$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa File: 846a7d87-a2f6-32da-ab22-7e4cde53728a.roa (raw, json) Hash identifier: LIavA1MhP4jTRteqUMvHaoifDrW8hCj1M0C07kkuL34= Subject key identifier: CF:F6:24:17:56:19:0F:4C:3D:73:CA:D5:57:8B:F2:15:C1:B4:36:89 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584770CB9A4872D8308446825940 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 19209 IP address blocks: 69.147.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:9a:48:72:d8:30:84:46:82:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=12ba98a7-0b02-4caa-9c86-cc740d87857a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:7c:dd:91:01:86:e8:31:79:31:dc:b9:69: 73:cd:df:87:26:12:51:b8:f2:b5:d2:09:58:a0:a9: 9e:7f:56:ff:c3:12:3e:ee:8c:9d:69:ba:f6:e1:16: 20:75:01:c3:10:3f:24:4f:4b:4d:dc:8d:b4:42:9c: 42:ef:21:cf:78:4a:f5:fe:a2:e0:4f:55:9f:a5:1e: eb:99:5e:35:1b:19:9c:b0:d4:53:1e:d2:39:57:2f: 00:9c:96:f0:ea:62:cd:de:b5:bb:19:3d:e4:98:7b: 44:0f:a4:e1:b7:5b:2f:38:48:8d:62:24:32:87:ca: 20:17:6c:d4:ea:0d:11:35:a4:95:ac:ce:70:fa:8a: b7:0e:ab:01:93:ae:af:c9:b2:9f:cb:03:3c:a9:79: 88:53:50:cd:a5:e5:70:8d:34:76:39:68:b3:fe:0c: 2b:78:53:e4:ff:f9:fb:48:d2:88:c4:5f:e5:4a:f5: f4:af:c4:80:13:e1:d3:e2:9c:15:74:de:2c:20:00: d3:79:4e:6b:04:9b:13:09:35:e9:93:4d:e4:bd:70: 4d:32:84:8f:fc:db:c8:e8:0f:26:22:71:1d:29:fe: e1:79:2d:16:1a:bc:ec:cf:af:8c:45:dd:42:04:01: 15:74:81:2d:1e:cd:11:ba:8a:8e:a8:37:22:7f:87: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:24:17:56:19:0F:4C:3D:73:CA:D5:57:8B:F2:15:C1:B4:36:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 69.147.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ed:6f:f2:f4:94:5e:0f:70:3d:96:ff:52:ed:26:d0:b4:01: 42:36:e8:16:a9:72:b6:81:25:82:97:2d:32:5e:00:80:eb:5f: a4:72:cc:5b:fe:2e:1b:94:ac:41:b9:26:73:ff:6c:4c:d1:d9: 02:e6:ca:11:9e:71:54:10:9d:bc:81:ae:75:93:72:60:42:fa: 12:fc:74:7b:00:28:87:a2:e9:00:8c:0e:2c:58:58:75:1a:14: 06:30:d7:bf:2c:5d:72:6f:ec:a3:5a:27:15:d7:f5:86:e9:85: 07:a9:83:ba:eb:8f:80:fd:cf:12:d1:49:b2:93:4a:6d:b0:1c: 2e:05:4f:d2:63:c5:97:2d:ba:04:2f:31:0f:4f:aa:79:c2:28: e2:e0:57:5e:cb:22:90:81:b1:8e:bb:d5:52:b4:43:3e:7f:81: 2c:52:d5:d8:f3:d7:54:67:af:c1:30:0f:74:27:d2:45:23:2c: 3a:3b:e5:19:f3:82:0a:40:8d:84:38:4f:be:48:16:ef:00:8e: dc:50:4a:f9:11:83:8c:1c:6e:44:fb:c0:05:f8:3f:d3:c2:ff: e8:7f:4d:d6:85:91:0f:5f:5e:a0:46:4a:a3:21:96:46:71:74: 74:f4:14:33:27:39:fb:e5:01:07:d1:4c:69:e4:a0:9b:c1:32: cf:09:65:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdwy5pIctgwhEaCWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk MTJiYTk4YTctMGIwMi00Y2FhLTljODYtY2M3NDBkODc4NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrJ83ZEBhugxeTHcuWlzzd+HJhJRuPK10glY oKmef1b/wxI+7oydabr24RYgdQHDED8kT0tN3I20QpxC7yHPeEr1/qLgT1WfpR7r mV41GxmcsNRTHtI5Vy8AnJbw6mLN3rW7GT3kmHtED6Tht1svOEiNYiQyh8ogF2zU 6g0RNaSVrM5w+oq3DqsBk66vybKfywM8qXmIU1DNpeVwjTR2OWiz/gwreFPk//n7 SNKIxF/lSvX0r8SAE+HT4pwVdN4sIADTeU5rBJsTCTXpk03kvXBNMoSP/NvI6A8m InEdKf7heS0WGrzsz6+MRd1CBAEVdIEtHs0RuoqOqDcif4d6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/2JBdWGQ9MPXPK1VeL8hXBtDaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvODQ2YTdkODctYTJmNi0z MmRhLWFiMjItN2U0Y2RlNTM3MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvtb/L0lF4PcD2W/1LtJtC0AUI26BapcraBJYKXLTJeAIDrX6RyzFv+ LhuUrEG5JnP/bEzR2QLmyhGecVQQnbyBrnWTcmBC+hL8dHsAKIei6QCMDixYWHUa FAYw178sXXJv7KNaJxXX9YbphQepg7rrj4D9zxLRSbKTSm2wHC4FT9JjxZctugQv MQ9PqnnCKOLgV17LIpCBsY671VK0Qz5/gSxS1djz11Rnr8EwD3Qn0kUjLDo75Rnz ggpAjYQ4T75IFu8AjtxQSvkRg4wcbkT7wAX4P9PC/+h/TdaFkQ9fXqBGSqMhlkZx dHT0FDMnOfvlAQfRTGnkoJvBMs8JZUc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org