$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa File: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json) Hash identifier: T4BU/rnYdYLEPHV1fyd3KdK2OXNSLp3mytbNcp2ubTU= Subject key identifier: 52:2D:14:F0:4C:57:67:CA:D5:ED:00:B1:94:9C:72:8C:21:04:10:6C Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F432858478CB6925F07A3F172445AFD00 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 906 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:92:5f:07:a3:f1:72:44:5a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=95982269-4177-4a24-9d9a-ef2f342073d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:bc:47:d1:d6:17:f8:8e:78:b7:f9:1c:48: a3:d3:eb:84:76:62:c1:ca:f0:b8:aa:e3:66:02:3b: 9e:20:16:64:3c:10:77:33:49:b8:95:a2:d5:9a:8e: f3:64:96:bc:bc:7e:2e:94:87:71:81:68:86:8c:a4: fd:4d:a2:bf:ba:b0:b2:59:04:f4:c2:26:71:e5:66: 47:1a:33:a2:38:eb:35:db:cf:93:0b:0e:8a:10:7d: 4a:16:fe:57:b4:29:27:36:fc:0a:ac:de:a3:18:5c: eb:37:d6:4b:61:9d:9e:fa:97:f1:53:aa:f7:92:ec: 0d:69:07:29:97:e2:e5:2f:4e:96:d0:eb:25:c0:e1: c6:f0:12:ca:20:0e:fe:c8:89:e4:60:52:23:d6:f2: 1b:0a:f6:76:ed:c3:4b:a5:d5:94:93:31:4e:05:7d: 33:39:29:0d:52:44:e1:31:cc:0f:3c:ae:fa:d4:65: cb:33:1f:41:41:9c:60:b0:76:9f:02:ce:43:66:e5: cf:36:d9:30:2c:d5:2c:fc:c6:a0:1f:03:44:46:44: e0:13:2a:66:b5:c0:82:4d:ef:67:ce:d3:11:11:2e: 06:12:67:4e:59:75:1c:27:4c:6d:80:0f:b4:76:5f: 80:bf:27:3a:37:8e:8c:7b:f8:8c:c1:47:95:7e:4a: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:14:F0:4C:57:67:CA:D5:ED:00:B1:94:9C:72:8C:21:04:10:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:61:f3:67:60:9d:70:29:79:e7:bc:07:d7:92:77:0a:ae:e4: b1:9f:9a:86:e1:7f:37:31:14:99:0d:8b:4b:a9:75:3e:aa:82: ac:ce:a9:87:6d:de:c9:88:f9:9c:ea:77:13:15:e3:c7:16:2f: 4b:d1:1c:fb:8c:4d:74:f7:90:3c:d1:71:49:2f:15:53:ea:8d: b8:8a:24:ac:58:e8:51:3f:ae:96:d1:07:8b:0d:d6:12:ce:df: 99:bf:33:9a:df:2b:89:95:83:17:19:18:17:c1:91:82:66:bc: bb:59:c5:ad:ba:6b:9e:94:7f:0f:b9:85:85:b6:c2:1f:ae:53: 3f:8e:02:c0:c3:73:dd:32:d8:74:8d:49:f2:c1:c0:1d:d3:24: fb:aa:6e:8a:6f:d8:ee:c4:0a:b7:a8:00:e0:44:f6:e1:e7:d7: e9:4b:66:ac:95:9e:09:a8:ca:f4:4b:5d:21:9c:3d:a2:89:b8: ed:67:ef:88:ef:74:57:80:16:e8:8e:4c:8d:4b:5f:b4:db:2f: 8e:6f:24:ea:c2:41:07:19:43:9f:1b:55:32:d0:c7:ef:9a:78: 04:b7:75:a0:c7:bd:41:6f:58:b3:b6:be:db:8b:01:59:76:31: 6f:3a:b5:d5:61:48:7a:f0:3a:b8:0b:08:b5:23:99:bb:ef:60: 34:33:13:b4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeMtpJfB6PxckRa/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk OTU5ODIyNjktNDE3Ny00YTI0LTlkOWEtZWYyZjM0MjA3M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+G8R9HWF/iOeLf5HEij0+uEdmLByvC4quNm AjueIBZkPBB3M0m4laLVmo7zZJa8vH4ulIdxgWiGjKT9TaK/urCyWQT0wiZx5WZH GjOiOOs128+TCw6KEH1KFv5XtCknNvwKrN6jGFzrN9ZLYZ2e+pfxU6r3kuwNaQcp l+LlL06W0OslwOHG8BLKIA7+yInkYFIj1vIbCvZ27cNLpdWUkzFOBX0zOSkNUkTh McwPPK761GXLMx9BQZxgsHafAs5DZuXPNtkwLNUs/MagHwNERkTgEypmtcCCTe9n ztMRES4GEmdOWXUcJ0xtgA+0dl+Avyc6N46Me/iMwUeVfkokVwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFItFPBMV2fK1e0AsZSccowhBBBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjAzYTk0NDMtMTQ2OC0z ZTRlLTlmYWMtODBiYjMyNDE4ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKYfNnYJ1wKXnnvAfXkncKruSxn5qG4X83 MRSZDYtLqXU+qoKszqmHbd7JiPmc6ncTFePHFi9L0Rz7jE1095A80XFJLxVT6o24 iiSsWOhRP66W0QeLDdYSzt+ZvzOa3yuJlYMXGRgXwZGCZry7WcWtumuelH8PuYWF tsIfrlM/jgLAw3PdMth0jUnywcAd0yT7qm6Kb9juxAq3qADgRPbh59fpS2aslZ4J qMr0S10hnD2iibjtZ++I73RXgBbojkyNS1+02y+ObyTqwkEHGUOfG1Uy0MfvmngE t3Wgx71Bb1iztr7biwFZdjFvOrXVYUh68Dq4Cwi1I5m772A0MxO0 -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:22 2024 by rpki-client on console-ams.rpki-client.org