$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: +p/27R86XPA8bx9z2SiDIHm666F9p0PDNsqx4pM89KA= Subject key identifier: D1:4E:84:69:FA:17:E5:52:F9:1C:E1:DC:83:E5:8E:35:B9:61:8D:C4 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F432858476E010803A6AB8F1C66DE7F80 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:01:08:03:a6:ab:8f:1c:66:de:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=4aad597b-797d-43fa-8c13-4fb0a33b89df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:e4:cb:f2:49:5e:07:f8:47:1f:05:bd:81: 24:7a:00:a3:9d:c9:b0:6b:f2:55:2d:01:06:35:86: 19:a7:9b:4e:70:3d:9c:ee:d4:ff:67:d8:e1:20:c3: a7:99:77:03:a5:0c:ff:3f:89:f5:72:3f:3e:5b:c4: 02:34:b3:45:83:d3:35:fe:63:1e:88:0d:b1:ac:6c: f0:e3:90:69:51:3c:a9:5b:05:2c:81:9a:38:0b:d0: 66:00:5a:f6:97:4b:9c:d2:95:1e:5a:a3:24:2d:2a: 97:ff:d6:dc:24:7b:51:d8:6b:bd:ee:d7:55:11:1a: 31:ca:5b:a9:3c:95:b8:80:3f:cf:8e:a5:2a:a9:dc: ec:25:a4:17:bb:c8:44:2e:6e:a1:e5:b7:9a:69:ee: 2d:11:6b:e6:1c:31:a8:13:64:b8:4d:50:1b:99:8c: b2:f9:ab:e4:46:80:0f:ed:d6:60:6b:cc:aa:bb:74: 1d:a2:e3:16:43:49:23:10:9d:2c:64:3d:5d:0f:04: 38:dc:e5:17:2b:a7:49:bf:90:eb:25:68:b3:db:8c: ed:6c:80:17:65:79:50:e5:d3:3b:9d:b8:0d:04:72: 34:78:59:c7:9c:f6:6b:ca:e5:b1:dd:6b:5b:22:e4: f8:a9:87:4b:fe:8f:b3:05:e6:f0:77:21:26:a7:96: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4E:84:69:FA:17:E5:52:F9:1C:E1:DC:83:E5:8E:35:B9:61:8D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:97:99:10:a2:40:eb:2f:d3:c3:d7:cd:f0:92:0a:1d:98:d6: ce:e8:19:5d:ce:9b:9d:51:f9:80:da:b8:eb:c0:7a:61:82:21: f5:6e:0a:f2:59:7e:20:9b:59:1f:81:05:bb:94:1b:98:a9:49: 06:9c:3b:7e:0a:ae:d8:a5:eb:17:46:0f:b6:8d:35:cd:72:4c: d5:dd:10:ed:69:40:28:12:93:31:29:23:3a:c3:48:69:01:19: a5:2f:3f:14:75:49:9e:b1:f2:8c:66:5c:47:89:33:e1:35:40: 12:00:1a:e2:aa:0f:87:67:0f:3e:b2:f2:38:ea:2f:ef:9f:81: 14:24:09:95:89:6c:05:df:32:72:c1:8f:25:bf:bb:8c:99:5a: df:9f:4c:d2:1b:a3:d6:7b:db:12:4c:c2:29:6f:9c:69:e8:c0: 5e:b2:79:91:6f:40:bf:85:ef:af:73:44:8c:14:64:84:40:d5: 25:8a:50:14:ca:b5:20:65:18:30:fc:41:75:b6:a0:c2:7a:63: d3:79:3f:e0:a7:ca:ed:a1:33:52:fb:ca:2c:55:6a:40:ab:e8: 5f:3d:32:b3:80:e4:5d:79:78:9b:6a:43:39:40:da:88:a0:54: 5e:53:75:e1:00:90:03:d4:21:b9:f8:a3:27:d5:54:aa:bc:69: 3f:56:3c:ba -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEduAQgDpquPHGbef4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk NGFhZDU5N2ItNzk3ZC00M2ZhLThjMTMtNGZiMGEzM2I4OWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9rky/JJXgf4Rx8FvYEkegCjncmwa/JVLQEG NYYZp5tOcD2c7tT/Z9jhIMOnmXcDpQz/P4n1cj8+W8QCNLNFg9M1/mMeiA2xrGzw 45BpUTypWwUsgZo4C9BmAFr2l0uc0pUeWqMkLSqX/9bcJHtR2Gu97tdVERoxylup PJW4gD/PjqUqqdzsJaQXu8hELm6h5beaae4tEWvmHDGoE2S4TVAbmYyy+avkRoAP 7dZga8yqu3QdouMWQ0kjEJ0sZD1dDwQ43OUXK6dJv5DrJWiz24ztbIAXZXlQ5dM7 nbgNBHI0eFnHnPZryuWx3WtbIuT4qYdL/o+zBebwdyEmp5bfbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNFOhGn6F+VS+Rzh3IPljjW5YY3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANuXmRCiQOsv08PXzfCSCh2Y1s7oGV3Om51R+YDauOvAemGC IfVuCvJZfiCbWR+BBbuUG5ipSQacO34Krtil6xdGD7aNNc1yTNXdEO1pQCgSkzEp IzrDSGkBGaUvPxR1SZ6x8oxmXEeJM+E1QBIAGuKqD4dnDz6y8jjqL++fgRQkCZWJ bAXfMnLBjyW/u4yZWt+fTNIbo9Z72xJMwilvnGnowF6yeZFvQL+F769zRIwUZIRA 1SWKUBTKtSBlGDD8QXW2oMJ6Y9N5P+Cnyu2hM1L7yixVakCr6F89MrOA5F15eJtq QzlA2oigVF5TdeEAkAPUIbn4oyfVVKq8aT9WPLo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:41 2024 by rpki-client on console-fra.rpki-client.org