$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json) Hash identifier: f2mwxZePWvgI/nnHCtro/X7rZWvJhspxZJKsZWB0egc= Subject key identifier: DE:E1:6B:B5:1B:63:30:13:47:2D:4F:BE:DC:DE:92:AB:88:86:92:36 Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F43285847CA3F82ED191AD52A70C2D928 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 398777 IP address blocks: 24.233.144.0/20 maxlen: 20 149.137.160.0/19 maxlen: 19 192.173.152.0/21 maxlen: 21 2605:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:82:ed:19:1a:d5:2a:70:c2:d9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=910b0e8f-1598-400f-8728-a997136faa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:01:1c:b8:20:f5:c6:fb:06:13:cf:b9:46: 0a:be:54:89:fa:88:2f:fd:2a:1e:83:0b:73:05:61: 76:84:17:04:10:03:dc:e6:f5:90:b4:a6:9f:d1:70: 57:0b:5b:1c:0f:d6:4c:5a:34:d0:42:f8:87:ae:b9: 0c:93:06:29:43:d3:67:33:2e:64:ce:a7:cb:83:3f: 06:68:1e:ba:eb:87:7a:63:11:74:dc:0e:62:f4:9f: 79:39:df:eb:a3:92:3e:3e:f4:86:ec:ac:2f:00:9e: 59:20:a2:2c:9b:bd:a1:f7:12:7f:2b:76:f7:53:9c: cd:40:d1:9c:ec:2d:8b:b5:e5:a7:d2:74:31:bd:ca: 33:6c:c7:07:d8:7b:2e:c6:16:10:fa:e8:10:34:a7: fe:55:73:b9:45:d4:3e:d6:68:33:5e:17:74:6e:45: ed:d5:1e:0e:e7:dd:5f:5f:99:52:7b:9c:af:11:39: f6:11:a6:08:00:61:69:84:82:d4:87:9a:8f:c9:10: 0a:45:a7:96:66:6f:30:ad:66:aa:db:bb:ee:c7:7d: 58:e2:9a:af:1e:b3:de:35:23:80:7c:55:f2:55:d7: f8:b7:56:e4:ae:fa:14:84:3a:62:da:88:e8:11:0e: d0:60:8b:59:cc:5c:b3:db:8f:b9:38:2c:e4:08:54: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:6B:B5:1B:63:30:13:47:2D:4F:BE:DC:DE:92:AB:88:86:92:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: 24.233.144.0/20 149.137.160.0/19 192.173.152.0/21 IPv6: 2605:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:20:0a:f7:8e:57:e0:00:77:1f:5c:50:6a:da:a7:e3:27:cf: ac:8d:38:64:c9:cf:1e:35:90:04:ca:ff:77:78:7d:9c:f6:25: 1f:d9:d0:d0:03:c3:96:ea:0f:02:84:94:93:e5:cd:ae:c0:ea: bd:40:20:30:70:95:ed:59:bc:a3:65:0a:4c:c1:a9:e7:9e:bf: c9:bb:d2:77:a1:36:ac:a2:32:e2:15:00:4a:9b:3b:8d:00:cc: d6:30:49:d4:6e:cf:a0:35:1a:33:64:18:d5:3b:d4:21:b1:de: f2:34:db:4b:99:86:41:26:29:f4:d1:cd:02:fa:b1:4d:a3:78: 19:5d:f2:08:5f:d4:6c:5b:cf:d1:1f:c6:40:5e:62:3a:d1:06: 58:0e:0f:83:71:7c:a2:63:35:ae:bb:d7:f6:8b:a4:2b:c2:19: f9:d1:d3:56:9d:ed:7d:85:88:29:24:f9:e9:e9:37:cc:6d:2f: 5c:67:e6:dc:41:63:41:69:2d:d8:09:ba:8f:03:db:0e:fb:fe: f1:2c:d0:90:6e:92:23:6c:10:1e:68:65:a7:e6:bc:e1:63:25: f5:7c:a4:1a:09:b3:20:d0:56:76:aa:bf:3b:5e:cc:64:31:22: 0c:f1:1f:c6:ae:06:a6:a4:2d:73:ae:28:57:5a:52:29:b5:ad: 90:ff:b0:38 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEfKP4LtGRrVKnDC2SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTEwYjBlOGYtMTU5OC00MDBmLTg3MjgtYTk5NzEzNmZhYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVgBHLgg9cb7BhPPuUYKvlSJ+ogv/Soegwtz BWF2hBcEEAPc5vWQtKaf0XBXC1scD9ZMWjTQQviHrrkMkwYpQ9NnMy5kzqfLgz8G aB6664d6YxF03A5i9J95Od/ro5I+PvSG7KwvAJ5ZIKIsm72h9xJ/K3b3U5zNQNGc 7C2LteWn0nQxvcozbMcH2HsuxhYQ+ugQNKf+VXO5RdQ+1mgzXhd0bkXt1R4O591f X5lSe5yvETn2EaYIAGFphILUh5qPyRAKRaeWZm8wrWaq27vux31Y4pqvHrPeNSOA fFXyVdf4t1bkrvoUhDpi2ojoEQ7QYItZzFyz24+5OCzkCFSs9QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFN7ha7UbYzATRy1PvtzekquIhpI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvNzU0NWZhOTYtOGY3My0z NGY5LTk3YjAtM2QwZmEyYjM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEGOmQAwQF lYmgAwQDwK2YMA0EAgACMAcDBQAmBexAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJAgCveOV+AAdx9cUGra p+Mnz6yNOGTJzx41kATK/3d4fZz2JR/Z0NADw5bqDwKElJPlza7A6r1AIDBwle1Z vKNlCkzBqeeev8m70nehNqyiMuIVAEqbO40AzNYwSdRuz6A1GjNkGNU71CGx3vI0 20uZhkEmKfTRzQL6sU2jeBld8ghf1Gxbz9EfxkBeYjrRBlgOD4NxfKJjNa671/aL pCvCGfnR01ad7X2FiCkk+enpN8xtL1xn5txBY0FpLdgJuo8D2w77/vEs0JBukiNs EB5oZafmvOFjJfV8pBoJsyDQVnaqvztezGQxIgzxH8auBqakLXOuKFdaUim1rZD/ sDg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org