$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa File: a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa (raw, json) Hash identifier: l9gNgzjMWS9UUkxD3/TiSh7Z8dM6DpBF/k/5JvtPDrI= Subject key identifier: 29:B3:01:D7:28:86:2D:43:A0:59:15:8C:5B:97:29:68:CD:E8:D3:86 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847DAFA3F7F3B24D32B6D8B97A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa Signing time: Tue 12 Nov 2024 13:50:23 +0000 ROA not before: Tue 12 Nov 2024 13:50:23 +0000 ROA not after: Mon 10 Feb 2025 13:50:23 +0000 asID: 3360 IP address blocks: 192.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:fa:3f:7f:3b:24:d3:2b:6d:8b:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 13:50:23 2024 GMT Not After : Feb 10 13:50:23 2025 GMT Subject: CN=9f901ac8-48cf-4e0a-8d2e-f99687c9eec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:5a:dc:8b:2c:0e:64:62:68:0a:60:58:3d: ed:88:83:a9:f1:26:76:20:bc:40:20:fb:b0:a1:5f: 9b:6c:2f:2f:26:33:b8:60:46:de:c9:2c:6b:d2:b5: 37:27:c1:fb:3c:f4:72:78:6a:23:22:08:d5:56:23: 07:0c:22:9b:2f:e9:42:2a:54:79:55:5b:68:5e:13: a0:08:44:d7:9e:14:df:e7:f6:05:1f:29:ed:89:0f: ae:03:88:fa:c2:d4:98:6e:52:e0:ea:b1:ae:3b:8d: 13:c4:0a:6e:54:0b:a3:2e:59:50:3a:f0:dc:e0:da: 93:e1:90:9a:43:35:dd:67:84:c1:29:18:6d:b4:3a: 7d:2d:c4:bf:6f:3e:5d:04:5c:79:58:1b:3e:df:1a: 60:ed:8f:41:21:66:7d:6e:ce:bf:bc:24:2f:dd:b5: ad:db:7a:63:68:e5:a3:a1:7f:1e:54:05:89:de:7c: 9d:cb:fa:02:3a:3f:e9:48:59:fd:3b:fa:46:05:13: 31:c4:ba:48:19:bd:00:76:56:93:9d:98:25:48:59: 1b:01:68:7f:01:4d:60:5c:f6:97:66:bc:78:15:81: 23:92:62:50:28:cb:77:59:e5:ca:fe:45:90:b4:3b: ff:de:32:fd:4c:5d:fe:ec:a6:0f:78:87:96:25:c2: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B3:01:D7:28:86:2D:43:A0:59:15:8C:5B:97:29:68:CD:E8:D3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a138f2ed-6160-3698-8b3c-5f44e59b68ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c4:2f:50:c8:47:9c:91:80:07:01:09:f7:32:ff:68:a9:0c: 58:c3:b2:f7:0f:91:0e:70:69:cc:68:75:d3:dd:85:9c:cd:96: 3b:28:00:e8:24:07:c0:83:3a:eb:17:7e:63:40:95:9a:95:e0: 67:db:c8:1c:3b:2a:ee:a5:eb:b8:83:c0:7b:57:09:24:a6:a4: 0a:1e:2b:89:09:46:9f:be:54:4e:35:c4:7c:af:88:23:f5:bc: 25:b3:3f:df:34:e2:cd:f2:9a:24:2d:7d:ae:a0:60:a6:0c:77: e5:59:22:55:8f:ad:05:43:99:b8:79:4a:99:0a:64:fb:4e:91: 56:17:31:47:76:fc:09:57:f1:cb:ac:1f:6d:e0:4e:9a:8d:9f: 67:33:0e:c6:3a:58:35:e8:68:28:d0:58:d9:2e:f7:16:a2:44: 84:75:70:66:2d:e0:32:69:9f:8a:9f:a8:55:8d:4a:7d:76:d2: 0e:f8:68:4b:32:f3:f0:bb:90:04:4b:97:ad:70:31:9c:11:b9: c3:74:58:1e:d5:65:5f:19:53:fe:96:f5:6b:93:ea:e8:fe:23: 8b:63:76:1f:6e:ac:6d:c2:0b:c5:4e:0e:3e:30:eb:1b:79:ed: ab:c8:be:a7:b6:05:73:43:cd:17:d4:ad:17:33:2a:61:60:40: d6:fc:e0:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa+j9/OyTTK22Ll6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTExMjEzNTAyM1oXDTI1MDIxMDEzNTAyM1owLzEtMCsGA1UEAxMk OWY5MDFhYzgtNDhjZi00ZTBhLThkMmUtZjk5Njg3YzllZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy5a3IssDmRiaApgWD3tiIOp8SZ2ILxAIPuw oV+bbC8vJjO4YEbeySxr0rU3J8H7PPRyeGojIgjVViMHDCKbL+lCKlR5VVtoXhOg CETXnhTf5/YFHyntiQ+uA4j6wtSYblLg6rGuO40TxApuVAujLllQOvDc4NqT4ZCa QzXdZ4TBKRhttDp9LcS/bz5dBFx5WBs+3xpg7Y9BIWZ9bs6/vCQv3bWt23pjaOWj oX8eVAWJ3nydy/oCOj/pSFn9O/pGBRMxxLpIGb0AdlaTnZglSFkbAWh/AU1gXPaX Zrx4FYEjkmJQKMt3WeXK/kWQtDv/3jL9TF3+7KYPeIeWJcLgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmzAdcohi1DoFkVjFuXKWjN6NOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTEzOGYyZWQtNjE2MC0z Njk4LThiM2MtNWY0NGU1OWI2OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7EL1DIR5yRgAcBCfcy/2ipDFjDsvcPkQ5wacxoddPdhZzNljsoAOgk B8CDOusXfmNAlZqV4GfbyBw7Ku6l67iDwHtXCSSmpAoeK4kJRp++VE41xHyviCP1 vCWzP9804s3ymiQtfa6gYKYMd+VZIlWPrQVDmbh5SpkKZPtOkVYXMUd2/AlX8cus H23gTpqNn2czDsY6WDXoaCjQWNku9xaiRIR1cGYt4DJpn4qfqFWNSn120g74aEsy 8/C7kARLl61wMZwRucN0WB7VZV8ZU/6W9WuT6uj+I4tjdh9urG3CC8VODj4w6xt5 7avIvqe2BXNDzRfUrRczKmFgQNb84Ds= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:35 2024 by rpki-client on console-ams.rpki-client.org