$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa File: e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa (raw, json) Hash identifier: Gz8A7JeIKlVMP1ddefB8JzRFDtVd85aIqwOVF1WLE7c= Subject key identifier: 9E:4B:48:77:36:35:83:EA:97:55:88:12:A0:EC:FB:0E:F8:30:C8:DE Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285846DC0A25C80946977A28C70EC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa Signing time: Tue 13 Aug 2024 06:11:18 +0000 ROA not before: Tue 13 Aug 2024 06:11:18 +0000 ROA not after: Mon 11 Nov 2024 07:11:18 +0000 asID: 8100 IP address blocks: 192.119.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:dc:0a:25:c8:09:46:97:7a:28:c7:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 13 06:11:18 2024 GMT Not After : Nov 11 07:11:18 2024 GMT Subject: CN=92f2faef-7903-4f6b-91e6-56d633cc36be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:23:c7:b1:8f:ce:5a:02:b4:e0:9f:df:0d: 8b:59:f5:d1:9e:2e:ce:3d:58:bb:39:7e:c6:c8:37: c9:9a:c5:c7:4c:c0:0d:55:57:85:c4:3f:51:87:68: 89:6a:fb:8f:2f:ce:25:d0:18:a3:b2:63:de:45:c6: dd:90:4e:0b:a6:bf:ae:7d:8b:99:4d:0d:27:f5:fe: ea:07:69:8d:df:4f:54:c5:87:a8:b3:4e:52:70:27: 67:b5:45:a0:f6:b1:8f:47:2d:a5:77:54:4e:43:3f: e3:e2:82:4a:39:c3:f9:eb:57:fd:c7:98:f0:b5:48: dc:5e:4b:54:66:31:cf:66:c3:d4:fb:71:9c:35:10: 12:7a:72:35:ea:ed:02:09:f5:39:62:21:79:aa:66: 59:96:43:ca:9d:cb:64:31:bf:8f:1e:75:b4:46:60: d6:f3:27:b4:e3:2c:66:35:f2:3b:cd:b7:ce:80:b7: 1f:f4:0e:92:5c:dc:df:cc:48:df:a5:07:10:8d:04: e7:d8:c7:e0:3f:0b:43:3f:84:3b:50:73:89:ce:04: ed:b7:7d:31:ae:04:d5:67:87:47:2f:d2:26:8a:22: e3:22:10:e7:8a:af:82:e5:d2:91:30:8e:22:9c:27: f6:8c:9d:ac:87:9d:0e:78:44:dc:70:59:fb:9a:28: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:48:77:36:35:83:EA:97:55:88:12:A0:EC:FB:0E:F8:30:C8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/e4a9daeb-16bd-3c30-ad67-7b745ffb9e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:26:0a:d6:09:aa:e2:30:32:c6:9e:5e:e0:bf:05:03:a6:8a: f0:2d:88:d8:f4:5f:db:b2:5e:3c:a1:c1:d5:b5:14:c9:88:fa: 29:35:55:db:44:a9:42:6f:f4:c5:6a:04:a8:81:3e:0f:28:34: 35:48:c7:b2:93:23:bf:e5:c9:5e:6f:a8:e3:f4:f3:97:66:b4: 51:65:7d:20:c3:5b:de:63:c1:61:8c:a5:f4:d4:05:82:ac:31: 94:10:ff:d5:f9:e0:ee:89:eb:07:ff:41:e9:a6:cf:d9:3e:d7: 94:9c:9c:24:f5:23:df:80:a7:da:aa:1a:8e:f8:69:e4:a9:f0: 64:9e:de:23:29:7b:45:83:ad:de:81:de:06:1c:b9:fa:35:b8: fa:91:38:dc:8d:33:ce:69:42:15:b0:82:bd:98:f5:44:d4:6d: 9a:ee:1a:6c:6c:58:1d:02:d0:f0:54:64:61:d1:a5:51:49:60: c8:bd:ef:7c:fd:2a:f9:78:48:71:96:dd:1c:8e:7a:2b:06:a5: 5f:06:d5:ed:ff:97:94:0b:04:7e:8b:af:aa:a1:52:d0:26:af: c1:a0:c4:8a:1c:f6:b8:c8:7a:c7:4f:0c:80:ea:52:dc:97:3c: 7f:92:aa:26:b1:d7:70:56:5d:1a:6f:a0:20:7e:95:9c:09:f9: 8e:74:3d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbcCiXICUaXeijHDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI0MDgxMzA2MTExOFoXDTI0MTExMTA3MTExOFowLzEtMCsGA1UEAxMk OTJmMmZhZWYtNzkwMy00ZjZiLTkxZTYtNTZkNjMzY2MzNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje0jx7GPzloCtOCf3w2LWfXRni7OPVi7OX7G yDfJmsXHTMANVVeFxD9Rh2iJavuPL84l0BijsmPeRcbdkE4Lpr+ufYuZTQ0n9f7q B2mN309UxYeos05ScCdntUWg9rGPRy2ld1ROQz/j4oJKOcP561f9x5jwtUjcXktU ZjHPZsPU+3GcNRASenI16u0CCfU5YiF5qmZZlkPKnctkMb+PHnW0RmDW8ye04yxm NfI7zbfOgLcf9A6SXNzfzEjfpQcQjQTn2MfgPwtDP4Q7UHOJzgTtt30xrgTVZ4dH L9ImiiLjIhDniq+C5dKRMI4inCf2jJ2sh50OeETccFn7mihmFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5LSHc2NYPql1WIEqDs+w74MMjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZTRhOWRhZWItMTZiZC0z YzMwLWFkNjctN2I3NDVmZmI5ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwmCtYJquIwMsaeXuC/BQOmivAtiNj0X9uyXjyhwdW1FMmI+ik1VdtE qUJv9MVqBKiBPg8oNDVIx7KTI7/lyV5vqOP085dmtFFlfSDDW95jwWGMpfTUBYKs MZQQ/9X54O6J6wf/Qemmz9k+15ScnCT1I9+Ap9qqGo74aeSp8GSe3iMpe0WDrd6B 3gYcufo1uPqRONyNM85pQhWwgr2Y9UTUbZruGmxsWB0C0PBUZGHRpVFJYMi973z9 Kvl4SHGW3RyOeisGpV8G1e3/l5QLBH6Lr6qhUtAmr8GgxIoc9rjIesdPDIDqUtyX PH+Sqiax13BWXRpvoCB+lZwJ+Y50PbE= -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org