPAxolQI4Wei x9kbRBci0d9hlPIazUziUmawQcnfJAs= -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:57 2024 by rpki-client on console-fra.rpki-client.org