$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa File: e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa (raw, json) Hash identifier: XQFIwkURHe7sLl3selY7AUl0cHu2Q2eKhGU5eIaslW4= Subject key identifier: 4E:B9:78:E4:91:F9:EE:40:17:70:39:8D:ED:58:41:77:B9:2F:F0:D5 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285847BC2C11C2993DCA650C75D280 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 8100 IP address blocks: 192.119.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:11:c2:99:3d:ca:65:0c:75:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=9e604b13-cee0-4a38-a507-774c873bcd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:a0:27:2e:91:34:e3:c0:a6:0a:cd:47:d5: 44:2f:1a:6d:90:c0:a8:08:e9:25:dd:82:6a:ed:55: 2d:48:51:44:48:10:c4:8e:d7:86:24:86:29:a8:d2: 5b:f8:56:9e:b6:4c:9d:7c:0d:b0:0a:d7:62:94:19: 86:c6:5b:1d:c4:83:94:a3:10:55:14:cf:20:7e:0d: 42:8a:6b:4e:a4:cc:12:38:3b:91:69:75:80:6a:8a: c0:70:56:ca:46:d0:c1:b9:f9:58:5a:b1:32:10:07: 85:f1:27:ed:c7:a1:ea:5a:e3:c8:74:aa:23:f7:97: 34:1b:5e:f4:50:55:8f:00:ed:9b:e0:17:ff:de:22: 3e:65:fd:e4:8d:e4:94:25:08:a5:27:a6:ec:8a:3f: b3:a5:5d:86:46:16:79:db:80:b4:d9:bd:f0:07:c7: 0f:b9:27:e3:ef:94:81:0c:55:07:26:85:f8:3c:9a: 34:a8:17:67:f1:28:d6:01:79:4b:7d:47:76:9f:c6: 7b:0d:b3:bd:14:a6:23:98:b4:65:33:cc:b0:c2:02: 90:46:c6:f6:6c:64:8f:5f:63:3b:e9:5b:f7:55:e7: a8:bf:aa:38:2d:8f:ce:22:23:0c:47:47:85:79:67: 8e:50:17:2b:c9:f8:05:f0:3d:54:aa:53:44:66:1c: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B9:78:E4:91:F9:EE:40:17:70:39:8D:ED:58:41:77:B9:2F:F0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:17:e6:6f:c2:97:94:28:47:bc:14:38:5e:6d:bc:74:cd:35: 3f:42:21:71:93:73:5e:07:13:c8:ab:8f:5a:06:fe:fe:3c:25: b0:4c:c5:d5:ca:00:73:5c:07:57:e7:32:cc:c5:85:31:a1:1a: 43:4d:59:8d:47:ac:6b:cb:b7:f1:33:4a:48:c0:1d:b7:58:4b: c2:70:42:dd:b6:43:04:39:db:fe:43:54:ea:b7:34:d7:8f:af: ad:60:f1:5f:b3:ae:94:94:63:8a:76:1a:f9:91:4e:86:71:16: c4:76:3b:2a:46:05:dd:93:43:51:12:b6:0f:74:7d:a6:01:b9: df:97:33:5d:0d:58:9e:d4:06:27:1d:98:0b:94:e7:b5:9d:4d: 80:6c:7e:a1:13:9f:82:a4:74:cc:5c:dd:4f:15:81:37:0c:92: 67:0b:89:aa:e0:93:28:85:3c:7b:5a:92:e4:a0:41:d4:07:c3: 82:a2:6a:d5:9f:c5:cf:6e:0b:e8:6f:bb:68:92:13:c1:d7:19: 58:51:30:0f:6f:e8:7b:26:c5:c3:53:2a:30:95:2a:f9:8b:b4: 54:46:c7:33:8f:e3:37:91:ac:2b:34:c0:4b:fd:03:2d:f4:3d: a0:55:87:5a:95:55:5f:66:3d:65:66:33:8e:92:f6:21:25:ca: 7b:25:ee:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LBHCmT3KZQx10oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk OWU2MDRiMTMtY2VlMC00YTM4LWE1MDctNzc0Yzg3M2JjZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGgJy6RNOPApgrNR9VELxptkMCoCOkl3YJq 7VUtSFFESBDEjteGJIYpqNJb+FaetkydfA2wCtdilBmGxlsdxIOUoxBVFM8gfg1C imtOpMwSODuRaXWAaorAcFbKRtDBuflYWrEyEAeF8Sftx6HqWuPIdKoj95c0G170 UFWPAO2b4Bf/3iI+Zf3kjeSUJQilJ6bsij+zpV2GRhZ524C02b3wB8cPuSfj75SB DFUHJoX4PJo0qBdn8SjWAXlLfUd2n8Z7DbO9FKYjmLRlM8ywwgKQRsb2bGSPX2M7 6Vv3Veeov6o4LY/OIiMMR0eFeWeOUBcryfgF8D1UqlNEZhwobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE65eOSR+e5AF3A5je1YQXe5L/DVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZTRhOWRhZWItMTZiZC0z YzMwLWFkNjctN2I3NDVmZmI5ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0X5m/Cl5QoR7wUOF5tvHTNNT9CIXGTc14HE8irj1oG/v48JbBMxdXK AHNcB1fnMszFhTGhGkNNWY1HrGvLt/EzSkjAHbdYS8JwQt22QwQ52/5DVOq3NNeP r61g8V+zrpSUY4p2GvmRToZxFsR2OypGBd2TQ1EStg90faYBud+XM10NWJ7UBicd mAuU57WdTYBsfqETn4KkdMxc3U8VgTcMkmcLiargkyiFPHtakuSgQdQHw4KiatWf xc9uC+hvu2iSE8HXGVhRMA9v6HsmxcNTKjCVKvmLtFRGxzOP4zeRrCs0wEv9Ay30 PaBVh1qVVV9mPWVmM46S9iElynsl7tA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org