$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: MFXhLDBoAF3GoXPwNKQTRd8zqghT427XHAAFGziXqJ4= Subject key identifier: 52:89:B2:A0:12:4C:7D:9A:66:5C:E4:B8:59:D0:52:A2:28:E5:09:F0 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584773965DA298D283CC51AA817C Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:5d:a2:98:d2:83:cc:51:aa:81:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=7aeadbf8-b0e5-45b0-bc65-04d45baa9509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:68:3c:7a:5c:b5:4c:4f:39:08:56:83:98: c1:e6:97:6e:48:aa:76:f4:8f:63:2d:80:9d:66:9f: bd:47:e8:78:71:5d:2a:a1:c5:2c:33:66:7e:f1:88: 0f:cc:2c:d4:87:78:99:26:ff:c4:29:44:88:24:b4: 63:b7:fa:e5:20:5e:ce:88:f1:a4:16:ee:e4:76:a8: 74:6a:78:61:f2:e9:ef:39:29:6c:fb:fb:08:aa:bf: 6c:5a:56:fe:d5:1b:ec:4e:4c:a3:47:9e:cf:24:f2: 86:2c:db:89:97:4c:5b:90:e7:a0:96:3b:71:76:85: ba:24:c4:86:59:b6:a5:19:ee:6f:06:79:00:4c:73: 84:02:11:0d:82:f0:e4:97:d6:9a:9d:7c:fc:ca:64: 23:bb:30:ea:10:dd:64:76:02:81:c7:05:78:c8:96: 51:4a:6c:ec:b6:fd:61:6d:1b:63:6b:3f:8d:47:1a: 9c:f1:fc:64:14:a6:06:fd:10:39:e1:b9:97:74:b7: 72:59:62:a1:a2:69:34:50:4d:a2:34:17:9c:2d:c6: 1b:6e:3e:e5:aa:04:ba:8c:f3:d2:3e:04:89:60:19: 8a:3e:d0:12:d7:d4:11:ed:ff:00:97:59:07:9d:88: d4:3d:8b:e4:b0:b7:37:20:55:d2:d2:98:11:49:40: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:89:B2:A0:12:4C:7D:9A:66:5C:E4:B8:59:D0:52:A2:28:E5:09:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8d:8b:71:71:7c:c1:19:fa:9a:f6:2b:5b:65:f9:c1:2f:ff: 41:ff:05:f6:ff:b2:f0:3a:f0:24:a0:ad:77:27:f9:aa:8e:28: 71:85:2d:b8:0c:a4:75:22:80:fb:8a:cc:18:9a:97:62:b5:14: 28:8d:2e:80:60:8e:a3:9b:20:3f:8f:9e:f8:45:8b:fa:1a:f4: ef:da:41:32:b2:b3:5c:4f:83:89:4c:05:0a:e3:2e:23:38:e0: 05:b6:b2:39:82:d3:cd:46:b9:43:4b:99:91:47:c1:ff:45:d1: 2f:94:6b:68:d3:97:a2:f5:2a:f2:ca:20:a5:8a:c6:ee:68:00: 5d:d9:81:bc:1b:0d:ff:2e:64:e5:51:e5:59:90:ca:67:60:56: c3:43:81:51:bf:b1:de:0a:62:4b:cd:cc:22:ca:6f:ea:f0:f9: cf:65:16:ba:24:a6:63:4a:cb:28:61:39:e4:5d:46:74:4f:26: 73:6e:99:a7:d6:4a:03:24:ca:a3:47:9b:4b:88:b7:4c:8c:df: ac:24:6a:d2:b8:61:b8:3f:79:ed:f4:23:1c:8d:30:b5:0f:6c: 52:83:81:7d:a8:96:9e:f3:38:3a:99:73:2d:1c:d4:c0:65:57: 32:17:f3:3e:22:86:ca:ef:d7:e1:16:28:0a:ae:a0:4d:0e:c5: 87:05:92:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzll2imNKDzFGqgXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2FlYWRiZjgtYjBlNS00NWIwLWJjNjUtMDRkNDViYWE5NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN1oPHpctUxPOQhWg5jB5pduSKp29I9jLYCd Zp+9R+h4cV0qocUsM2Z+8YgPzCzUh3iZJv/EKUSIJLRjt/rlIF7OiPGkFu7kdqh0 anhh8unvOSls+/sIqr9sWlb+1RvsTkyjR57PJPKGLNuJl0xbkOegljtxdoW6JMSG WbalGe5vBnkATHOEAhENgvDkl9aanXz8ymQjuzDqEN1kdgKBxwV4yJZRSmzstv1h bRtjaz+NRxqc8fxkFKYG/RA54bmXdLdyWWKhomk0UE2iNBecLcYbbj7lqgS6jPPS PgSJYBmKPtAS19QR7f8Al1kHnYjUPYvksLc3IFXS0pgRSUCaVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKJsqASTH2aZlzkuFnQUqIo5QnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyNi3FxfMEZ+pr2K1tl+cEv/0H/Bfb/svA68CSgrXcn+aqOKHGFLbgM pHUigPuKzBial2K1FCiNLoBgjqObID+PnvhFi/oa9O/aQTKys1xPg4lMBQrjLiM4 4AW2sjmC081GuUNLmZFHwf9F0S+Ua2jTl6L1KvLKIKWKxu5oAF3ZgbwbDf8uZOVR 5VmQymdgVsNDgVG/sd4KYkvNzCLKb+rw+c9lFrokpmNKyyhhOeRdRnRPJnNumafW SgMkyqNHm0uIt0yM36wkatK4Ybg/ee30IxyNMLUPbFKDgX2olp7zODqZcy0c1MBl VzIX8z4ihsrv1+EWKAquoE0OxYcFko0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org