$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json) Hash identifier: FdnDe+G8TsuVj1MjApXeylgX86lNbhmGlaBDRnBmPJM= Subject key identifier: BC:92:89:A9:2E:6E:8D:01:37:F1:FE:B8:6C:3B:CF:94:E0:24:D1:A2 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F432858478AD5EEC6157BD8A91DBAE480 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa Signing time: Mon 14 Oct 2024 20:52:33 +0000 ROA not before: Mon 14 Oct 2024 20:52:33 +0000 ROA not after: Sun 12 Jan 2025 21:52:33 +0000 asID: 19782 IP address blocks: 192.200.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8a:d5:ee:c6:15:7b:d8:a9:1d:ba:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Oct 14 20:52:33 2024 GMT Not After : Jan 12 21:52:33 2025 GMT Subject: CN=371daf47-671e-4054-bb24-bfedeb015c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:7c:88:19:00:55:ea:d0:c7:3e:90:44:92: 07:d0:a3:5e:a7:5c:49:a4:99:c9:92:a1:0e:43:c3: 42:0f:6c:02:13:82:4f:46:8b:c7:f6:0a:e7:7d:1b: 7d:f7:e4:19:74:54:60:43:0b:68:9c:05:2e:03:1f: 18:43:75:4b:56:ce:c7:8d:e1:79:49:f6:38:bb:62: 1a:66:fd:2d:08:16:d2:ec:43:0b:df:2f:97:ea:a0: 24:31:c8:9e:b7:c2:8b:a4:d7:db:f9:06:dc:2b:86: c2:30:1a:d0:34:44:4f:2e:58:cf:dd:11:7f:c3:34: a9:ca:75:84:87:72:d9:cf:fb:ab:b6:de:37:c0:d3: be:b5:bb:5b:0f:13:14:29:c6:36:6d:4b:89:22:40: 1a:d5:14:58:45:5a:ea:98:74:4e:70:79:f6:6e:a9: e2:13:e6:79:c9:90:7c:21:ee:2d:09:5b:6c:03:bc: 86:8e:8b:10:79:75:f4:b5:85:1c:ea:e8:36:2a:7f: 4e:08:05:b3:10:af:04:e7:f8:f4:d0:91:ae:52:a4: bd:41:01:36:fd:7d:e9:c2:68:b9:09:8e:97:e9:fd: 2a:c2:e1:9b:3e:00:ef:ec:32:fa:14:14:9d:ce:c4: f2:84:9b:f2:3b:98:1e:1f:5b:dc:4f:de:d2:0a:05: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:89:A9:2E:6E:8D:01:37:F1:FE:B8:6C:3B:CF:94:E0:24:D1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fd:e7:f1:08:07:11:f3:1c:59:1d:91:d3:3a:53:9c:0a:e8: c6:18:e0:d9:f3:70:06:b2:d7:b4:0f:06:c2:cd:d8:6a:33:27: 23:a5:36:45:ca:e9:3b:0c:9a:7e:99:85:81:ea:ff:e8:7e:51: 0f:fa:bd:0f:8d:1a:7f:46:2d:e8:26:fd:63:20:d0:16:3f:ce: 2b:2a:25:4e:b5:cc:5e:5e:8d:18:3d:4a:c6:d2:0b:1a:07:f1: b8:5f:88:93:19:5c:e2:45:27:99:0a:cb:29:68:ed:11:2a:19: db:9d:c3:cd:b0:ae:5c:e0:04:a5:cd:a9:3d:8b:6f:33:6c:ab: b8:29:75:bf:65:e3:f0:de:09:9c:aa:fa:ce:8a:fa:70:3f:f4: 5f:e2:07:89:8e:26:79:e1:9c:13:e5:94:b7:ff:69:1f:99:4e: b7:47:6c:3b:dd:3e:ab:e7:bf:98:4a:d9:8d:52:43:e9:27:c5: 18:af:db:45:73:f0:66:9e:ae:ea:4a:9c:5b:e5:18:cf:91:be: f4:21:34:40:44:94:33:1d:dd:a5:dd:79:ae:3b:ea:a9:47:b9: 1f:cc:df:b8:16:da:4e:10:cb:8e:b6:c7:a6:04:1d:e9:86:5c: 5d:c9:e2:b1:bf:f3:b5:32:92:97:de:11:15:68:07:40:3f:d6: 47:8e:77:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeK1e7GFXvYqR265IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI0MTAxNDIwNTIzM1oXDTI1MDExMjIxNTIzM1owLzEtMCsGA1UEAxMk MzcxZGFmNDctNjcxZS00MDU0LWJiMjQtYmZlZGViMDE1YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yt8iBkAVerQxz6QRJIH0KNep1xJpJnJkqEO Q8NCD2wCE4JPRovH9grnfRt99+QZdFRgQwtonAUuAx8YQ3VLVs7HjeF5SfY4u2Ia Zv0tCBbS7EML3y+X6qAkMciet8KLpNfb+QbcK4bCMBrQNERPLljP3RF/wzSpynWE h3LZz/urtt43wNO+tbtbDxMUKcY2bUuJIkAa1RRYRVrqmHROcHn2bqniE+Z5yZB8 Ie4tCVtsA7yGjosQeXX0tYUc6ug2Kn9OCAWzEK8E5/j00JGuUqS9QQE2/X3pwmi5 CY6X6f0qwuGbPgDv7DL6FBSdzsTyhJvyO5geH1vcT97SCgVMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLySiakubo0BN/H+uGw7z5TgJNGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNWE4YWExMzgtYjQwYS0z ZjhkLTg2MzAtZDI3M2I3YTg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD95/EIBxHzHFkdkdM6U5wK6MYY4NnzcAay17QPBsLN2GozJyOlNkXK 6TsMmn6ZhYHq/+h+UQ/6vQ+NGn9GLegm/WMg0BY/zisqJU61zF5ejRg9SsbSCxoH 8bhfiJMZXOJFJ5kKyylo7REqGdudw82wrlzgBKXNqT2LbzNsq7gpdb9l4/DeCZyq +s6K+nA/9F/iB4mOJnnhnBPllLf/aR+ZTrdHbDvdPqvnv5hK2Y1SQ+knxRiv20Vz 8GaerupKnFvlGM+RvvQhNEBElDMd3aXdea476qlHuR/M37gW2k4Qy462x6YEHemG XF3J4rG/87UykpfeERVoB0A/1keOd+o= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org