$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa File: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json) Hash identifier: d0L0ZhRlOY+RpiXPxNCVunK7uQFL7GV4xr535NszzgM= Subject key identifier: A3:E0:63:B5:5C:6F:93:D0:2A:38:20:DF:93:C6:25:7A:01:10:6B:BD Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F432858471A406C550CCD92EA3C6B6340 Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa Signing time: Wed 04 Sep 2024 13:00:41 +0000 ROA not before: Wed 04 Sep 2024 13:00:41 +0000 ROA not after: Tue 03 Dec 2024 14:00:41 +0000 asID: 2728 IP address blocks: 162.255.88.0/21 maxlen: 24 199.185.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:40:6c:55:0c:cd:92:ea:3c:6b:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Sep 4 13:00:41 2024 GMT Not After : Dec 3 14:00:41 2024 GMT Subject: CN=b63b71d8-5a14-4a4c-bfb4-87c383bdb4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:50:62:aa:1d:ab:75:dc:b0:b3:d2:48:63: 9b:15:b8:3b:a5:0e:44:48:ee:aa:12:07:c7:5e:16: be:18:68:48:e7:67:d1:e5:d1:ba:c6:d1:97:2f:a8: ee:7e:d0:ef:a9:2b:53:22:7e:65:bd:1a:36:ae:5a: fa:79:e8:82:d3:15:4f:bb:98:55:b9:9d:74:cc:55: 80:7a:83:65:ec:69:fd:3b:4d:06:40:9f:5b:06:16: a4:b2:01:28:63:14:0f:22:14:be:ef:fe:14:8a:4a: d9:92:8c:56:08:4c:55:d5:64:32:4b:ce:28:46:1b: 9d:d9:1f:38:84:d6:ee:24:3f:8c:53:c7:16:19:f2: cf:f7:bc:e1:44:55:c0:cf:5c:1d:4f:7f:95:0c:6b: f1:25:de:f2:a1:12:93:7c:f6:6c:9b:7a:30:fb:84: 06:a4:e1:58:1a:62:0d:22:ef:a5:26:c2:27:b7:c6: 92:b4:f3:2f:db:ed:e4:1d:b4:78:ef:10:d4:45:9f: 8a:a9:8b:f2:c8:00:c5:27:d3:8d:66:67:ff:2c:a2: bc:59:97:69:c5:1b:6b:c5:ca:6f:78:40:37:89:bd: 18:4e:32:cb:38:1b:b3:3a:48:ea:76:f7:c8:8b:da: 5e:ee:65:20:c3:4b:03:c1:f4:ea:1d:04:06:3b:e1: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:63:B5:5C:6F:93:D0:2A:38:20:DF:93:C6:25:7A:01:10:6B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: 162.255.88.0/21 199.185.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:90:a1:bf:81:3b:a6:67:ff:a3:d8:9a:ec:89:42:0d:08:ee: b0:b0:0f:9e:93:26:01:2a:db:02:05:46:49:8d:9e:4e:84:8b: c8:b3:0b:f1:ab:f7:e5:63:67:a3:12:ab:89:37:93:2a:00:19: ce:49:81:0e:84:91:95:da:43:41:d0:6c:9f:b5:c5:95:8f:9c: 79:ff:a4:07:5c:68:b3:7e:76:99:e3:92:ac:ae:7a:3f:c8:05: e4:fc:76:5d:63:5d:37:74:b5:0f:0f:a5:4f:61:fe:18:6c:f5: da:89:48:81:1c:3f:14:39:03:ec:3a:a8:4b:5f:0b:71:bd:76: f3:aa:96:7c:a0:ab:68:2b:72:3d:2b:da:b0:08:d3:ab:2e:7d: 13:40:b7:38:d0:ac:60:37:24:69:a5:03:e4:02:45:0d:3c:1a: 59:d3:1e:68:f5:bb:f1:97:fc:9a:30:64:7e:bc:36:c2:5b:c4: 40:78:10:78:7a:80:e3:c3:a0:0d:8c:fc:72:de:64:44:8d:7e: a4:45:34:b4:88:0a:30:2f:1d:99:5e:11:05:33:eb:43:2f:cd: 82:90:39:8e:c2:a5:8a:1e:a8:39:16:ba:be:c6:a1:c6:07:f4: ca:b0:3e:3a:75:3d:29:4d:d5:4c:29:65:4e:e0:78:f5:4f:6f: 57:51:a1:41 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcaQGxVDM2S6jxrY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI0MDkwNDEzMDA0MVoXDTI0MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YjYzYjcxZDgtNWExNC00YTRjLWJmYjQtODdjMzgzYmRiNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTtQYqodq3XcsLPSSGObFbg7pQ5ESO6qEgfH Xha+GGhI52fR5dG6xtGXL6juftDvqStTIn5lvRo2rlr6eeiC0xVPu5hVuZ10zFWA eoNl7Gn9O00GQJ9bBhaksgEoYxQPIhS+7/4UikrZkoxWCExV1WQyS84oRhud2R84 hNbuJD+MU8cWGfLP97zhRFXAz1wdT3+VDGvxJd7yoRKTfPZsm3ow+4QGpOFYGmIN Iu+lJsInt8aStPMv2+3kHbR47xDURZ+KqYvyyADFJ9ONZmf/LKK8WZdpxRtrxcpv eEA3ib0YTjLLOBuzOkjqdvfIi9pe7mUgw0sDwfTqHQQGO+Et3wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKPgY7Vcb5PQKjgg35PGJXoBEGu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvMzAwYTVhNGQtNWQwZC0z ZTIyLWE5YTEtZTI1OTFhOGUzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov9YAwQB x7muMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEuQob+BO6Zn/6PYmuyJQg0I7rCwD56TJgEq2wIFRkmNnk6E i8izC/Gr9+VjZ6MSq4k3kyoAGc5JgQ6EkZXaQ0HQbJ+1xZWPnHn/pAdcaLN+dpnj kqyuej/IBeT8dl1jXTd0tQ8PpU9h/hhs9dqJSIEcPxQ5A+w6qEtfC3G9dvOqlnyg q2grcj0r2rAI06sufRNAtzjQrGA3JGmlA+QCRQ08GlnTHmj1u/GX/JowZH68NsJb xEB4EHh6gOPDoA2M/HLeZESNfqRFNLSICjAvHZleEQUz60MvzYKQOY7CpYoeqDkW ur7GocYH9MqwPjp1PSlN1UwpZU7gePVPb1dRoUE= -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:58 2024 by rpki-client on console-fra.rpki-client.org