$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa File: 3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa (raw, json) Hash identifier: lma154HfhD0hDLW9TqDIzFY1VvH3vAqCo+qPYo+FbgM= Subject key identifier: FB:9A:C4:71:FE:62:CD:AB:D7:5A:C4:ED:81:3E:FE:8C:32:99:34:7A Certificate issuer: /CN=1078e419-f0dc-430f-89c0-345af0a135f9 Certificate serial: 010D0C9F43285847BC2C20F6DE0E9E2E12273920 Authority key identifier: 8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 17298 IP address blocks: 192.91.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:20:f6:de:0e:9e:2e:12:27:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1078e419-f0dc-430f-89c0-345af0a135f9 Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=85c9e837-d6f8-48cf-bca0-9c4641558ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:7e:0f:c2:86:01:8e:05:16:91:ab:2c:54: 44:4f:d2:67:fa:10:6a:0e:bc:87:03:8f:ba:18:eb: 9a:6d:f6:36:7c:83:1c:47:7d:cb:be:4c:23:8c:66: 5f:d0:ac:76:ea:ce:be:fc:db:ed:d3:1e:61:c0:1c: bb:57:1d:57:1b:53:e4:5d:7c:19:54:84:b0:54:48: e5:16:9a:8e:0b:b2:37:d0:52:05:06:17:5f:dd:bf: 24:92:4a:0b:24:bf:66:8e:18:59:85:db:cf:f1:2f: 06:4c:5b:e9:3c:cd:19:ba:ae:c5:8e:0e:85:f7:0f: b1:34:6a:a5:3f:da:76:ef:b0:33:64:10:f8:a4:13: 04:d7:bd:67:6a:1e:23:df:cd:68:71:5c:6a:a4:77: 6f:50:f2:12:4a:ad:1d:6c:30:7d:8d:c4:e0:1c:5b: 66:4f:90:d4:2e:eb:5d:42:b7:e3:3e:ac:0f:d9:0b: e8:ba:39:55:d4:62:d3:a9:bc:62:ee:b2:2f:26:cf: 1d:e7:a6:58:99:90:ba:1d:28:1a:50:77:37:f9:65: 0d:79:be:0f:3b:ce:69:88:a7:fb:86:4b:90:ea:22: 96:65:9d:b6:15:64:62:c2:0d:b8:9e:9e:24:9c:b8: bd:eb:f6:a1:49:22:db:26:2b:a0:a7:d9:4a:75:86: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:C4:71:FE:62:CD:AB:D7:5A:C4:ED:81:3E:FE:8C:32:99:34:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/3b15a54a-201b-31f5-bf09-9c5f55b65a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9/1078e419-f0dc-430f-89c0-345af0a135f9.crl X509v3 Authority Key Identifier: keyid:8C:D1:AC:38:B2:5D:EF:AE:4A:1B:42:7B:D0:58:94:A5:F3:B2:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1078e419-f0dc-430f-89c0-345af0a135f9.cer sbgp-ipAddrBlock: critical IPv4: 192.91.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2e:bb:6d:97:b8:59:0d:6b:ee:51:32:ca:0e:32:89:af:72: 96:46:ec:63:9d:ac:98:7b:42:1b:97:85:b0:67:01:7b:e5:b8: d8:b0:9f:da:fa:cc:da:ac:0d:94:99:82:22:95:14:fc:fc:02: 2b:a9:22:fd:58:7a:a4:fb:10:88:34:7a:22:f6:1f:17:8b:c9: c7:3e:8e:ca:de:a3:8a:9b:a4:8a:11:2c:12:ae:60:eb:9a:5c: 83:27:70:8b:9b:0e:54:16:c5:dc:43:31:09:77:6f:a9:5d:e5: bb:d5:39:f2:7a:0d:ea:15:4e:e9:29:9a:72:f4:2d:2b:4d:18: 4c:09:74:df:8b:6d:89:d1:8e:12:b1:2f:42:19:9e:80:30:2a: dd:8a:30:b5:02:52:92:a1:06:70:41:31:67:84:77:f1:ec:0b: 07:3a:38:f6:82:0b:28:10:cc:c7:f5:78:24:2c:c7:5e:09:5a: e2:f8:c7:96:bc:64:44:7d:60:68:0c:c8:4f:7f:30:df:02:88: c3:e1:fe:4a:e6:2c:ae:d0:44:9c:53:c8:88:47:d4:7a:71:c6: 20:ce:dd:7f:f8:25:e6:94:d9:6d:ba:83:ea:40:a4:19:45:7d: 89:a3:ed:72:71:f9:3f:c1:d1:6b:f3:d2:d4:c4:7b:17:65:bd: 00:df:8d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LCD23g6eLhInOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA3OGU0MTktZjBkYy00MzBmLTg5YzAtMzQ1YWYwYTEz NWY5MB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk ODVjOWU4MzctZDZmOC00OGNmLWJjYTAtOWM0NjQxNTU4ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02l+D8KGAY4FFpGrLFRET9Jn+hBqDryHA4+6 GOuabfY2fIMcR33LvkwjjGZf0Kx26s6+/Nvt0x5hwBy7Vx1XG1PkXXwZVISwVEjl FpqOC7I30FIFBhdf3b8kkkoLJL9mjhhZhdvP8S8GTFvpPM0Zuq7Fjg6F9w+xNGql P9p277AzZBD4pBME171nah4j381ocVxqpHdvUPISSq0dbDB9jcTgHFtmT5DULutd QrfjPqwP2QvoujlV1GLTqbxi7rIvJs8d56ZYmZC6HSgaUHc3+WUNeb4PO85piKf7 hkuQ6iKWZZ22FWRiwg24np4knLi96/ahSSLbJiugp9lKdYaxdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuaxHH+Ys2r11rE7YE+/owymTR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4 ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVhZjBhMTM1ZjkvM2IxNWE1NGEtMjAxYi0z MWY1LWJmMDktOWM1ZjU1YjY1YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTA3OGU0MTktZjBkYy00MzBmLTg5 YzAtMzQ1YWYwYTEzNWY5LzEwNzhlNDE5LWYwZGMtNDMwZi04OWMwLTM0NWFmMGEx MzVmOS5jcmwwHwYDVR0jBBgwFoAUjNGsOLJd765KG0J70FiUpfOyqiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDc4ZTQxOS1mMGRjLTQzMGYtODljMC0zNDVh ZjBhMTM1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGguu22XuFkNa+5RMsoOMomvcpZG7GOdrJh7QhuXhbBnAXvluNiwn9r6 zNqsDZSZgiKVFPz8AiupIv1YeqT7EIg0eiL2HxeLycc+jsreo4qbpIoRLBKuYOua XIMncIubDlQWxdxDMQl3b6ld5bvVOfJ6DeoVTukpmnL0LStNGEwJdN+LbYnRjhKx L0IZnoAwKt2KMLUCUpKhBnBBMWeEd/HsCwc6OPaCCygQzMf1eCQsx14JWuL4x5a8 ZER9YGgMyE9/MN8CiMPh/krmLK7QRJxTyIhH1HpxxiDO3X/4JeaU2W26g+pApBlF fYmj7XJx+T/B0Wvz0tTEexdlvQDfjRs= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:09 2024 by rpki-client on console-ams.rpki-client.org