$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa File: aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa (raw, json) Hash identifier: N2S2gFNo3Hkh6DFg+fVmSMIXrWQ/Y3AtHwdUbNW1A8o= Subject key identifier: 42:E6:A5:20:D5:54:3E:2E:80:05:F9:27:09:D2:4D:8C:F2:ED:6E:E3 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847E78F5C88428F32064962BF40 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 8075 IP address blocks: 199.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:5c:88:42:8f:32:06:49:62:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=eb46b177-23b5-4097-8a5d-eca481fe2be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:aa:84:f1:aa:ae:4a:cb:c8:e9:ed:f9:2e: a0:b2:59:4c:01:0d:6b:12:dc:6a:21:e2:35:b4:88: 87:fc:71:3b:de:1d:90:da:89:96:ef:e8:77:fc:85: b1:54:35:c1:5b:a1:21:d7:3b:6b:0c:bd:78:7d:eb: 89:09:8f:22:40:4f:9f:9a:cd:4e:71:a6:b2:ad:9e: 22:a1:10:3d:24:81:4a:53:b3:53:4c:7d:c1:d4:ee: eb:6d:a4:89:c2:58:f7:5e:33:03:c5:ab:a5:fb:fc: a9:4d:25:c6:82:58:e1:22:16:56:7d:15:25:8e:9f: d4:23:98:6f:c7:f0:53:6e:44:57:72:e3:03:08:46: a3:b3:32:87:32:cf:f9:d1:17:b5:4b:c1:58:70:96: 87:9f:3e:14:d3:79:fb:6b:87:3f:f4:85:4a:57:fe: 18:a9:a9:4c:3d:a3:54:22:10:95:b3:45:06:2b:45: 6f:0f:28:19:2b:f7:45:4d:b6:e7:0c:c6:ec:00:23: d0:db:12:10:49:9a:6e:ae:87:6b:ce:57:d7:59:3e: d3:58:45:bd:ea:89:4f:f8:9e:2b:44:8d:35:8c:a0: 9e:c9:d4:96:c3:6b:e2:70:de:25:9b:dc:35:1a:27: 88:65:22:62:e5:fd:36:1c:3b:d0:15:b2:1a:39:4b: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:A5:20:D5:54:3E:2E:80:05:F9:27:09:D2:4D:8C:F2:ED:6E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5b:05:80:0f:c2:1b:cf:89:bf:01:3c:cc:11:45:5c:00:03: e4:e1:bf:fa:e9:b5:fd:cc:72:f6:ef:4f:75:d7:ca:84:5e:cb: b7:76:90:4c:6d:58:ae:93:f8:db:e5:7e:b1:eb:fb:95:bb:e1: be:f0:ed:94:29:3d:a0:5f:25:ad:4e:bd:65:ea:0c:68:96:a5: 57:cd:1b:9c:49:c0:52:ee:6f:24:f6:b2:10:6f:42:b7:54:77: 4e:2a:f8:2f:aa:64:7a:ab:b7:12:a6:68:db:3b:db:a2:c1:12: 32:c4:d8:36:ee:8b:c7:8e:ba:c9:c0:7a:e0:63:ae:43:8f:5c: e9:73:c3:2b:18:48:30:c9:fa:07:06:78:a1:fe:7e:1e:5f:6a: 7e:0e:35:3d:18:5c:2f:3e:86:04:dd:3e:c5:a2:ec:5b:7d:d1: f8:d3:06:f7:02:8a:46:5b:2d:e4:eb:08:b7:5a:87:48:6c:e9: 98:db:bf:af:a7:2f:36:c4:04:a5:8c:6c:fe:e7:8e:ff:a8:78: 79:fd:61:05:4a:ad:9b:8c:3c:31:47:de:38:51:a8:e4:4f:0b: 6e:2d:3e:7b:8f:0e:cc:8a:5d:22:7b:b4:a1:9e:b1:8f:9e:9b: 92:1b:9f:9f:43:cb:92:91:7c:2a:75:d8:a1:01:25:ce:b6:33: 43:53:5b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1yIQo8yBkliv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk ZWI0NmIxNzctMjNiNS00MDk3LThhNWQtZWNhNDgxZmUyYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwCqhPGqrkrLyOnt+S6gsllMAQ1rEtxqIeI1 tIiH/HE73h2Q2omW7+h3/IWxVDXBW6Eh1ztrDL14feuJCY8iQE+fms1OcaayrZ4i oRA9JIFKU7NTTH3B1O7rbaSJwlj3XjMDxaul+/ypTSXGgljhIhZWfRUljp/UI5hv x/BTbkRXcuMDCEajszKHMs/50Re1S8FYcJaHnz4U03n7a4c/9IVKV/4YqalMPaNU IhCVs0UGK0VvDygZK/dFTbbnDMbsACPQ2xIQSZpurodrzlfXWT7TWEW96olP+J4r RI01jKCeydSWw2vicN4lm9w1GieIZSJi5f02HDvQFbIaOUvmVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELmpSDVVD4ugAX5JwnSTYzy7W7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWE3YzkwZWYtYjhkYy0z YzA5LTg5YmQtNTEyYmI1OTg5ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxbBYAPwhvPib8BPMwRRVwAA+Thv/rptf3McvbvT3XXyoRey7d2kExt WK6T+NvlfrHr+5W74b7w7ZQpPaBfJa1OvWXqDGiWpVfNG5xJwFLubyT2shBvQrdU d04q+C+qZHqrtxKmaNs726LBEjLE2Dbui8eOusnAeuBjrkOPXOlzwysYSDDJ+gcG eKH+fh5fan4ONT0YXC8+hgTdPsWi7Ft90fjTBvcCikZbLeTrCLdah0hs6Zjbv6+n LzbEBKWMbP7njv+oeHn9YQVKrZuMPDFH3jhRqORPC24tPnuPDsyKXSJ7tKGesY+e m5Ibn59Dy5KRfCp12KEBJc62M0NTW+8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org