$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/df6e9778-867a-3ecb-9e92-15ea052edee2.roa File: df6e9778-867a-3ecb-9e92-15ea052edee2.roa (raw, json) Hash identifier: 1LgH88eoBCnDv05CMzJx7gU6HHvl6fw7EGgUZvYoaac= Subject key identifier: CE:DD:FB:A4:6C:21:E2:32:8F:40:F2:9B:B9:12:4A:1A:56:0B:91:BB Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285847BC2C117E4934B16C87B035C0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/df6e9778-867a-3ecb-9e92-15ea052edee2.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 26658 IP address blocks: 192.119.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:11:7e:49:34:b1:6c:87:b0:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=a507433f-85df-4775-bd61-3400248b4327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:d3:1b:3b:9f:ac:5f:25:dc:e4:94:16:c2: d7:1f:5c:f0:69:ea:10:50:1f:69:a7:06:0b:b5:f5: 63:61:33:d2:21:49:c8:88:89:c6:e0:93:53:ae:7c: c0:00:ce:d4:87:57:94:c8:f5:5e:4f:97:49:a6:c6: 0f:d2:e7:e3:b1:68:2a:dd:0e:b7:c0:29:ec:7a:16: 1a:08:d5:5d:b1:4f:1f:05:53:b0:83:c4:ca:0b:5b: 6c:1f:a1:18:62:95:85:62:be:19:02:f0:f9:15:ca: 16:79:c7:5c:ae:36:33:9f:c0:2f:ca:1b:7a:52:4f: bc:0c:9b:0f:38:88:99:89:0d:cb:f0:69:16:11:fd: bb:82:a2:ec:d7:cf:36:6d:fb:f1:1d:4f:4a:0e:ea: 61:be:ae:58:d5:c8:96:33:ce:ed:70:21:16:5b:b6: e2:02:87:2c:57:ba:86:56:db:ee:00:74:d1:4c:a5: 8b:ad:18:7f:80:7e:4d:cf:4b:cf:46:87:a9:3c:3b: c2:f2:e7:67:6f:ce:cc:95:f0:87:23:65:81:58:2f: d8:0d:9a:a8:4f:bc:5c:ca:16:06:ce:3c:55:cf:47: ca:bf:43:a2:c0:fc:a4:13:6b:46:44:f7:13:4c:50: 11:6a:6a:3e:94:70:6f:73:0f:eb:4e:04:9e:9c:eb: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DD:FB:A4:6C:21:E2:32:8F:40:F2:9B:B9:12:4A:1A:56:0B:91:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/df6e9778-867a-3ecb-9e92-15ea052edee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:46:4c:8d:86:6c:2d:ef:c7:e8:55:1b:13:6f:54:51:75:dc: ce:8c:db:8a:8e:4d:19:97:4c:41:19:67:6a:db:af:97:cb:cc: b1:24:f0:cc:c0:78:fc:a0:4b:6e:f0:8c:7a:ff:a8:94:03:44: 9f:ea:37:db:9e:6d:65:b5:2d:b1:5a:fa:b3:00:6b:fd:e1:90: a2:89:d6:48:b4:ba:f6:44:37:c8:52:7e:b4:f7:e1:ec:85:44: 3f:ac:5d:2b:7e:c9:42:b3:f8:19:0b:42:ca:31:43:7c:54:c8: c5:72:31:e7:89:01:e9:2a:08:5e:0a:a0:f2:ff:a1:cd:8e:93: e6:9f:7a:35:ae:5e:99:39:fd:bf:09:24:b9:17:fc:aa:8c:5f: 0a:99:4b:0c:c8:4d:88:21:5e:0e:2c:fe:e0:bf:e6:63:ab:dd: af:b5:37:f6:e7:ec:b0:a4:17:58:27:97:1b:35:91:a4:9f:a3: e1:a5:b4:45:1d:78:66:1b:6d:db:0c:aa:65:5f:73:59:a2:e1: ce:1d:b3:76:74:ef:3f:4b:24:01:ba:77:13:36:02:68:d9:fe: cc:18:05:26:78:ed:9e:84:49:fc:06:89:8b:f8:52:34:80:ee: 69:74:bf:72:45:83:34:f3:c6:19:92:e4:23:d7:ca:3b:02:11: c4:1e:c9:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LBF+STSxbIewNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk YTUwNzQzM2YtODVkZi00Nzc1LWJkNjEtMzQwMDI0OGI0MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxXTGzufrF8l3OSUFsLXH1zwaeoQUB9ppwYL tfVjYTPSIUnIiInG4JNTrnzAAM7Uh1eUyPVeT5dJpsYP0ufjsWgq3Q63wCnsehYa CNVdsU8fBVOwg8TKC1tsH6EYYpWFYr4ZAvD5FcoWecdcrjYzn8Avyht6Uk+8DJsP OIiZiQ3L8GkWEf27gqLs1882bfvxHU9KDuphvq5Y1ciWM87tcCEWW7biAocsV7qG VtvuAHTRTKWLrRh/gH5Nz0vPRoepPDvC8udnb87MlfCHI2WBWC/YDZqoT7xcyhYG zjxVz0fKv0OiwPykE2tGRPcTTFARamo+lHBvcw/rTgSenOuL5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7d+6RsIeIyj0Dym7kSShpWC5G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZGY2ZTk3NzgtODY3YS0z ZWNiLTllOTItMTVlYTA1MmVkZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZGTI2GbC3vx+hVGxNvVFF13M6M24qOTRmXTEEZZ2rbr5fLzLEk8MzA ePygS27wjHr/qJQDRJ/qN9uebWW1LbFa+rMAa/3hkKKJ1ki0uvZEN8hSfrT34eyF RD+sXSt+yUKz+BkLQsoxQ3xUyMVyMeeJAekqCF4KoPL/oc2Ok+afejWuXpk5/b8J JLkX/KqMXwqZSwzITYghXg4s/uC/5mOr3a+1N/bn7LCkF1gnlxs1kaSfo+GltEUd eGYbbdsMqmVfc1mi4c4ds3Z07z9LJAG6dxM2AmjZ/swYBSZ47Z6ESfwGiYv4UjSA 7ml0v3JFgzTzxhmS5CPXyjsCEcQeyTQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org