$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa File: ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa (raw, json) Hash identifier: nZdcxsZ9DhYPzcTNyEMNpNfe3s2IuUaXThy/QO3alGE= Subject key identifier: 6E:7F:D7:BD:F7:85:E7:86:AD:10:1E:3C:24:05:38:55:7B:FA:A4:76 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F43285847DF2F5453FE3DDBA05CA112F0 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 0 IP address blocks: 192.188.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:54:53:fe:3d:db:a0:5c:a1:12:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=9ef0d685-e8e5-4b86-9419-30b0d72987e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:f2:37:29:9a:29:00:86:35:e1:28:a7:15: b5:d8:4e:b7:c0:0f:57:b3:f9:a0:aa:4a:09:f0:9b: 5d:ce:d9:ae:51:38:4c:58:3f:c5:3d:61:7d:18:36: 1d:89:a2:25:21:73:c2:b7:e0:80:13:c0:c6:c0:73: 5a:4e:86:14:29:57:76:54:ec:2a:f6:da:08:12:37: 63:5b:d1:25:5e:14:54:66:21:49:73:fd:1b:79:c3: 4b:4b:6a:4e:26:d7:47:ae:04:0c:7b:78:a7:bf:bf: 76:e0:32:69:cd:47:7a:e4:1c:48:6b:22:e2:02:0f: 73:49:f8:e0:75:dd:d3:24:1b:77:47:10:9e:ac:b4: 17:ce:39:51:53:32:3b:84:7f:91:1d:4d:3e:6c:ea: 42:27:29:76:af:33:ef:b4:e9:8a:13:9f:18:59:84: 3b:71:59:e3:6a:b7:92:0c:b8:7a:c5:aa:ca:20:47: bd:ce:b8:b1:11:be:3e:0c:73:46:8e:38:f1:28:6a: 10:26:46:f3:3f:42:3f:5f:84:c5:e8:ec:d6:c8:68: 08:4c:d9:66:f6:55:fd:99:b0:be:0f:63:22:ad:ff: 6f:6a:5a:06:e0:67:1e:f7:f7:d5:c0:46:ac:5a:3c: d7:9a:21:5f:d8:e6:36:9f:73:74:8e:15:01:1a:59: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:D7:BD:F7:85:E7:86:AD:10:1E:3C:24:05:38:55:7B:FA:A4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ff8e72dc-d509-3db2-8238-9b1d3bfed34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.188.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:08:b8:85:0a:a3:aa:20:97:e6:ab:44:9d:1e:b1:06:a5:d0: 9d:d2:8d:4d:f2:f2:f5:0a:00:4d:61:9a:cf:3f:c7:2b:65:4c: a0:10:d6:6f:b2:07:6f:81:f2:2b:3b:54:c7:fc:bc:94:e9:52: f1:93:bc:2a:b8:fb:25:b5:ff:f1:69:f9:b1:43:8a:a8:20:87: 6f:f7:2e:f6:58:e3:c0:7d:6d:9e:ba:3f:00:6c:4c:52:9e:ae: 24:d7:ab:ea:4c:ba:51:bd:00:5c:41:21:e0:5a:3b:35:58:7b: 49:6b:34:95:2d:22:9f:fb:64:8d:24:e2:34:7b:c0:e4:94:5c: cb:31:e9:cd:fc:3d:50:eb:d1:8b:23:88:6d:3f:53:dc:c2:b7: 27:2c:47:78:0c:07:aa:e3:77:1a:b9:76:b6:2a:2d:0d:80:64: 60:78:84:df:7c:92:23:9f:91:97:7d:42:d9:2c:56:f2:a8:c9: b3:7d:82:8e:1b:d6:02:3b:3f:e7:59:7a:91:24:a2:3f:35:6e: be:b6:f6:e9:da:06:90:83:52:78:e3:00:4b:b1:2c:3b:6a:f0: 10:a7:08:93:f2:3b:bb:64:85:5e:6f:e3:8a:1b:19:7d:e7:90: 4b:1d:3d:26:d2:e7:c1:1e:b3:f2:b2:fa:08:92:d3:7b:3a:b2: 95:61:78:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1RT/j3boFyhEvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk OWVmMGQ2ODUtZThlNS00Yjg2LTk0MTktMzBiMGQ3Mjk4N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzADyNymaKQCGNeEopxW12E63wA9Xs/mgqkoJ 8JtdztmuUThMWD/FPWF9GDYdiaIlIXPCt+CAE8DGwHNaToYUKVd2VOwq9toIEjdj W9ElXhRUZiFJc/0becNLS2pOJtdHrgQMe3inv7924DJpzUd65BxIayLiAg9zSfjg dd3TJBt3RxCerLQXzjlRUzI7hH+RHU0+bOpCJyl2rzPvtOmKE58YWYQ7cVnjareS DLh6xarKIEe9zrixEb4+DHNGjjjxKGoQJkbzP0I/X4TF6OzWyGgITNlm9lX9mbC+ D2Mirf9valoG4Gce9/fVwEasWjzXmiFf2OY2n3N0jhUBGlkFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5/1733heeGrRAePCQFOFV7+qR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvZmY4ZTcyZGMtZDUwOS0z ZGIyLTgyMzgtOWIxZDNiZmVkMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwIuIUKo6ogl+arRJ0esQal0J3SjU3y8vUKAE1hms8/xytlTKAQ1m+y B2+B8is7VMf8vJTpUvGTvCq4+yW1//Fp+bFDiqggh2/3LvZY48B9bZ66PwBsTFKe riTXq+pMulG9AFxBIeBaOzVYe0lrNJUtIp/7ZI0k4jR7wOSUXMsx6c38PVDr0Ysj iG0/U9zCtycsR3gMB6rjdxq5drYqLQ2AZGB4hN98kiOfkZd9QtksVvKoybN9go4b 1gI7P+dZepEkoj81br629unaBpCDUnjjAEuxLDtq8BCnCJPyO7tkhV5v44obGX3n kEsdPSbS58Ees/Ky+giS03s6spVheDk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org