$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa File: a903e824-1b66-364f-8ea4-9393ef2de488.roa (raw, json) Hash identifier: kI9TiW6xhQ2v2lBVE7Vm/YX3WiJ5oBc5R/Z+/G5Bep4= Subject key identifier: 3B:5B:04:9C:7F:DE:32:79:06:D3:6F:05:15:76:AE:57:61:38:03:DE Certificate issuer: /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Certificate serial: 010D0C9F4328584782F0FACC3471FA1ED71FCD20 Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa Signing time: Sat 12 Oct 2024 01:00:32 +0000 ROA not before: Sat 12 Oct 2024 01:00:32 +0000 ROA not after: Fri 10 Jan 2025 02:00:32 +0000 asID: 198949 IP address blocks: 192.245.221.0/24 maxlen: 24 192.245.222.0/23 maxlen: 24 192.245.224.0/24 maxlen: 24 199.33.130.0/23 maxlen: 24 199.33.132.0/23 maxlen: 24 199.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:f0:fa:cc:34:71:fa:1e:d7:1f:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2 Validity Not Before: Oct 12 01:00:32 2024 GMT Not After : Jan 10 02:00:32 2025 GMT Subject: CN=1811f198-50e6-4dcc-9e46-71cc7c963de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:3f:f2:1a:82:36:28:2f:9a:bf:64:43:99: f0:d1:a3:8f:9c:68:e8:7c:be:ad:8d:b0:24:1f:7e: b4:43:85:93:c5:24:93:d3:78:f5:c8:9e:6f:f9:b2: 64:24:e6:19:eb:ec:8a:67:2f:cf:9e:a5:ef:d7:a8: aa:04:80:07:25:7d:d3:c9:63:ef:2c:be:ee:f5:24: 07:3b:34:3a:65:f6:9b:17:30:8a:32:0b:d2:9a:f4: e6:c4:3b:98:01:a3:da:8c:f3:58:a7:b1:98:49:7d: de:89:b6:ee:c2:40:94:ce:8a:4c:37:91:1d:c8:cb: fe:18:39:5e:78:b1:6e:11:25:d6:3d:e9:10:a4:25: 16:fd:01:da:01:f7:9e:5b:76:86:22:cc:6b:8c:3b: b4:3d:77:6d:28:22:27:eb:36:71:26:2c:e4:8f:31: 89:aa:e7:ad:83:37:9a:1b:6c:9a:9d:91:b7:b7:b8: 5f:cf:c5:a8:43:c6:55:66:b6:f3:96:0e:f4:85:9d: 48:fd:13:3e:c5:dc:97:d8:08:a9:61:65:8d:a9:56: f7:2d:ba:85:11:48:10:48:b5:37:3c:b3:4f:36:de: 2c:77:10:f1:75:ba:22:31:76:38:4c:cb:a2:04:ab: 37:ca:13:cd:6a:93:71:09:a4:0c:0b:09:f8:44:ec: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:04:9C:7F:DE:32:79:06:D3:6F:05:15:76:AE:57:61:38:03:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/a903e824-1b66-364f-8ea4-9393ef2de488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl X509v3 Authority Key Identifier: keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.221.0-192.245.224.255 199.33.130.0-199.33.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:30:4d:e9:cb:66:92:77:6a:f0:d2:2f:7c:c9:be:5e:a9: 78:e7:7e:9a:ef:de:45:a3:81:46:dc:b3:ac:6d:43:7d:dd:ed: ac:75:02:dc:5c:a5:cc:94:c3:27:18:b9:b0:bc:ff:08:94:a1: 72:0d:51:7c:d8:53:63:2a:82:63:22:97:d2:96:dd:5b:a1:7d: 3b:79:98:c9:f0:d3:b0:5c:e4:5d:b8:db:90:53:2a:5b:10:32: c9:03:ce:71:03:95:79:49:39:ba:bb:42:8a:4c:9e:db:45:6f: c8:7d:12:c3:21:17:d1:63:86:cc:b7:0e:1a:eb:66:12:9f:38: 66:e2:b4:8d:13:29:9a:92:7d:30:aa:0d:e2:64:28:6e:ff:c0: 5d:63:36:07:fb:24:7f:cb:d7:62:28:29:56:ec:75:4d:cd:65: 87:52:ad:cb:dc:93:18:22:ad:63:e3:47:10:23:c2:5d:2c:e6: 8e:0d:77:5c:4e:96:42:7c:47:b6:c3:03:94:0c:25:06:38:d2: 29:7c:e5:9c:e5:dd:85:b2:4b:62:90:a0:ab:c5:4d:bd:55:ad: c5:36:22:67:30:79:c8:31:91:89:9c:3a:86:37:67:ad:4b:e8: f9:3b:1c:27:93:ee:9a:f3:b9:90:b5:05:ef:20:2d:2f:38:b0: 29:6a:b9:4d -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEeC8PrMNHH6HtcfzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q1NGU1YmItMzBjZC00NjBhLWEzYWUtNGFiODNjMmY2 MmEyMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk MTgxMWYxOTgtNTBlNi00ZGNjLTllNDYtNzFjYzdjOTYzZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGU/8hqCNigvmr9kQ5nw0aOPnGjofL6tjbAk H360Q4WTxSST03j1yJ5v+bJkJOYZ6+yKZy/PnqXv16iqBIAHJX3TyWPvLL7u9SQH OzQ6ZfabFzCKMgvSmvTmxDuYAaPajPNYp7GYSX3eibbuwkCUzopMN5EdyMv+GDle eLFuESXWPekQpCUW/QHaAfeeW3aGIsxrjDu0PXdtKCIn6zZxJizkjzGJquetgzea G2yanZG3t7hfz8WoQ8ZVZrbzlg70hZ1I/RM+xdyX2AipYWWNqVb3LbqFEUgQSLU3 PLNPNt4sdxDxdboiMXY4TMuiBKs3yhPNapNxCaQMCwn4ROwlbwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDtbBJx/3jJ5BtNvBRV2rldhOAPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0 ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4M2MyZjYyYTIvYTkwM2U4MjQtMWI2Ni0z NjRmLThlYTQtOTM5M2VmMmRlNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2Q1NGU1YmItMzBjZC00NjBhLWEz YWUtNGFiODNjMmY2MmEyL2NkNTRlNWJiLTMwY2QtNDYwYS1hM2FlLTRhYjgzYzJm NjJhMi5jcmwwHwYDVR0jBBgwFoAUDLC//MqdO5Z3qxRusYBcCS+cp0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDU0ZTViYi0zMGNkLTQ2MGEtYTNhZS00YWI4 M2MyZjYyYTIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADA9d0D BADA9eAwDAMEAcchggMEAMchhjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBISjBN6ctmkndq8NIvfMm+Xql4 536a795Fo4FG3LOsbUN93e2sdQLcXKXMlMMnGLmwvP8IlKFyDVF82FNjKoJjIpfS lt1boX07eZjJ8NOwXORduNuQUypbEDLJA85xA5V5STm6u0KKTJ7bRW/IfRLDIRfR Y4bMtw4a62YSnzhm4rSNEymakn0wqg3iZChu/8BdYzYH+yR/y9diKClW7HVNzWWH Uq3L3JMYIq1j40cQI8JdLOaODXdcTpZCfEe2wwOUDCUGONIpfOWc5d2FsktikKCr xU29Va3FNiJnMHnIMZGJnDqGN2etS+j5Oxwnk+6a87mQtQXvIC0vOLAparlN -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org