$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json) Hash identifier: dF9jmYFl7LuVyTfTh77YFbk4jj5q8uSBUX8p2GKa3jI= Subject key identifier: 69:59:EC:6A:69:27:E7:7A:5F:F7:74:3D:FD:F9:71:67:44:30:64:F9 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F32AB5076662FE82BA6F00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa Signing time: Fri 15 Nov 2024 01:46:47 +0000 ROA not before: Fri 15 Nov 2024 01:46:47 +0000 ROA not after: Thu 13 Feb 2025 01:46:47 +0000 asID: 931 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f3:2a:b5:07:66:62:fe:82:ba:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:46:47 2024 GMT Not After : Feb 13 01:46:47 2025 GMT Subject: CN=c7f5ad92-d9f3-41b9-934e-08873ab946e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:62:e9:42:0d:3b:13:52:25:b0:55:5c:f6: 59:b8:36:23:e2:ac:08:33:ec:14:62:1a:f9:a2:93: f3:33:c2:f7:38:56:ce:96:d1:a2:4d:cc:2f:4f:29: 15:49:9b:89:79:2d:5b:d4:7e:ef:90:b9:c3:ed:64: cc:b3:07:5b:f8:23:e2:49:46:c4:37:34:14:30:ef: 56:f3:ad:a4:f3:bf:1a:bc:ac:17:61:42:78:f5:0f: 7f:0f:09:d7:24:c5:d4:bb:54:ee:cc:d6:f1:ce:0b: 96:5b:78:dc:60:d4:ef:77:46:09:75:ed:3e:4e:bb: ec:f5:53:e1:b9:6a:45:9e:e6:d4:ac:36:78:94:ed: b1:95:cd:a7:db:19:86:91:a5:27:cf:53:07:96:f6: a4:82:d2:e1:eb:50:a3:38:c3:ca:60:28:57:b2:91: 0b:a4:30:a4:b1:c8:c6:0d:8a:7a:92:67:ea:fe:8e: 9d:82:fd:a5:c8:65:33:16:1a:0d:fd:74:c9:ff:0c: 38:ed:a1:46:99:60:77:65:6c:7c:4e:c1:28:9f:b5: 9d:9c:e2:e3:63:cd:e1:6f:56:82:6b:58:8c:38:82: b9:0e:7e:20:9a:10:c5:0f:c2:ff:9c:09:e2:d1:f9: 1b:30:19:9c:28:f6:f2:52:06:f9:51:5c:77:43:38: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:59:EC:6A:69:27:E7:7A:5F:F7:74:3D:FD:F9:71:67:44:30:64:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:69:b0:af:ef:1d:af:0e:ee:f5:ad:36:74:ed:a8:2e:99:72: d9:e0:bb:62:d2:4f:1f:25:22:d8:b6:d0:8d:02:c5:08:63:ce: 8a:20:7e:4c:f2:53:ce:10:a0:cc:27:76:23:7e:2e:5a:3a:6c: a6:9c:8e:96:28:fb:f2:af:b2:8e:5d:ed:7e:6d:86:00:7a:1d: ec:ae:fa:63:ff:1f:b3:cb:44:3a:0b:09:cc:9f:a0:62:33:cc: 73:e8:74:bd:39:c2:32:6f:f8:cf:23:1e:61:87:e0:ab:e7:73: bb:a3:f9:58:af:ec:cd:d3:75:cd:15:21:bc:c1:7e:97:a5:10: 00:9a:81:c6:89:ec:57:00:d8:22:b2:b5:6e:ab:d1:3e:bd:3a: 7e:24:af:13:f9:ff:01:78:8f:4f:52:de:e0:ce:3f:96:62:84: 29:99:72:5d:68:39:26:1b:c4:d7:1f:0d:fe:f5:33:3a:57:af: 53:42:67:fa:bc:3c:6c:74:b5:8d:78:94:df:f7:4f:8c:de:3c: df:ad:3a:95:24:ac:f4:4b:9c:d5:8f:17:5f:8c:5d:28:92:a9: 40:64:b3:f7:7c:d6:ed:04:44:d3:e9:7f:7b:8c:59:57:82:7f: 78:cd:4d:e1:6d:d2:25:64:61:0d:13:36:2c:31:bf:2f:9c:7b: 12:12:5d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh8yq1B2Zi/oK6bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNDY0N1oXDTI1MDIxMzAxNDY0N1owLzEtMCsGA1UEAxMk YzdmNWFkOTItZDlmMy00MWI5LTkzNGUtMDg4NzNhYjk0NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSxi6UINOxNSJbBVXPZZuDYj4qwIM+wUYhr5 opPzM8L3OFbOltGiTcwvTykVSZuJeS1b1H7vkLnD7WTMswdb+CPiSUbENzQUMO9W 862k878avKwXYUJ49Q9/DwnXJMXUu1TuzNbxzguWW3jcYNTvd0YJde0+Trvs9VPh uWpFnubUrDZ4lO2xlc2n2xmGkaUnz1MHlvakgtLh61CjOMPKYChXspELpDCkscjG DYp6kmfq/o6dgv2lyGUzFhoN/XTJ/ww47aFGmWB3ZWx8TsEon7WdnOLjY83hb1aC a1iMOIK5Dn4gmhDFD8L/nAni0fkbMBmcKPbyUgb5UVx3QziOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlZ7GppJ+d6X/d0Pf35cWdEMGT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJpsK/vHa8O7vWtNnTtqC6Zctngu2LSTx8lIti20I0CxQhjzoogfkzy U84QoMwndiN+Llo6bKacjpYo+/Kvso5d7X5thgB6Heyu+mP/H7PLRDoLCcyfoGIz zHPodL05wjJv+M8jHmGH4Kvnc7uj+Viv7M3Tdc0VIbzBfpelEACagcaJ7FcA2CKy tW6r0T69On4krxP5/wF4j09S3uDOP5ZihCmZcl1oOSYbxNcfDf71MzpXr1NCZ/q8 PGx0tY14lN/3T4zePN+tOpUkrPRLnNWPF1+MXSiSqUBks/d81u0ERNPpf3uMWVeC f3jNTeFt0iVkYQ0TNiwxvy+cexISXQU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org