$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa File: d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa (raw, json) Hash identifier: nxWcWxjnyqG4nRPEW4vwI308mcYcakcACs3fhc7d8G0= Subject key identifier: D3:C6:FA:0A:09:B8:0C:71:AA:1D:3E:FE:0B:B3:15:80:98:AF:6B:BD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858476B363D0026327A02B3DD6A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 212238 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:3d:00:26:32:7a:02:b3:dd:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=2dee1585-9246-40df-b073-d93fc62af292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:db:c3:61:dd:e0:45:94:57:a8:68:fa:12: 46:82:0c:3c:bb:e9:89:dc:4a:1c:83:65:53:b5:b2: b2:fb:56:77:ff:2a:c0:51:43:de:e0:52:d1:66:da: 48:bc:dd:0e:4b:2a:c2:cd:c8:b6:48:e1:cb:d1:6d: cb:9f:46:42:df:23:4d:72:3a:ea:00:13:8b:31:25: 49:50:c9:9f:32:d0:d2:3b:b1:38:5e:91:4e:34:b3: 98:9f:22:11:9a:9b:74:0d:a2:b8:31:ef:bb:6e:bb: 0e:7c:3a:84:f7:4c:96:83:01:bd:a3:e5:dc:0b:16: 36:d1:a3:9c:04:55:90:79:7e:6f:f3:b5:a2:dd:e2: bf:b0:81:75:33:8d:c5:f8:77:a8:bd:6f:01:50:fa: 07:8b:4d:e8:0a:89:af:b0:92:fa:13:7d:0a:83:30: 5e:86:31:77:97:da:65:1f:19:42:3b:d6:24:d6:4a: de:19:09:d4:5f:b2:35:a8:8d:aa:6a:c9:da:76:f1: 36:a4:b2:e2:05:ad:41:f7:04:0f:39:6f:e4:21:8b: 6a:e6:6e:50:72:6e:3c:69:a4:69:00:e9:65:99:3c: 9b:64:f7:ab:4c:4d:17:a3:34:2b:26:68:e4:e9:dd: 29:6b:bb:ef:91:01:ae:0f:e7:76:6f:b7:e1:b2:3d: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C6:FA:0A:09:B8:0C:71:AA:1D:3E:FE:0B:B3:15:80:98:AF:6B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:90:7b:18:dc:82:03:c7:9f:7d:83:db:85:d8:83:5a:aa:55: 66:13:9b:f9:e8:3d:ac:ca:a0:56:24:54:0c:e1:c5:0a:42:a1: b3:86:74:62:15:07:a0:8d:a7:81:2a:57:55:ba:75:da:72:14: 27:bf:cb:81:d5:4d:a7:26:c9:7c:e7:e6:d9:5f:85:ee:c9:bd: 72:d9:0a:a2:54:9e:1a:d3:b3:c0:3b:5a:46:79:a5:73:16:c7: 65:5c:1e:04:01:b5:2e:76:83:8c:1c:a1:18:f9:00:b5:8f:dc: 2a:64:f6:7b:d6:6a:b8:54:bf:0a:3a:74:91:39:16:76:20:3c: e8:db:14:a5:d6:17:b3:a7:98:51:8b:2c:07:fc:64:c7:13:d9: 3b:81:db:28:57:de:a3:5f:01:a4:21:47:93:f7:1a:d2:5a:2c: ca:ed:c8:e0:55:07:f7:77:f7:37:87:ce:f7:2d:10:d3:86:f8: 5f:43:2e:cb:8b:e3:19:a0:c7:35:42:7c:db:e3:50:63:49:99: 86:bf:3b:1d:18:21:d2:2f:1f:24:84:81:ff:89:2a:63:bc:c6: ee:9f:e1:56:24:0c:e5:0a:e8:05:4c:48:6f:dd:95:7c:d9:93: 78:ff:86:5d:77:cb:47:1a:88:ba:fe:76:80:20:b1:2f:bf:18: 9e:c1:b3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNj0AJjJ6ArPdaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk MmRlZTE1ODUtOTI0Ni00MGRmLWIwNzMtZDkzZmM2MmFmMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO3bw2Hd4EWUV6ho+hJGggw8u+mJ3Eocg2VT tbKy+1Z3/yrAUUPe4FLRZtpIvN0OSyrCzci2SOHL0W3Ln0ZC3yNNcjrqABOLMSVJ UMmfMtDSO7E4XpFONLOYnyIRmpt0DaK4Me+7brsOfDqE90yWgwG9o+XcCxY20aOc BFWQeX5v87Wi3eK/sIF1M43F+HeovW8BUPoHi03oComvsJL6E30KgzBehjF3l9pl HxlCO9Yk1kreGQnUX7I1qI2qasnadvE2pLLiBa1B9wQPOW/kIYtq5m5Qcm48aaRp AOllmTybZPerTE0XozQrJmjk6d0pa7vvkQGuD+d2b7fhsj3e7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPG+goJuAxxqh0+/guzFYCYr2u9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDBjZTVmYTQtYjQ5Ni0z Yjg2LWJmNGMtMGI2MTBiMjgwM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2QexjcggPHn32D24XYg1qqVWYTm/noPazKoFYkVAzhxQpCobOGdGIV B6CNp4EqV1W6ddpyFCe/y4HVTacmyXzn5tlfhe7JvXLZCqJUnhrTs8A7WkZ5pXMW x2VcHgQBtS52g4wcoRj5ALWP3Cpk9nvWarhUvwo6dJE5FnYgPOjbFKXWF7OnmFGL LAf8ZMcT2TuB2yhX3qNfAaQhR5P3GtJaLMrtyOBVB/d39zeHzvctENOG+F9DLsuL 4xmgxzVCfNvjUGNJmYa/Ox0YIdIvHySEgf+JKmO8xu6f4VYkDOUK6AVMSG/dlXzZ k3j/hl13y0caiLr+doAgsS+/GJ7Bs4Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:34 2024 by rpki-client on console-ams.rpki-client.org