$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa File: c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa (raw, json) Hash identifier: g7BnEB5eg5PdaBor4LIp9Vs55rTaCaxOUxK+9vG3vYc= Subject key identifier: 65:F9:56:D4:DC:EC:9F:C5:15:19:8B:B0:89:7E:2A:6B:95:C0:E9:78 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285847C05C17CD475B4BFEB60F1F00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa Signing time: Sun 03 Nov 2024 01:00:36 +0000 ROA not before: Sun 03 Nov 2024 01:00:36 +0000 ROA not after: Sat 01 Feb 2025 02:00:36 +0000 asID: 54994 IP address blocks: 157.185.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:5c:17:cd:47:5b:4b:fe:b6:0f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Nov 3 01:00:36 2024 GMT Not After : Feb 1 02:00:36 2025 GMT Subject: CN=3ea48ced-2541-4e0a-b842-743b7f7c95c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:3a:fa:37:50:2a:98:80:33:b4:c6:60:ba: fc:e1:57:29:7d:85:49:4f:4b:43:80:3c:59:bc:58: 98:4f:d2:25:87:fe:61:b6:13:29:2c:af:1d:b5:6e: dc:09:03:ea:15:5c:d8:7c:c7:d9:f4:8e:35:ba:41: dd:43:95:c6:9a:9f:be:30:80:2b:f3:3d:89:fd:e9: 0b:b9:c5:d8:09:68:29:c1:a5:85:f0:a2:ae:c7:c4: 82:5a:d7:83:31:03:73:a7:3f:f1:81:c3:83:bc:6d: c7:fc:62:d6:ab:29:f7:4b:9d:f1:44:71:11:ff:71: 48:cc:22:23:68:40:66:29:1d:97:90:87:a4:aa:c2: d6:2f:a4:2a:8d:c3:21:09:b0:87:47:1a:cc:c3:5a: 44:54:72:59:18:12:9c:34:94:c9:34:0b:3e:f9:49: 96:f6:2b:f8:ea:47:43:25:41:ae:85:0f:5f:60:1b: 73:85:77:75:1f:9b:10:76:0a:6b:7d:5f:3a:0c:9d: bd:44:d9:77:b8:e4:87:47:98:cc:c8:c5:30:e8:51: 78:93:03:c2:d5:db:8b:86:a4:8d:e1:0d:db:d5:56: 46:bf:91:be:87:55:e9:41:65:26:64:1c:7a:28:2e: e2:79:58:73:e4:0e:4f:e1:c3:98:bb:c7:32:a9:4e: e2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F9:56:D4:DC:EC:9F:C5:15:19:8B:B0:89:7E:2A:6B:95:C0:E9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:43:6b:01:bf:b9:35:ad:72:88:8d:ed:a4:8e:8b:36:98:2b: 9c:d6:00:81:e5:3e:ce:61:a2:cf:54:f7:71:3f:01:49:40:32: b2:41:68:37:03:5b:38:4f:24:3a:d2:44:c3:19:60:25:4f:c4: 52:f3:b0:2b:95:08:5e:41:5f:44:85:4f:73:63:e5:b0:22:06: ec:0b:1c:51:54:28:c0:6e:15:14:ec:57:e7:31:ee:3e:a1:3c: ba:3b:12:7e:73:a2:06:f2:d9:a7:a3:50:b7:86:8d:04:e5:c9: ac:21:09:e6:d4:bc:57:09:45:a2:56:2d:de:32:b5:2d:80:28: 77:d5:04:15:51:65:6c:75:0d:b1:ef:64:38:bd:f0:68:36:82: 20:14:df:48:67:cf:31:49:0c:bb:3d:07:c4:21:f5:6a:0a:f6: 22:28:d8:9d:e4:16:3a:19:92:66:e2:38:17:58:b3:c8:78:b9: c5:9b:3e:ba:f9:62:04:5f:dd:17:f4:98:eb:1e:5b:f8:4d:13: 1e:e0:f8:43:79:47:98:3b:f4:f4:bf:9a:b8:47:5e:01:08:50: 74:df:fd:7c:b8:95:13:5b:ba:df:21:38:fd:3f:56:c0:50:fe: 4d:f3:17:fe:b8:a7:3d:5b:1c:0f:6b:6d:b2:73:1b:5b:5b:84: fd:d6:2c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfAXBfNR1tL/rYPHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI0MTEwMzAxMDAzNloXDTI1MDIwMTAyMDAzNlowLzEtMCsGA1UEAxMk M2VhNDhjZWQtMjU0MS00ZTBhLWI4NDItNzQzYjdmN2M5NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzo6+jdQKpiAM7TGYLr84VcpfYVJT0tDgDxZ vFiYT9Ilh/5hthMpLK8dtW7cCQPqFVzYfMfZ9I41ukHdQ5XGmp++MIAr8z2J/ekL ucXYCWgpwaWF8KKux8SCWteDMQNzpz/xgcODvG3H/GLWqyn3S53xRHER/3FIzCIj aEBmKR2XkIekqsLWL6QqjcMhCbCHRxrMw1pEVHJZGBKcNJTJNAs++UmW9iv46kdD JUGuhQ9fYBtzhXd1H5sQdgprfV86DJ29RNl3uOSHR5jMyMUw6FF4kwPC1duLhqSN 4Q3b1VZGv5G+h1XpQWUmZBx6KC7ieVhz5A5P4cOYu8cyqU7i3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX5VtTc7J/FFRmLsIl+KmuVwOl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzhkOGIzZmQtZTNmNC0z NTFiLWE4ZTAtNDI2ZTIyODVjODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9DawG/uTWtcoiN7aSOizaYK5zWAIHlPs5hos9U93E/AUlAMrJBaDcD WzhPJDrSRMMZYCVPxFLzsCuVCF5BX0SFT3Nj5bAiBuwLHFFUKMBuFRTsV+cx7j6h PLo7En5zogby2aejULeGjQTlyawhCebUvFcJRaJWLd4ytS2AKHfVBBVRZWx1DbHv ZDi98Gg2giAU30hnzzFJDLs9B8Qh9WoK9iIo2J3kFjoZkmbiOBdYs8h4ucWbPrr5 YgRf3Rf0mOseW/hNEx7g+EN5R5g79PS/mrhHXgEIUHTf/Xy4lRNbut8hOP0/VsBQ /k3zF/64pz1bHA9rbbJzG1tbhP3WLN8= -----END CERTIFICATE-----Generated at Mon Nov 25 19:20:05 2024 by rpki-client on console-ams.rpki-client.org