$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa File: 068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json) Hash identifier: KmKogUyWhOMpssCHqrN+Z/xBPJVbA9n7Xec/PYk3kks= Subject key identifier: 0A:77:90:41:92:88:C2:6E:94:9D:3B:E6:C5:C6:C4:E1:70:70:EC:C8 Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Certificate serial: 010D0C9F432858472835F8C9E63421995AAD0400 Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa Signing time: Mon 09 Sep 2024 13:00:41 +0000 ROA not before: Mon 09 Sep 2024 13:00:41 +0000 ROA not after: Sun 08 Dec 2024 14:00:41 +0000 asID: 55178 IP address blocks: 192.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:35:f8:c9:e6:34:21:99:5a:ad:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Validity Not Before: Sep 9 13:00:41 2024 GMT Not After : Dec 8 14:00:41 2024 GMT Subject: CN=d22ba493-00f4-4e20-93c5-f91b9a7f4c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:f3:22:ac:20:d1:ba:97:63:66:a4:67:c8: 3e:32:55:78:4f:74:d1:24:73:38:54:04:06:3e:c6: 4d:78:12:2c:52:b2:16:dd:b9:1c:38:83:2d:55:17: 7b:5c:cd:53:a6:a0:5e:54:dd:7d:6e:8b:c6:77:65: 4d:8a:59:71:1e:eb:13:9a:68:9b:8a:88:c7:0e:be: af:24:ce:59:04:a1:91:56:3a:43:b8:2d:66:83:93: 5c:2f:7b:b7:c9:65:05:8a:81:79:45:54:34:9a:63: b0:3e:3f:ab:f4:68:57:03:d0:5f:52:2e:92:92:b1: 11:5e:93:04:15:c0:df:bc:a5:5e:43:ff:be:0c:fa: 43:93:86:08:cf:45:2b:4d:dc:db:16:b1:50:33:1f: 70:4e:2e:22:b6:4b:c9:2e:58:80:ca:0d:4d:80:14: 4c:df:4e:e5:0f:a7:c8:85:7a:ba:2d:de:f9:e4:b1: 69:d5:71:1a:9b:cd:39:fc:fb:e4:b2:8d:b3:c4:cc: e1:c6:3e:73:41:9c:b3:91:de:49:70:7f:fc:9c:52: a2:96:06:90:b8:a6:8f:19:fa:da:8e:d9:bb:5a:56: 7b:ea:8a:b8:ad:a1:24:00:4b:af:c1:0f:a1:21:3c: ce:5c:33:5b:d3:da:88:d6:c7:12:36:6d:18:02:8e: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:90:41:92:88:C2:6E:94:9D:3B:E6:C5:C6:C4:E1:70:70:EC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl X509v3 Authority Key Identifier: keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer sbgp-ipAddrBlock: critical IPv4: 192.230.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a1:df:dc:9a:2b:78:04:57:93:35:6f:de:eb:31:d2:20:04: d7:e6:98:20:88:82:42:ef:e9:dc:66:43:87:37:d4:69:0a:52: f6:06:9c:c7:2f:6d:27:6c:ce:f3:d8:fb:e1:7d:03:34:c0:f1: 7b:6a:59:aa:a0:28:ed:bf:91:0b:45:a8:30:f7:db:f6:2d:38: bd:a9:37:8b:40:55:06:a4:5a:7e:42:53:c5:9e:30:e3:15:09: ce:ca:d1:3a:f5:f7:a1:fb:33:61:c6:7c:ce:9f:a3:f9:fe:e9: 60:09:c9:4a:b3:6b:10:b8:8a:55:5f:ed:db:f4:8d:64:a1:8c: c9:80:1c:34:dd:5e:16:f7:b7:57:c1:97:55:05:ba:a0:43:7c: 5a:89:0a:38:6d:dc:9e:96:49:1d:a5:63:1e:ee:91:86:59:a2: 1f:ad:e8:02:db:f5:a7:01:0e:71:0b:d9:e1:f4:14:54:35:11: 5f:2c:0c:b8:04:47:c8:2c:a1:20:ad:b1:1c:f6:92:ae:4d:82: 2f:88:a6:48:f7:8d:2c:69:b5:f5:1e:f5:20:ca:f4:59:3a:01: 52:19:06:0e:3f:f8:ef:89:e7:7e:3d:a5:ba:51:c9:7c:89:5d: 81:36:e9:9a:3f:ec:7d:38:2b:d5:c1:b3:c3:c4:41:2d:dd:72: a7:64:e1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfjJ5jQhmVqtBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2 MWE5MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDIyYmE0OTMtMDBmNC00ZTIwLTkzYzUtZjkxYjlhN2Y0YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8nzIqwg0bqXY2akZ8g+MlV4T3TRJHM4VAQG PsZNeBIsUrIW3bkcOIMtVRd7XM1TpqBeVN19bovGd2VNillxHusTmmibiojHDr6v JM5ZBKGRVjpDuC1mg5NcL3u3yWUFioF5RVQ0mmOwPj+r9GhXA9BfUi6SkrERXpME FcDfvKVeQ/++DPpDk4YIz0UrTdzbFrFQMx9wTi4itkvJLliAyg1NgBRM307lD6fI hXq6Ld755LFp1XEam805/Pvkso2zxMzhxj5zQZyzkd5JcH/8nFKilgaQuKaPGfra jtm7WlZ76oq4raEkAEuvwQ+hITzOXDNb09qI1scSNm0YAo7O+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3kEGSiMJulJ075sXGxOFwcOzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2 OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0 OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSh39yaK3gEV5M1b97rMdIgBNfmmCCIgkLv6dxmQ4c31GkKUvYGnMcv bSdszvPY++F9AzTA8XtqWaqgKO2/kQtFqDD32/YtOL2pN4tAVQakWn5CU8WeMOMV Cc7K0Tr196H7M2HGfM6fo/n+6WAJyUqzaxC4ilVf7dv0jWShjMmAHDTdXhb3t1fB l1UFuqBDfFqJCjht3J6WSR2lYx7ukYZZoh+t6ALb9acBDnEL2eH0FFQ1EV8sDLgE R8gsoSCtsRz2kq5Ngi+Ipkj3jSxptfUe9SDK9Fk6AVIZBg4/+O+J5349pbpRyXyJ XYE26Zo/7H04K9XBs8PEQS3dcqdk4e0= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:18 2024 by rpki-client on console-ams.rpki-client.org