$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4f8ef18e-2291-3909-a84a-c6308ff32f54.roa File: 4f8ef18e-2291-3909-a84a-c6308ff32f54.roa (raw, json) Hash identifier: ZPmANJE3j62b74Ppa61q5iCj8ogP+pa193vfQgv3K10= Subject key identifier: C4:CF:CB:5A:1F:1B:5C:92:2B:A0:02:78:99:F4:FB:6B:49:90:5E:2A Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F43285847F527A5D7AB2FED03997F5CE0 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4f8ef18e-2291-3909-a84a-c6308ff32f54.roa Signing time: Thu 21 Nov 2024 22:52:53 +0000 ROA not before: Thu 21 Nov 2024 22:52:53 +0000 ROA not after: Wed 19 Feb 2025 22:52:53 +0000 asID: 401395 IP address blocks: 192.157.36.0/23 maxlen: 24 2602:f7db::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:27:a5:d7:ab:2f:ed:03:99:7f:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Nov 21 22:52:53 2024 GMT Not After : Feb 19 22:52:53 2025 GMT Subject: CN=87bbcee1-ad86-4ded-a04c-bdb6281657f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:89:f9:09:69:46:09:a8:4d:15:97:f5:20: 41:5e:78:83:bf:44:b3:12:25:12:73:85:58:e4:6f: ea:d4:54:fc:c3:3f:ef:48:3b:ff:95:97:28:1b:88: 02:ad:ae:5a:41:67:9a:ce:2a:6d:3f:6d:a8:75:22: 7d:c8:bc:19:26:cf:a9:dc:9c:21:44:82:ed:ff:f2: dc:18:9a:c5:0e:7e:ea:f6:2f:68:c5:b6:b6:46:e9: e1:ef:4e:34:10:bd:25:9b:b8:82:c1:bc:0f:27:23: 63:cd:30:0c:c0:bf:b0:c1:76:76:59:93:7b:64:68: 71:df:91:d1:31:72:56:47:41:81:75:f6:bd:0e:1e: 40:75:38:2e:35:e2:1c:13:05:24:d7:85:12:27:4b: fd:e9:5b:d8:4b:39:a6:b7:40:03:23:db:49:75:73: 01:42:94:23:2c:1f:62:bf:d3:91:73:fd:f2:3d:5b: 2d:84:24:47:09:17:90:42:72:71:d8:0c:16:f6:61: d6:c7:9c:cb:79:5e:8a:35:63:1d:9c:5e:54:75:7d: 42:ad:be:74:e4:e9:37:62:76:7e:d5:42:53:08:b8: 1e:88:ab:4d:fe:66:3d:3b:59:96:e8:a4:9e:ae:42: 50:9c:2a:ba:39:78:08:31:10:be:2e:76:10:39:fd: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:CB:5A:1F:1B:5C:92:2B:A0:02:78:99:F4:FB:6B:49:90:5E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4f8ef18e-2291-3909-a84a-c6308ff32f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 IPv6: 2602:f7db::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4f:48:b2:30:d1:ad:75:75:2c:7a:ae:67:2b:25:ef:b0:32: d2:19:88:7a:b5:9b:b6:d4:4a:55:f1:09:fb:9d:58:9d:b0:76: 78:50:36:72:16:88:39:b2:d5:08:a8:b8:2c:eb:5e:6e:24:b2: 3f:fc:91:9a:74:bf:14:bf:5b:9c:9b:d8:54:6f:d0:1b:75:ba: c7:1e:1c:3b:30:9e:26:90:bb:30:b3:1d:e8:4f:4b:b7:b6:5d: 29:79:f9:7f:ad:dc:7a:03:c8:b0:4b:b1:26:ca:16:26:f9:90: bf:3d:1b:a0:73:40:af:1f:24:53:62:ca:ed:cd:65:bf:e5:e0: ad:a9:88:70:1d:da:e5:37:37:97:37:f7:33:18:3a:18:b9:e1: 9b:07:ae:a4:c7:7e:fd:49:c9:05:93:b7:e1:31:5a:ec:c9:6a: fc:db:b9:da:56:56:86:b5:6b:54:f9:75:e8:45:b4:f4:ae:e7: 29:81:b8:fa:3b:30:d0:2a:95:bf:90:1c:29:bc:21:2e:72:3c: 6d:dc:e6:46:7b:3e:c2:fa:44:e2:b2:cb:5e:2d:71:47:ae:cd: 25:f5:8b:d9:6b:2a:c2:72:43:45:b9:c7:8d:c0:ee:9c:72:40: f3:be:93:f7:e3:66:bc:cd:ec:f9:fc:b2:28:ee:29:11:da:24: fa:27:5c:c3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEf1J6XXqy/tA5l/XOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI0MTEyMTIyNTI1M1oXDTI1MDIxOTIyNTI1M1owLzEtMCsGA1UEAxMk ODdiYmNlZTEtYWQ4Ni00ZGVkLWEwNGMtYmRiNjI4MTY1N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnmJ+QlpRgmoTRWX9SBBXniDv0SzEiUSc4VY 5G/q1FT8wz/vSDv/lZcoG4gCra5aQWeaziptP22odSJ9yLwZJs+p3JwhRILt//Lc GJrFDn7q9i9oxba2Runh7040EL0lm7iCwbwPJyNjzTAMwL+wwXZ2WZN7ZGhx35HR MXJWR0GBdfa9Dh5AdTguNeIcEwUk14USJ0v96VvYSzmmt0ADI9tJdXMBQpQjLB9i v9ORc/3yPVsthCRHCReQQnJx2AwW9mHWx5zLeV6KNWMdnF5UdX1Crb505Ok3YnZ+ 1UJTCLgeiKtN/mY9O1mW6KSerkJQnCq6OXgIMRC+LnYQOf2jIwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMTPy1ofG1ySK6ACeJn0+2tJkF4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvNGY4ZWYxOGUtMjI5MS0z OTA5LWE4NGEtYzYzMDhmZjMyZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwJ0kMA4E AgACMAgDBgAmAvfbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgT0iyMNGtdXUseq5nKyXvsDLSGYh6tZu2 1EpV8Qn7nVidsHZ4UDZyFog5stUIqLgs615uJLI//JGadL8Uv1ucm9hUb9AbdbrH Hhw7MJ4mkLswsx3oT0u3tl0pefl/rdx6A8iwS7EmyhYm+ZC/PRugc0CvHyRTYsrt zWW/5eCtqYhwHdrlNzeXN/czGDoYueGbB66kx379SckFk7fhMVrsyWr827naVlaG tWtU+XXoRbT0rucpgbj6OzDQKpW/kBwpvCEucjxt3OZGez7C+kTissteLXFHrs0l 9YvZayrCckNFuceNwO6cckDzvpP342a8zez5/LIo7ikR2iT6J1zD -----END CERTIFICATE-----Generated at Fri Nov 22 17:26:26 2024 by rpki-client on console-ams.rpki-client.org