$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e1d29890-d98d-39bc-a2fe-d96ab96a2161.roa File: e1d29890-d98d-39bc-a2fe-d96ab96a2161.roa (raw, json) Hash identifier: 5Dpl8ZwRhFYZ7Cwbygk+bOettV7uDcOzuM03EdGYVsQ= Subject key identifier: B3:A5:3A:15:85:5A:40:12:36:CB:84:EC:09:53:12:3B:CA:C4:8A:8F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F5CA53CD1FF4F6DBE2CB00C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e1d29890-d98d-39bc-a2fe-d96ab96a2161.roa Signing time: Fri 22 Nov 2024 04:20:40 +0000 ROA not before: Fri 22 Nov 2024 04:20:40 +0000 ROA not after: Thu 20 Feb 2025 04:20:40 +0000 asID: 202656 IP address blocks: 206.123.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:ca:53:cd:1f:f4:f6:db:e2:cb:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 22 04:20:40 2024 GMT Not After : Feb 20 04:20:40 2025 GMT Subject: CN=291c3e42-bf14-4f93-a71b-18de45f4935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:e7:de:07:3f:16:b2:63:bb:4b:0e:dc:d9: ee:0e:63:52:18:a1:3a:4b:59:44:a0:32:35:c0:25: ce:81:a6:f0:dc:dc:7f:c3:80:9b:22:4e:1a:88:22: 10:10:38:f1:3f:02:25:cc:e7:c9:3a:34:e9:ed:47: 48:08:f8:c0:f7:8d:b9:6c:7a:c8:3d:6f:22:72:36: b4:2e:fc:55:bd:f1:0b:35:cd:7d:c8:77:c8:d4:e6: dd:33:d5:a8:32:67:19:8b:10:77:a1:73:4c:de:ec: 9f:a1:94:65:60:3d:0c:04:95:0c:d0:97:be:9e:c7: 1e:1b:9f:d5:25:42:88:cb:55:ae:c0:80:19:2e:9d: cc:3a:20:74:f6:c0:15:63:ba:59:bb:65:97:a4:f6: 80:be:d4:c4:35:b6:61:95:87:a1:bf:d4:3d:8f:9c: 76:2a:92:ad:2a:b9:8b:7d:a8:9d:5b:9d:3a:9a:ad: 72:25:ec:93:a2:3c:0a:a6:b8:35:74:3d:90:bc:7e: 14:89:c8:0e:46:4d:70:91:29:c1:1e:e5:cf:81:87: d3:8c:86:1c:4d:3b:88:eb:0c:88:26:81:ab:03:eb: 25:17:54:d1:9f:e3:5f:fa:e5:22:62:e0:51:68:2f: f7:22:34:35:f3:cc:ef:10:99:39:6d:d1:0f:d0:34: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:3A:15:85:5A:40:12:36:CB:84:EC:09:53:12:3B:CA:C4:8A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e1d29890-d98d-39bc-a2fe-d96ab96a2161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:20:72:08:da:c2:a1:18:f8:98:f8:83:e4:05:99:4c:a2:3e: d0:59:84:3c:d8:87:35:84:1c:b2:b0:85:09:5a:83:c3:bd:62: e9:ea:43:d9:2b:be:c8:54:89:b5:1a:3d:49:e6:d9:cc:78:24: 58:a6:cc:cc:a2:57:17:92:43:92:56:7e:79:39:73:b4:60:47: 73:47:3a:a7:77:c6:37:87:54:5d:58:bd:27:6f:4c:c0:03:a8: b7:da:b0:65:08:3d:a2:d8:e6:1b:7e:9c:81:87:4c:98:f0:a0: a5:c1:95:ca:f1:6a:9e:0a:c2:d0:92:c3:aa:6d:69:79:49:1f: 50:12:2f:63:0b:ac:6f:ed:5a:3a:39:6c:c2:a8:3e:39:d6:de: fe:e2:19:ee:3b:35:0b:09:4c:c9:d9:48:70:48:9a:cb:0e:5a: 9f:65:19:7f:f8:c1:2f:ad:22:a0:e8:3d:0e:cb:04:dc:81:76: 64:c6:14:36:f5:29:7b:25:e8:5d:9f:41:0c:63:26:19:fa:2c: 81:29:5c:a3:d0:6b:16:62:ab:88:95:39:7c:68:cd:15:67:8a: 39:c9:7d:81:76:72:05:07:e1:d4:ee:4b:10:9a:f8:aa:02:c9: 17:e4:92:4e:b7:80:36:5d:77:a8:b9:bf:c8:18:d7:46:d4:dd: 4d:e6:ec:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1ylPNH/T22+LLAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMjA0MjA0MFoXDTI1MDIyMDA0MjA0MFowLzEtMCsGA1UEAxMk MjkxYzNlNDItYmYxNC00ZjkzLWE3MWItMThkZTQ1ZjQ5MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7n3gc/FrJju0sO3NnuDmNSGKE6S1lEoDI1 wCXOgabw3Nx/w4CbIk4aiCIQEDjxPwIlzOfJOjTp7UdICPjA9425bHrIPW8icja0 LvxVvfELNc19yHfI1ObdM9WoMmcZixB3oXNM3uyfoZRlYD0MBJUM0Je+nsceG5/V JUKIy1WuwIAZLp3MOiB09sAVY7pZu2WXpPaAvtTENbZhlYehv9Q9j5x2KpKtKrmL faidW506mq1yJeyTojwKprg1dD2QvH4UicgORk1wkSnBHuXPgYfTjIYcTTuI6wyI JoGrA+slF1TRn+Nf+uUiYuBRaC/3IjQ188zvEJk5bdEP0DSJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOlOhWFWkASNsuE7AlTEjvKxIqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTFkMjk4OTAtZDk4ZC0z OWJjLWEyZmUtZDk2YWI5NmEyMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIgcgjawqEY+Jj4g+QFmUyiPtBZhDzYhzWEHLKwhQlag8O9YunqQ9kr vshUibUaPUnm2cx4JFimzMyiVxeSQ5JWfnk5c7RgR3NHOqd3xjeHVF1YvSdvTMAD qLfasGUIPaLY5ht+nIGHTJjwoKXBlcrxap4KwtCSw6ptaXlJH1ASL2MLrG/tWjo5 bMKoPjnW3v7iGe47NQsJTMnZSHBImssOWp9lGX/4wS+tIqDoPQ7LBNyBdmTGFDb1 KXsl6F2fQQxjJhn6LIEpXKPQaxZiq4iVOXxozRVnijnJfYF2cgUH4dTuSxCa+KoC yRfkkk63gDZdd6i5v8gY10bU3U3m7D4= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:01 2024 by rpki-client on console-fra.rpki-client.org