$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa File: b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa (raw, json) Hash identifier: LkdD0L3jHvX9t6yKvE2ewipO3MfRdB+KQVhkdkTVBEE= Subject key identifier: 89:A5:7F:F4:B4:EB:A4:25:84:AA:6D:56:CB:8E:9D:ED:7E:F8:CB:68 Certificate issuer: /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Certificate serial: 010D0C9F43285847BAC6AAD37883F84CBACE7480 Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 396279 IP address blocks: 172.83.3.0/24 maxlen: 24 2620:12f:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:aa:d3:78:83:f8:4c:ba:ce:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=badea1cc-bf37-432d-842f-4febb8b57c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:93:1b:dc:92:45:71:7f:4a:87:26:fc:d9: 41:c3:57:dc:36:d2:2c:73:2d:90:00:01:eb:c1:84: c4:f9:af:92:fb:3f:18:95:b6:be:60:d0:00:6e:5f: f0:e4:dd:fb:5f:06:d1:99:09:5a:1f:24:30:8d:18: 72:9c:3d:d9:95:dd:4d:76:dd:e4:67:75:d9:f4:a1: 4f:31:2b:7d:55:e8:62:b4:e4:82:72:8a:39:e9:f4: f1:fe:3b:ef:39:66:77:05:9d:e9:03:37:42:a5:eb: b3:55:5f:1d:19:dc:b9:90:e7:bb:21:8f:b8:93:1b: 30:2f:6d:02:60:c2:03:73:40:51:da:5d:1c:e0:48: ae:48:0e:be:8a:45:07:58:3f:51:e5:03:c6:79:c1: 44:c5:5a:79:03:cd:bf:aa:2b:70:f0:7e:04:c6:fd: b1:7d:55:6e:5f:55:57:a3:5f:c3:25:06:03:47:bd: 76:7b:11:de:81:fa:89:93:30:65:3d:dd:cd:2a:b1: 29:20:42:c8:3b:b2:16:f5:c6:06:ea:45:f5:ff:ba: b6:de:fe:2a:52:3d:6b:31:47:fb:0c:0a:6d:4a:8c: 7c:1d:5b:84:d3:49:7a:79:d7:aa:f9:eb:2d:4b:17: d8:87:13:e4:e6:d5:fd:e3:d9:25:31:f9:fd:07:11: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:7F:F4:B4:EB:A4:25:84:AA:6D:56:CB:8E:9D:ED:7E:F8:CB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl X509v3 Authority Key Identifier: keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer sbgp-ipAddrBlock: critical IPv4: 172.83.3.0/24 IPv6: 2620:12f:100f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d0:d7:cc:15:aa:6d:e4:95:28:cc:ab:df:d3:b7:7a:9d:1f: df:51:e7:1f:53:98:83:b3:eb:41:06:9c:1e:bf:4c:a6:02:66: 9e:93:f1:63:54:8f:65:b4:15:bc:d9:31:2b:28:df:6e:eb:43: 9a:03:99:d4:7a:e6:90:21:9b:6d:6e:b0:a6:50:1a:26:86:fe: 7a:1f:9f:4b:97:9c:b1:9c:ad:37:c2:a9:3e:15:01:43:70:cf: e3:44:67:f2:87:48:da:7b:3d:23:46:1f:ed:b3:16:84:57:65: da:e4:b3:1c:3e:00:d8:96:fd:0e:7b:6c:ef:75:ac:b8:4e:5d: 77:7b:fe:ee:db:38:fa:38:1c:c7:58:b5:b0:4c:53:81:52:8d: cd:e8:f2:9c:b7:ed:5e:04:b0:fa:47:28:a2:f2:d0:98:24:a7: 72:74:1c:e8:3d:ec:62:63:92:9b:0e:97:6f:a1:68:6c:f4:dd: e6:82:12:a2:29:e6:d5:f2:79:54:72:0c:3c:f0:e3:9b:f1:ba: ca:61:d2:00:84:2f:fd:8c:d3:32:97:34:be:1b:e4:67:1a:67: 9c:28:10:c5:72:ae:88:2f:71:c4:3f:5d:79:aa:d3:27:95:02: ca:e1:2a:2e:66:50:57:70:41:f0:9a:6c:ab:08:0b:92:7d:d7: 8a:39:e7:8a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEe6xqrTeIP4TLrOdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlhMzhhYTktZWVhOS00ZGEzLTljN2EtOWVkMWMyMzQw YjgzMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YmFkZWExY2MtYmYzNy00MzJkLTg0MmYtNGZlYmI4YjU3YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCWTG9ySRXF/Socm/NlBw1fcNtIscy2QAAHr wYTE+a+S+z8Ylba+YNAAbl/w5N37XwbRmQlaHyQwjRhynD3Zld1Ndt3kZ3XZ9KFP MSt9VehitOSCcoo56fTx/jvvOWZ3BZ3pAzdCpeuzVV8dGdy5kOe7IY+4kxswL20C YMIDc0BR2l0c4EiuSA6+ikUHWD9R5QPGecFExVp5A82/qitw8H4Exv2xfVVuX1VX o1/DJQYDR712exHegfqJkzBlPd3NKrEpIELIO7IW9cYG6kX1/7q23v4qUj1rMUf7 DAptSox8HVuE00l6edeq+estSxfYhxPk5tX949klMfn9BxG7WwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFImlf/S066QlhKptVsuOne1++MtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEz OGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIzNDBiODMvYjRhYjE2YmEtN2M4YS0z Njc4LWI2NTYtNmQyYzM4ZWNmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlhMzhhYTktZWVhOS00ZGEzLTlj N2EtOWVkMWMyMzQwYjgzLzk5YTM4YWE5LWVlYTktNGRhMy05YzdhLTllZDFjMjM0 MGI4My5jcmwwHwYDVR0jBBgwFoAUprX8ebmAJVcnQICNntPieS8xdfEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQx YzIzNDBiODMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQArFMDMA8E AgACMAkDBwAmIAEvEA8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABtDXzBWqbeSVKMyr39O3ep0f31HnH1OY g7PrQQacHr9MpgJmnpPxY1SPZbQVvNkxKyjfbutDmgOZ1HrmkCGbbW6wplAaJob+ eh+fS5ecsZytN8KpPhUBQ3DP40Rn8odI2ns9I0Yf7bMWhFdl2uSzHD4A2Jb9Dnts 73WsuE5dd3v+7ts4+jgcx1i1sExTgVKNzejynLftXgSw+kcoovLQmCSncnQc6D3s YmOSmw6Xb6FobPTd5oISoinm1fJ5VHIMPPDjm/G6ymHSAIQv/YzTMpc0vhvkZxpn nCgQxXKuiC9xxD9dearTJ5UCyuEqLmZQV3BB8JpsqwgLkn3Xijnnig== -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org