$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa7ffd68-0da0-387a-b068-441fc6c54c30.roa File: aa7ffd68-0da0-387a-b068-441fc6c54c30.roa (raw, json) Hash identifier: XGTi0y1GFSC9hbSXdzpZJh++Yd0AKnEkb75YIimNTKc= Subject key identifier: 97:6B:61:F8:A3:99:1C:C2:5A:CD:E2:DC:1D:18:7C:AA:4F:E0:BD:92 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B13962D5326C0325696238 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa7ffd68-0da0-387a-b068-441fc6c54c30.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 140.248.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:39:62:d5:32:6c:03:25:69:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=8f3c1af8-4cc1-492d-a7bd-579ffd90d573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:f1:0b:86:08:b6:c9:4c:3c:78:7a:c5:33: fe:ff:19:e3:75:cc:54:34:86:3c:8f:68:de:a1:a8: 02:76:7b:cb:0d:21:7f:72:9c:aa:a9:9d:2e:98:a7: 7c:02:67:52:95:e9:7e:06:ab:63:dd:0a:ad:2d:6a: 09:32:13:b4:15:e3:ab:83:8d:27:cd:85:24:61:18: 46:f3:42:00:27:2b:b5:fb:d0:a3:71:7b:64:09:69: 86:44:19:fa:e6:60:ad:71:20:93:2d:ff:51:ca:0d: e8:b9:50:f4:59:f2:7b:b9:5a:f6:8d:e6:14:c5:7e: c3:4c:a4:ac:74:9e:43:26:f4:7d:8f:28:4b:4f:23: f5:25:11:25:03:6d:f7:ca:af:24:36:c6:69:a5:d4: bb:fa:57:8f:ed:65:f7:66:8c:af:16:2c:31:be:5b: 1b:a5:47:cb:97:9a:e8:ec:0b:61:9b:dc:53:9b:a4: 91:0e:70:6f:ed:4b:9c:5a:fd:20:d4:fe:63:ff:ab: e9:00:01:e9:ed:a7:a8:f9:ec:1f:a2:25:56:11:c7: 27:68:e0:1b:f6:cc:05:1b:0c:0a:45:28:34:fb:81: 25:56:cb:80:30:4d:fb:8b:da:aa:5f:1d:30:d3:36: d0:e8:a7:32:bf:05:75:2c:8c:11:db:2a:21:47:42: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6B:61:F8:A3:99:1C:C2:5A:CD:E2:DC:1D:18:7C:AA:4F:E0:BD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa7ffd68-0da0-387a-b068-441fc6c54c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:46:b6:c3:82:05:0f:dc:c8:57:78:ae:70:9c:e2:14:cf:a2: 2e:8e:cd:6e:01:0d:14:27:05:41:f3:36:3d:e7:bf:5d:45:18: 37:c6:bf:23:ed:9b:42:2f:06:ff:e2:cb:3d:ab:9d:23:12:fd: 9a:33:bc:8e:97:62:7a:ff:98:ad:52:d9:eb:51:b8:3f:e8:ad: e7:32:a8:66:8a:1c:87:34:23:c8:22:c9:49:6d:9a:9f:dc:f5: 63:9d:18:93:74:c1:21:b4:5f:1d:45:28:b7:27:8c:b3:24:87: 0a:43:0e:3d:e7:73:f5:8d:9a:2f:0f:13:a0:2c:0b:9f:4c:91: 60:ce:c6:b8:5f:be:ab:66:4c:bc:55:e3:6d:3d:f1:15:ac:93: 22:60:38:07:fa:ef:d5:f0:0b:83:d5:8f:ed:52:39:a5:15:c5: da:46:49:22:15:ce:6d:16:98:9f:a0:e8:a4:65:06:50:65:f8: ef:bb:f7:05:3b:49:38:46:c0:89:e4:b5:b0:f8:09:41:f8:0b: 0c:9c:03:fb:09:f9:21:2c:8f:14:3a:5d:dc:41:08:3b:fe:e9: b3:b1:24:1e:85:ee:41:b4:94:b6:14:fa:e0:bd:24:8c:7e:22: f8:d8:af:e0:8d:2c:9b:14:fb:36:9b:36:dc:d4:0a:ae:9a:58: fd:c4:e4:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsTli1TJsAyVpYjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk OGYzYzFhZjgtNGNjMS00OTJkLWE3YmQtNTc5ZmZkOTBkNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGXxC4YItslMPHh6xTP+/xnjdcxUNIY8j2je oagCdnvLDSF/cpyqqZ0umKd8AmdSlel+Bqtj3QqtLWoJMhO0FeOrg40nzYUkYRhG 80IAJyu1+9CjcXtkCWmGRBn65mCtcSCTLf9Ryg3ouVD0WfJ7uVr2jeYUxX7DTKSs dJ5DJvR9jyhLTyP1JRElA233yq8kNsZppdS7+leP7WX3ZoyvFiwxvlsbpUfLl5ro 7Athm9xTm6SRDnBv7UucWv0g1P5j/6vpAAHp7aeo+ewfoiVWEccnaOAb9swFGwwK RSg0+4ElVsuAME37i9qqXx0w0zbQ6KcyvwV1LIwR2yohR0JKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdrYfijmRzCWs3i3B0YfKpP4L2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWE3ZmZkNjgtMGRhMC0z ODdhLWIwNjgtNDQxZmM2YzU0YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9GtsOCBQ/cyFd4rnCc4hTPoi6OzW4BDRQnBUHzNj3nv11FGDfGvyPt m0IvBv/iyz2rnSMS/ZozvI6XYnr/mK1S2etRuD/orecyqGaKHIc0I8giyUltmp/c 9WOdGJN0wSG0Xx1FKLcnjLMkhwpDDj3nc/WNmi8PE6AsC59MkWDOxrhfvqtmTLxV 42098RWskyJgOAf679XwC4PVj+1SOaUVxdpGSSIVzm0WmJ+g6KRlBlBl+O+79wU7 SThGwInktbD4CUH4CwycA/sJ+SEsjxQ6XdxBCDv+6bOxJB6F7kG0lLYU+uC9JIx+ IvjYr+CNLJsU+zabNtzUCq6aWP3E5N0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:31 2024 by rpki-client on console-ams.rpki-client.org