$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa File: d4586c07-e834-3712-8566-845eb39b828a.roa (raw, json) Hash identifier: dTPm+V4+638kxIoJAJM2q5v95DnC0+Np2mfHsOjjsOA= Subject key identifier: 1F:20:C4:E9:4A:C7:7F:EF:0F:FB:4A:B0:1E:70:99:B2:10:06:E7:52 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285847792BAD791BB51EA33CC11360 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 18594 IP address blocks: 204.90.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:ad:79:1b:b5:1e:a3:3c:c1:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=92cab11a-3bcb-495a-9e21-bb83b519e6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:bb:8b:ab:f4:df:b7:df:d9:d4:6b:85:70: d5:5c:b4:d1:6c:d4:b7:e7:c2:26:e8:51:8b:b5:4c: 27:d1:fc:75:cb:42:2b:4c:eb:9a:79:80:f7:a2:35: a0:38:3e:07:5b:cf:4e:ee:55:63:30:93:8f:ec:bd: 53:58:d0:20:f3:df:91:90:d0:c7:68:29:f9:7c:31: 0e:d5:83:76:9f:c0:36:fe:5b:e7:47:87:0d:ab:04: cb:a7:44:15:e8:63:1e:cd:5c:0a:c3:64:8c:d6:8d: df:bf:20:45:a4:aa:dc:d4:d2:f4:25:d2:89:9c:d2: e1:52:75:de:5f:f6:cc:28:41:7b:1f:95:77:56:e0: cd:14:83:b5:69:b6:64:dd:d5:b2:51:7c:00:70:fa: 1e:39:09:0b:50:c3:48:83:c5:b2:f2:72:1c:fd:f8: 25:63:c2:ac:2f:21:c8:be:6f:b7:b1:c5:48:5f:d4: 50:80:4e:5b:dd:b4:58:a6:da:a3:6f:54:b5:1b:20: 67:ba:c4:55:65:9f:09:dd:b5:03:89:71:b1:fc:86: 21:02:5c:53:3f:4e:09:7f:22:f2:f4:2a:a3:c2:14: ad:b4:00:d0:51:fc:08:19:48:6a:a3:dd:b7:98:a6: f7:18:64:73:6d:db:9e:80:fa:83:18:6c:ce:12:b6: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:C4:E9:4A:C7:7F:EF:0F:FB:4A:B0:1E:70:99:B2:10:06:E7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/d4586c07-e834-3712-8566-845eb39b828a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 204.90.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:32:a9:32:0f:d3:2b:41:ba:4a:db:59:7e:0a:c8:ae:e8:0c: 0e:53:70:fd:75:f7:5f:a8:22:a9:b1:ac:ed:ca:e4:bf:1b:e6: 7b:17:03:77:12:93:de:07:77:b4:f8:24:a6:99:18:a6:bf:08: 69:42:ff:ed:fc:71:23:12:76:bf:c0:8b:4c:a4:94:d4:8e:26: a9:c4:a0:02:15:7e:ad:a4:05:c0:91:45:1f:56:61:3a:b1:ca: be:60:73:c2:0b:b2:e5:bd:dc:39:5d:37:f2:eb:55:3c:2f:f9: d9:98:f9:cb:8f:3b:17:94:14:59:f6:42:bf:46:1d:6a:40:52: 95:ad:06:a6:24:95:64:8a:e5:d1:ec:ac:19:3a:59:98:f5:cb: a6:5f:e9:28:6a:1e:29:b0:f2:d3:8a:78:31:7a:5a:d2:22:89: e8:59:bd:20:f8:4f:35:8b:3b:a4:80:c6:01:f2:48:27:49:3a: ea:ab:d8:56:d8:cc:18:0a:66:c7:9a:ef:c3:e4:ea:90:54:60: 9a:63:63:48:f4:6a:dd:38:4f:4e:a4:b4:8f:42:34:b0:33:9f: b1:c0:d6:03:90:87:bd:91:18:01:62:c9:cb:09:62:62:0b:74: dc:24:c2:b4:a2:8b:df:10:ac:16:11:50:e7:88:a0:36:b7:07: 2b:7c:97:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K615G7UeozzBE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OTJjYWIxMWEtM2JjYi00OTVhLTllMjEtYmI4M2I1MTllNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSa7i6v037ff2dRrhXDVXLTRbNS358Im6FGL tUwn0fx1y0IrTOuaeYD3ojWgOD4HW89O7lVjMJOP7L1TWNAg89+RkNDHaCn5fDEO 1YN2n8A2/lvnR4cNqwTLp0QV6GMezVwKw2SM1o3fvyBFpKrc1NL0JdKJnNLhUnXe X/bMKEF7H5V3VuDNFIO1abZk3dWyUXwAcPoeOQkLUMNIg8Wy8nIc/fglY8KsLyHI vm+3scVIX9RQgE5b3bRYptqjb1S1GyBnusRVZZ8J3bUDiXGx/IYhAlxTP04JfyLy 9CqjwhSttADQUfwIGUhqo923mKb3GGRzbduegPqDGGzOErYjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8gxOlKx3/vD/tKsB5wmbIQBudSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZDQ1ODZjMDctZTgzNC0z NzEyLTg1NjYtODQ1ZWIzOWI4MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkyqTIP0ytBukrbWX4KyK7oDA5TcP1191+oIqmxrO3K5L8b5nsXA3cS k94Hd7T4JKaZGKa/CGlC/+38cSMSdr/Ai0yklNSOJqnEoAIVfq2kBcCRRR9WYTqx yr5gc8ILsuW93DldN/LrVTwv+dmY+cuPOxeUFFn2Qr9GHWpAUpWtBqYklWSK5dHs rBk6WZj1y6Zf6ShqHimw8tOKeDF6WtIiiehZvSD4TzWLO6SAxgHySCdJOuqr2FbY zBgKZsea78Pk6pBUYJpjY0j0at04T06ktI9CNLAzn7HA1gOQh72RGAFiycsJYmIL dNwkwrSii98QrBYRUOeIoDa3Byt8l/g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org