$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa File: 5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa (raw, json) Hash identifier: H1eEPM52ArVchyTv2c2CiRmFywCO7amtLdvSuq3CPyM= Subject key identifier: 51:3E:87:55:2C:42:49:07:5D:FE:80:3A:CE:36:F8:A6:B9:03:CA:DE Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Certificate serial: 010D0C9F4328584765A0F0479D84AF9F66670240 Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16509 IP address blocks: 192.80.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f0:47:9d:84:af:9f:66:67:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=8c562409-e5a8-4eab-b0d5-ab64238bd26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:b4:9f:fb:c1:c4:f6:74:f0:f2:a5:3d:e2: cd:de:35:1f:0c:a3:ff:52:5e:7b:65:d3:52:d6:cf: c2:23:e1:be:bf:40:6f:60:04:b7:c7:90:1d:ba:fe: bc:b8:4a:0c:96:c5:1f:ed:c1:7f:70:cc:10:f6:56: 27:36:96:89:ea:5d:14:9a:92:c0:59:f1:e8:79:72: dd:da:eb:a9:36:04:be:d5:c5:21:dd:f4:74:6b:ba: 74:26:69:43:d4:d6:87:2d:55:21:13:98:a2:bb:a3: 68:81:7c:e2:a0:c2:7d:97:7d:bc:54:e7:38:5c:70: 41:97:ee:63:e8:8e:8d:a2:42:70:bb:cb:3f:bf:b9: ef:d6:70:89:b8:43:5b:58:78:48:3b:82:26:a2:b1: d0:c4:ea:2a:aa:56:35:bf:ca:7b:b3:2c:d6:fd:cf: 11:c5:a3:a4:e6:b0:26:3a:58:22:4f:b7:57:4c:e7: 19:b5:fd:1c:83:02:24:0b:79:9f:39:f0:77:17:2c: cc:c6:c1:8a:1e:28:9f:25:85:9d:9d:cf:87:67:98: e8:bb:44:d3:3b:55:18:c8:9e:99:79:93:74:2b:ff: 00:8d:20:23:65:34:8d:01:7c:2c:7c:62:69:c4:17: f4:cd:8e:49:95:0f:23:f7:c2:cb:18:ab:d0:ff:32: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3E:87:55:2C:42:49:07:5D:FE:80:3A:CE:36:F8:A6:B9:03:CA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/5a7e94aa-da20-3620-9a5f-e4e7fbda04e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl X509v3 Authority Key Identifier: keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer sbgp-ipAddrBlock: critical IPv4: 192.80.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e6:c0:f2:65:71:62:5d:a2:33:f4:6a:b6:f6:45:5a:16:2a: 89:7d:be:c0:7a:96:17:a3:51:3b:da:6b:6f:e1:ed:6c:aa:b3: de:1c:00:ad:c7:4c:89:0e:de:fe:3b:c0:cf:0d:98:a5:0c:9a: 05:5d:6f:47:d2:d3:cb:dc:6e:24:99:fa:3f:a2:33:0e:20:fd: 39:a5:47:59:35:07:cc:a9:77:8c:6a:f6:b4:0b:a8:e8:5c:26: e9:14:22:56:8b:70:91:ce:9c:ef:81:c5:f6:27:36:95:33:cf: 2a:08:bd:6a:51:37:c4:6b:b1:4c:4b:b8:c9:51:85:54:19:0a: 17:b2:af:6f:e7:c6:de:e1:4c:ce:1c:6f:88:15:ea:ca:d2:eb: 0b:b4:3b:74:d8:29:07:f5:bf:c8:ef:40:02:ed:2b:21:09:ac: 9d:cb:2f:88:89:21:9a:3d:0f:de:23:83:f9:5f:0a:ff:d0:a2: e2:bd:f5:5b:ff:f3:b0:dd:17:1f:67:7b:7c:98:70:99:8a:a1: 17:52:81:77:b1:84:03:54:52:b9:b9:41:37:04:18:1a:31:cb: cb:f5:73:35:6b:bc:fb:6c:8c:60:61:df:61:fd:80:97:cb:34: 6d:ef:66:c5:24:f6:8c:1d:02:14:1e:5f:cf:fe:a1:ca:11:95: b7:ef:e0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPBHnYSvn2ZnAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3 OGRkMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk OGM1NjI0MDktZTVhOC00ZWFiLWIwZDUtYWI2NDIzOGJkMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8G0n/vBxPZ08PKlPeLN3jUfDKP/Ul57ZdNS 1s/CI+G+v0BvYAS3x5Aduv68uEoMlsUf7cF/cMwQ9lYnNpaJ6l0UmpLAWfHoeXLd 2uupNgS+1cUh3fR0a7p0JmlD1NaHLVUhE5iiu6NogXzioMJ9l328VOc4XHBBl+5j 6I6NokJwu8s/v7nv1nCJuENbWHhIO4ImorHQxOoqqlY1v8p7syzW/c8RxaOk5rAm OlgiT7dXTOcZtf0cgwIkC3mfOfB3FyzMxsGKHiifJYWdnc+HZ5jou0TTO1UYyJ6Z eZN0K/8AjSAjZTSNAXwsfGJpxBf0zY5JlQ8j98LLGKvQ/zKRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE+h1UsQkkHXf6AOs42+Ka5A8reMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3 NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvNWE3ZTk0YWEtZGEyMC0z NjIwLTlhNWYtZTRlN2ZiZGEwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXmwPJlcWJdojP0arb2RVoWKol9vsB6lhejUTvaa2/h7Wyqs94cAK3H TIkO3v47wM8NmKUMmgVdb0fS08vcbiSZ+j+iMw4g/TmlR1k1B8ypd4xq9rQLqOhc JukUIlaLcJHOnO+BxfYnNpUzzyoIvWpRN8RrsUxLuMlRhVQZCheyr2/nxt7hTM4c b4gV6srS6wu0O3TYKQf1v8jvQALtKyEJrJ3LL4iJIZo9D94jg/lfCv/QouK99Vv/ 87DdFx9ne3yYcJmKoRdSgXexhANUUrm5QTcEGBoxy8v1czVrvPtsjGBh32H9gJfL NG3vZsUk9owdAhQeX8/+ocoRlbfv4A8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:07 2024 by rpki-client on console-ams.rpki-client.org