$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: PNRBKSdZAMluq/KAHNxe0V3ERmFzqZxo2jML8PpVPUo= Subject key identifier: 70:12:C1:9F:81:DF:B1:F6:A7:58:38:00:25:16:ED:43:F3:77:F6:4D Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F432858476E0108124DA00D62D1425180 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:01:08:12:4d:a0:0d:62:d1:42:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=ea5ad9de-7849-4c54-be5f-5c5129684ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:fb:d8:a6:ca:cf:c7:13:88:db:34:0c:94: 54:4b:c1:cb:c2:a9:69:7c:ca:6c:6d:79:97:09:93: c3:68:2e:23:5b:f2:38:b8:90:82:b6:48:0b:61:da: 30:d9:22:22:ff:c7:c5:c3:4a:b2:15:56:b4:1f:38: b1:2e:b3:18:38:c1:70:a5:24:5b:74:32:1e:b6:1d: 1d:f7:7a:da:80:94:6e:f2:1c:16:36:62:8a:15:d6: 60:72:4a:38:b4:93:4d:5d:4c:d2:d3:af:dd:a1:ec: 8e:e4:dc:95:62:68:3e:d8:b2:7b:dd:8c:bb:9b:15: 8d:d8:f2:d6:e9:39:16:3b:f4:0f:09:10:43:47:3a: 00:e7:f8:43:89:07:62:26:32:2c:dd:87:4b:93:c6: 93:03:8d:05:03:c1:81:f4:50:96:ee:22:b4:68:51: f5:40:62:b4:06:f8:56:ee:6b:4e:c8:1f:4a:a2:a8: b4:92:51:b3:d0:b0:c6:39:04:e1:38:ed:78:ef:6e: 91:10:d7:9e:6f:63:61:50:67:6c:62:51:03:22:56: 90:ba:c9:dc:cc:bf:92:e1:94:55:44:e2:4e:82:6a: 60:6a:0c:f9:ea:c8:d0:75:c6:c2:0b:a7:8d:1b:a3: 5d:ac:82:7e:d8:95:c9:65:c6:6d:71:79:15:a7:83: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:C1:9F:81:DF:B1:F6:A7:58:38:00:25:16:ED:43:F3:77:F6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:73:49:58:40:61:bc:a7:43:f3:58:5e:f4:50:b0:ef:cd:24: 65:48:43:73:3e:37:be:e6:3b:5f:f9:98:1c:35:86:a1:b4:43: 03:f5:50:8e:d4:d7:11:2a:e4:29:26:b3:20:5b:1f:27:6e:e6: 58:14:7c:b3:fa:d3:6f:70:23:de:3a:66:08:93:07:79:06:99: 11:30:22:d0:20:66:58:11:ea:d2:74:91:93:50:92:0d:a4:cc: 23:6a:4d:3c:f8:cc:80:1e:15:fa:9a:72:fd:df:33:bd:05:29: d8:49:57:54:74:ff:50:5f:f1:ab:7f:62:a0:0f:38:6e:dd:82: 96:d5:86:15:41:6e:55:4b:67:b1:23:a4:5e:9c:b4:0f:ee:2d: 72:82:2d:23:2b:66:00:fb:b0:a7:db:b4:53:7a:26:b7:2f:5b: f7:3c:e0:93:89:bb:39:a9:1a:b1:4d:c0:10:9a:48:5a:0e:bc: fc:1a:32:2a:3b:9d:bf:7f:c9:87:53:3a:eb:54:fb:1c:b4:f0: bd:f0:76:0f:53:f2:59:75:9d:43:ca:8d:11:c5:f4:a3:7a:be: d6:fe:9d:48:4f:54:8e:47:32:a8:16:cd:f3:8c:73:89:46:11: 24:b9:23:a6:2c:a6:64:0b:fc:8f:e0:56:ce:f6:ff:e6:0f:af: a2:30:bf:00 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEduAQgSTaANYtFCUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk ZWE1YWQ5ZGUtNzg0OS00YzU0LWJlNWYtNWM1MTI5Njg0YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxX72KbKz8cTiNs0DJRUS8HLwqlpfMpsbXmX CZPDaC4jW/I4uJCCtkgLYdow2SIi/8fFw0qyFVa0HzixLrMYOMFwpSRbdDIeth0d 93ragJRu8hwWNmKKFdZgcko4tJNNXUzS06/doeyO5NyVYmg+2LJ73Yy7mxWN2PLW 6TkWO/QPCRBDRzoA5/hDiQdiJjIs3YdLk8aTA40FA8GB9FCW7iK0aFH1QGK0BvhW 7mtOyB9Koqi0klGz0LDGOQThOO14726RENeeb2NhUGdsYlEDIlaQusnczL+S4ZRV ROJOgmpgagz56sjQdcbCC6eNG6NdrIJ+2JXJZcZtcXkVp4PQZwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHASwZ+B37H2p1g4ACUW7UPzd/ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAOpzSVhAYbynQ/NYXvRQsO/NJGVIQ3M+N77mO1/5mBw1hqG0 QwP1UI7U1xEq5CkmsyBbHydu5lgUfLP6029wI946ZgiTB3kGmREwItAgZlgR6tJ0 kZNQkg2kzCNqTTz4zIAeFfqacv3fM70FKdhJV1R0/1Bf8at/YqAPOG7dgpbVhhVB blVLZ7EjpF6ctA/uLXKCLSMrZgD7sKfbtFN6JrcvW/c84JOJuzmpGrFNwBCaSFoO vPwaMio7nb9/yYdTOutU+xy08L3wdg9T8ll1nUPKjRHF9KN6vtb+nUhPVI5HMqgW zfOMc4lGESS5I6YspmQL/I/gVs72/+YPr6IwvwA= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:44 2024 by rpki-client on console-ams.rpki-client.org