$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa File: 787c0dea-fa35-351f-9bf6-45a7b33af696.roa (raw, json) Hash identifier: OvTls+8TczZw38Sq116mU0RlZYdmkEbadgkQdmpQgKI= Subject key identifier: F4:66:87:1C:0F:46:CA:83:BE:AD:C7:EA:22:8E:F4:AF:AB:49:B4:41 Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Certificate serial: 010D0C9F43285847B3CC0B23DAB3B3CAFA1EB800 Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 19845 IP address blocks: 192.131.151.0/24 maxlen: 24 192.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:0b:23:da:b3:b3:ca:fa:1e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=786d11ca-5736-48a4-8be9-3b329df8bd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:b9:0c:c0:52:e2:46:ca:37:d7:44:2c:aa: d5:bb:41:db:88:3b:10:50:31:22:05:8d:9f:05:48: fd:54:1e:e5:8d:b5:5d:14:50:c3:52:50:2a:c3:68: a8:0e:5e:3e:04:bc:dc:11:42:a1:c5:3b:de:e7:a5: 12:bf:32:2e:86:87:10:b7:c6:e2:7a:66:c2:98:bc: 8d:23:ab:28:16:d2:56:03:23:50:b1:7c:91:c7:45: e7:3d:9c:81:03:f9:f0:03:4f:09:3d:19:d9:b9:49: 99:a5:4e:4e:76:a9:33:fc:ae:08:8b:a4:01:2e:4d: 94:c6:29:f7:91:a2:45:05:ed:2c:34:12:44:7c:6b: bd:8b:a0:cc:ad:78:d1:e5:17:57:e8:05:af:dd:6a: 11:96:cc:2c:50:99:3e:f3:f8:5b:82:8a:06:8d:a8: 44:57:d0:57:b3:80:63:d3:ca:d8:ed:e9:93:f1:1d: 94:cd:ac:25:0f:b2:73:0b:25:ba:3c:ff:9d:29:89: 9e:8d:9a:e6:54:d4:a3:0f:6e:8b:64:d3:2b:ad:0b: f4:c6:d3:f6:1d:9e:4e:39:35:a4:20:95:3d:c0:f9: 4b:98:04:7e:76:1f:8f:79:a8:69:c8:ad:88:c0:83: 96:a5:28:3d:8d:a1:6f:3f:6c:58:17:d2:b3:5c:af: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:87:1C:0F:46:CA:83:BE:AD:C7:EA:22:8E:F4:AF:AB:49:B4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/787c0dea-fa35-351f-9bf6-45a7b33af696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl X509v3 Authority Key Identifier: keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer sbgp-ipAddrBlock: critical IPv4: 192.131.151.0/24 192.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:74:36:84:97:4c:14:d8:6a:e5:37:f5:49:ff:df:14:c8:37: 45:bd:76:67:70:fa:b3:0e:ea:23:e5:ec:67:7b:61:29:40:9f: a6:c8:32:25:eb:cf:52:ef:89:40:8a:19:bf:9c:a6:fc:5a:97: 01:12:d6:3c:eb:ec:dc:7c:50:e2:78:0e:82:26:ea:d6:f0:2d: 7f:2e:2e:7b:3a:c4:4f:9c:1b:e1:d3:ab:be:58:ee:dc:10:64: 04:62:49:11:a5:e8:3e:35:f3:b9:69:a2:98:cf:1a:e0:80:f8: 6f:c9:36:37:7d:1d:3f:16:91:1f:7e:bb:f8:12:d6:e0:b0:fa: ff:c6:ea:b7:72:08:1b:25:60:d8:36:30:4c:ca:be:e1:74:3c: d6:48:9e:19:cb:dc:2b:8e:5b:80:b8:0f:dd:4e:b6:1d:e6:b9: 1f:43:8a:b7:42:07:08:be:b8:9f:99:be:e2:bb:6a:9e:44:9f: f4:3c:71:15:42:7d:fc:30:77:c5:42:dc:7a:ff:b2:40:d5:7c: 08:35:86:c7:92:73:94:0b:74:64:43:06:5a:81:ea:9b:12:60: 80:f1:c9:34:9a:54:7e:74:5b:88:34:0a:f3:9e:27:6b:05:d8: 5b:25:44:e0:fc:10:7c:b3:02:fe:35:c7:6b:a7:47:be:64:91: 0f:f4:f2:50 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEezzAsj2rOzyvoeuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMzg1OTktMTFiZC00NzZhLTliOTgtZDBmYjQzYjc2 ZDYwMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk Nzg2ZDExY2EtNTczNi00OGE0LThiZTktM2IzMjlkZjhiZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn165DMBS4kbKN9dELKrVu0HbiDsQUDEiBY2f BUj9VB7ljbVdFFDDUlAqw2ioDl4+BLzcEUKhxTve56USvzIuhocQt8biembCmLyN I6soFtJWAyNQsXyRx0XnPZyBA/nwA08JPRnZuUmZpU5Odqkz/K4Ii6QBLk2Uxin3 kaJFBe0sNBJEfGu9i6DMrXjR5RdX6AWv3WoRlswsUJk+8/hbgooGjahEV9BXs4Bj 08rY7emT8R2UzawlD7JzCyW6PP+dKYmejZrmVNSjD26LZNMrrQv0xtP2HZ5OOTWk IJU9wPlLmAR+dh+PeahpyK2IwIOWpSg9jaFvP2xYF9KzXK/jywIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPRmhxwPRsqDvq3H6iKO9K+rSbRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80N2Mz ODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZiNDNiNzZkNjAvNzg3YzBkZWEtZmEzNS0z NTFmLTliZjYtNDVhN2IzM2FmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDdjMzg1OTktMTFiZC00NzZhLTli OTgtZDBmYjQzYjc2ZDYwLzQ3YzM4NTk5LTExYmQtNDc2YS05Yjk4LWQwZmI0M2I3 NmQ2MC5jcmwwHwYDVR0jBBgwFoAUaUYj7LbDyji488TmIagK6RkFgVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80N2MzODU5OS0xMWJkLTQ3NmEtOWI5OC1kMGZi NDNiNzZkNjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIOXAwQA wIOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACB0NoSXTBTYauU39Un/3xTIN0W9dmdw+rMO6iPl7Gd7YSlA n6bIMiXrz1LviUCKGb+cpvxalwES1jzr7Nx8UOJ4DoIm6tbwLX8uLns6xE+cG+HT q75Y7twQZARiSRGl6D4187lpopjPGuCA+G/JNjd9HT8WkR9+u/gS1uCw+v/G6rdy CBslYNg2MEzKvuF0PNZInhnL3CuOW4C4D91Oth3muR9DirdCBwi+uJ+ZvuK7ap5E n/Q8cRVCffwwd8VC3Hr/skDVfAg1hseSc5QLdGRDBlqB6psSYIDxyTSaVH50W4g0 CvOeJ2sF2FslROD8EHyzAv41x2unR75kkQ/08lA= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org