$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: qc8K/2jbKtG3A21waCRF9K7bxRDk0bVk3B4pAVFeLJw= Subject key identifier: 1E:28:DE:66:18:FC:FC:3B:96:EC:BC:A5:30:27:C3:CA:07:42:A6:45 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F43285847E78F65BD562D0D504E41C880 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:65:bd:56:2d:0d:50:4e:41:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=28404f56-67fd-41ad-9c78-d1e630469606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:a7:86:b4:39:25:3d:78:c8:27:29:4d:1b: 95:c9:aa:10:c1:1a:15:a7:d2:66:36:29:97:7b:2a: 28:61:c3:eb:83:73:a4:09:0a:7a:04:2c:9f:87:68: 78:4b:6d:55:a8:15:ab:98:50:29:26:ef:c3:26:da: cf:80:97:e6:cd:b4:a3:9b:58:36:75:c7:40:d7:1f: f4:be:dd:8c:a6:a1:c2:2b:f2:8e:c3:44:30:cb:6f: 28:a3:e3:2d:27:8b:38:fa:55:89:71:40:c0:96:7e: bc:6d:ed:a3:73:12:cf:82:87:07:76:d1:42:17:b8: 73:9b:c4:75:cd:2b:2f:ff:eb:0e:b2:8b:7c:f3:24: 65:bb:b8:bd:4a:ec:d9:fe:24:ee:72:55:d5:2b:21: 55:72:f4:67:f3:59:70:b0:fb:03:fa:6c:54:6c:26: 5f:31:55:5a:93:0a:3a:59:00:1f:4d:5e:ac:a9:e7: a4:de:9b:d1:a6:1d:77:b0:bc:cf:14:2c:be:af:32: 5d:ce:59:57:cc:25:c1:b8:5a:4a:b8:f7:61:b1:2f: 03:f3:39:19:29:41:bf:0a:a4:7b:34:c1:12:0c:9e: 19:5d:98:b6:cd:67:93:b6:35:c3:ed:b8:c7:d0:83: 95:b7:cd:f1:d9:9b:f5:f9:df:75:6e:31:a9:1b:a7: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:DE:66:18:FC:FC:3B:96:EC:BC:A5:30:27:C3:CA:07:42:A6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ba:53:ec:78:7a:c9:26:4c:35:e5:36:4a:e8:18:e3:0c:5b: 93:2d:48:7e:ad:bb:1f:87:06:68:a9:3b:32:b8:e5:5f:9f:d1: 93:96:38:d0:d5:7c:f6:f8:23:18:1c:ab:90:85:33:fd:ed:e0: 56:e0:14:d4:da:a3:5b:52:dc:bc:10:0c:28:9c:0a:e4:d7:90: 5f:96:25:3e:52:96:bc:e6:f1:1a:1b:1d:a2:c6:b5:05:c0:0c: 47:52:e0:2b:21:32:b0:a8:40:03:16:82:48:77:ed:99:d2:cc: 25:85:fc:55:5a:34:ed:f7:aa:c1:cc:8e:f1:3c:0a:e0:de:3a: 7e:f2:f6:26:0f:44:3a:e5:bc:3a:47:2a:53:b6:56:a3:7d:d5: 4e:10:93:0a:d2:9a:f6:e8:f6:64:a5:8e:80:00:2c:43:04:75: 3a:76:fb:31:b7:6e:35:53:8c:cb:31:a8:f5:db:fe:46:20:43: 2f:fc:90:88:7f:67:c9:a1:0e:bd:3d:b3:77:f0:b4:3f:f8:87: 02:4c:99:4a:d1:83:82:20:cd:6b:a5:7a:03:f3:5c:1f:9a:96: 30:cf:23:4f:cc:88:d6:d8:b9:8c:b8:bf:f3:f6:c5:ea:76:6a: 4c:f0:e0:a8:8a:f9:75:58:db:5d:1c:62:b7:8f:3e:1b:e2:7a: 64:4a:8b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2W9Vi0NUE5ByIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk Mjg0MDRmNTYtNjdmZC00MWFkLTljNzgtZDFlNjMwNDY5NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGWnhrQ5JT14yCcpTRuVyaoQwRoVp9JmNimX eyooYcPrg3OkCQp6BCyfh2h4S21VqBWrmFApJu/DJtrPgJfmzbSjm1g2dcdA1x/0 vt2MpqHCK/KOw0Qwy28oo+MtJ4s4+lWJcUDAln68be2jcxLPgocHdtFCF7hzm8R1 zSsv/+sOsot88yRlu7i9SuzZ/iTuclXVKyFVcvRn81lwsPsD+mxUbCZfMVVakwo6 WQAfTV6sqeek3pvRph13sLzPFCy+rzJdzllXzCXBuFpKuPdhsS8D8zkZKUG/CqR7 NMESDJ4ZXZi2zWeTtjXD7bjH0IOVt83x2Zv1+d91bjGpG6c4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4o3mYY/Pw7luy8pTAnw8oHQqZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA26U+x4eskmTDXlNkroGOMMW5MtSH6tux+HBmipOzK45V+f0ZOWONDV fPb4Ixgcq5CFM/3t4FbgFNTao1tS3LwQDCicCuTXkF+WJT5Slrzm8RobHaLGtQXA DEdS4CshMrCoQAMWgkh37ZnSzCWF/FVaNO33qsHMjvE8CuDeOn7y9iYPRDrlvDpH KlO2VqN91U4QkwrSmvbo9mSljoAALEMEdTp2+zG3bjVTjMsxqPXb/kYgQy/8kIh/ Z8mhDr09s3fwtD/4hwJMmUrRg4IgzWulegPzXB+aljDPI0/MiNbYuYy4v/P2xep2 akzw4KiK+XVY210cYrePPhviemRKi4o= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:42 2024 by rpki-client on console-ams.rpki-client.org