$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa File: 50e13e91-c133-394c-976b-9cabe9d2d09f.roa (raw, json) Hash identifier: Xhz4kQK9Wa4WCDgCcQWgxQQKaym2uhLleb/GW5lfojc= Subject key identifier: 92:32:ED:AD:AB:C6:E2:59:2D:AA:74:59:E3:B4:7A:B1:36:7D:19:9A Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285847CFD4A8E163BCFB1A413CB0E0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 45 IP address blocks: 192.188.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:a8:e1:63:bc:fb:1a:41:3c:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=7ce8fcb9-42f3-401b-ad90-ea568a30db54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:9e:d0:61:c9:0f:cb:b0:b2:2c:fd:0a:b9: 16:5d:48:cf:3c:e1:16:70:8a:a9:ac:47:d0:31:1f: 50:40:24:86:28:d7:46:d6:a0:85:dd:f4:0e:ec:9a: 01:6f:09:0f:e8:0d:9c:28:c6:92:78:65:88:70:c8: 77:05:0a:4b:7b:88:9b:2c:07:9e:17:62:41:ca:2a: 2c:04:19:d3:38:eb:20:c8:74:ca:12:a9:6b:1c:cd: 12:30:72:9a:28:76:9b:d9:39:f1:73:e3:94:9b:01: e9:02:82:06:cb:b7:cd:4a:a2:50:fd:03:3f:9f:fc: cf:4c:35:81:64:5c:db:08:3b:5c:7e:43:dc:db:1e: 50:25:3c:36:4a:51:07:db:b4:af:4f:f1:32:7a:f5: 9a:93:a2:a2:2d:7d:4f:b8:8b:78:26:ba:c6:cb:8c: 70:c0:93:08:39:7b:6c:a5:23:69:4e:8a:1a:32:da: 42:c2:f3:ef:af:67:40:15:75:a1:11:5c:01:95:c5: b1:a2:e1:7f:1f:b1:31:15:39:2f:6d:5e:4c:f0:88: ca:37:f0:20:9c:7f:5a:89:03:eb:ba:34:0a:30:8a: b7:67:68:89:32:bd:22:e8:f4:a0:58:c6:69:65:d6: fb:8a:29:79:ca:c8:f8:51:b6:6d:d9:69:3d:12:b4: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:32:ED:AD:AB:C6:E2:59:2D:AA:74:59:E3:B4:7A:B1:36:7D:19:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:20:9d:69:8c:a6:21:d9:2f:12:a4:a8:46:3f:38:d2:8d:3a: c4:6c:03:fd:33:4e:c0:da:e5:26:ce:7b:87:6e:90:8b:ad:80: 8a:56:58:b1:54:3f:ec:44:6b:85:bf:f1:77:3a:f4:73:c7:89: 21:52:e9:6e:46:46:3f:4c:db:6c:7c:73:f2:ec:c1:50:4e:30: 62:67:3b:49:2f:d6:06:36:df:22:57:af:f8:3c:0d:df:1b:3c: 75:f4:f2:f6:44:9f:b1:47:d1:e8:e3:c8:0a:d7:1f:4e:16:bf: c8:77:95:a3:7b:89:b4:55:09:d4:3b:f3:29:bc:1a:bb:0f:e6: 79:34:c0:00:45:3f:9d:5f:fd:2e:81:4d:99:5e:50:f1:23:be: 81:aa:ba:09:9a:aa:d6:f3:dc:be:a8:25:b8:03:74:5a:e9:d0: f1:ad:4e:70:78:87:43:39:04:05:2a:92:92:47:68:f0:3d:41: 58:9b:e3:a9:ae:f3:27:51:6e:4e:49:aa:00:96:fb:89:9b:fb: 23:72:b2:0e:af:f8:b5:b2:62:44:b9:28:74:5b:0c:a6:34:ea: f9:9d:f3:de:bd:49:b3:ef:48:34:a9:e6:c5:3d:de:13:ff:33: 52:d5:c8:b2:dd:82:85:7c:c3:c7:43:a2:20:d1:98:fb:01:df: 5c:23:c9:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1KjhY7z7GkE8sOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk N2NlOGZjYjktNDJmMy00MDFiLWFkOTAtZWE1NjhhMzBkYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ae0GHJD8uwsiz9CrkWXUjPPOEWcIqprEfQ MR9QQCSGKNdG1qCF3fQO7JoBbwkP6A2cKMaSeGWIcMh3BQpLe4ibLAeeF2JByios BBnTOOsgyHTKEqlrHM0SMHKaKHab2Tnxc+OUmwHpAoIGy7fNSqJQ/QM/n/zPTDWB ZFzbCDtcfkPc2x5QJTw2SlEH27SvT/EyevWak6KiLX1PuIt4JrrGy4xwwJMIOXts pSNpTooaMtpCwvPvr2dAFXWhEVwBlcWxouF/H7ExFTkvbV5M8IjKN/AgnH9aiQPr ujQKMIq3Z2iJMr0i6PSgWMZpZdb7iil5ysj4UbZt2Wk9ErTXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIy7a2rxuJZLap0WeO0erE2fRmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNTBlMTNlOTEtYzEzMy0z OTRjLTk3NmItOWNhYmU5ZDJkMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8gnWmMpiHZLxKkqEY/ONKNOsRsA/0zTsDa5SbOe4dukIutgIpWWLFU P+xEa4W/8Xc69HPHiSFS6W5GRj9M22x8c/LswVBOMGJnO0kv1gY23yJXr/g8Dd8b PHX08vZEn7FH0ejjyArXH04Wv8h3laN7ibRVCdQ78ym8GrsP5nk0wABFP51f/S6B TZleUPEjvoGqugmaqtbz3L6oJbgDdFrp0PGtTnB4h0M5BAUqkpJHaPA9QVib46mu 8ydRbk5JqgCW+4mb+yNysg6v+LWyYkS5KHRbDKY06vmd8969SbPvSDSp5sU93hP/ M1LVyLLdgoV8w8dDoiDRmPsB31wjyVk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org