$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: pEqDTwqpHp6sHYzYdCq44qNSHlabcmDgRBSV1PcsqfM= Subject key identifier: 3B:FF:6C:7A:9E:EB:28:E3:77:46:BB:F4:57:94:B2:7C:55:54:6D:05 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F43285847BEF6CD8F9F3CB245A0A12180 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:cd:8f:9f:3c:b2:45:a0:a1:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=4e0aeddb-04a0-4feb-aa08-652f689ffc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:69:71:f9:60:f8:c8:90:83:bf:1b:fc:7e: d4:90:2a:56:7f:0c:90:3f:61:77:85:2d:27:d4:d3: 81:5b:93:12:e7:2f:4f:d7:1a:32:2b:e2:73:e4:af: 7c:9b:d5:1b:93:09:5a:7e:48:e4:e9:b4:08:b5:da: f7:d8:0e:f4:99:1d:99:15:fe:b0:73:7f:57:77:de: 8e:22:8d:33:8d:5d:7b:a0:13:1d:51:97:5d:6d:48: 06:95:e1:60:50:d5:e8:89:6a:9d:6b:39:96:cf:16: 4e:7c:e3:2b:26:fb:a7:fb:56:c4:03:02:b3:2a:fd: da:42:55:40:b1:d3:ac:1e:e1:29:2b:eb:41:53:6c: 6c:30:24:37:0a:ad:74:f4:8e:b2:a4:43:a8:a4:be: 45:90:fe:14:1d:16:1f:ba:eb:a7:7b:68:a2:9a:fc: 9e:cc:8f:b8:90:12:8a:90:30:1a:25:88:bb:cd:07: 89:86:f3:35:3f:44:30:6e:ff:32:71:03:14:57:8e: 58:99:b7:6a:45:18:44:99:06:e8:8c:04:fb:b7:46: 1f:b4:f2:81:45:b1:93:6a:1c:cd:21:b1:b2:90:b8: 3d:39:11:27:64:f0:42:ca:eb:24:8b:a9:35:08:81: f6:02:1d:78:16:c5:ce:6a:5d:a7:3a:0d:12:0b:09: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:6C:7A:9E:EB:28:E3:77:46:BB:F4:57:94:B2:7C:55:54:6D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:31:5c:41:e2:2d:98:02:3c:70:33:9a:39:fa:42:d0:9c:4d: 18:56:a0:1c:16:fd:a0:03:95:20:b9:c0:da:0a:d3:c2:b7:1f: b4:69:5e:71:32:f5:a8:12:39:b9:d1:2e:c6:c2:86:12:6e:91: 50:28:b3:9d:44:39:af:80:bc:a2:05:c5:13:77:5a:53:d3:48: f7:ba:1a:4c:93:bb:0f:7f:20:f5:19:8e:cb:5a:f5:bc:09:4f: 83:dd:f3:62:88:0c:fc:75:f3:d4:c1:ae:44:85:eb:3c:24:0a: 89:04:19:52:70:21:9c:95:f1:f1:ce:c9:f0:03:5f:33:47:88: 1e:3f:20:37:31:9f:97:16:3b:99:9d:08:3b:10:48:90:9c:cd: c4:f5:58:19:aa:64:03:ba:01:ec:f3:df:51:96:f0:8b:bf:bd: 83:e0:32:51:98:31:c2:b5:d7:fe:29:4c:94:cf:86:f9:86:eb: 4e:d6:9a:5d:2d:69:65:81:3f:cb:36:95:2e:40:10:99:8e:2b: 3c:05:02:2e:ee:a0:89:3f:d1:9a:4c:2b:bc:a1:63:3c:d3:1e: b5:e5:12:11:14:97:ac:80:c4:57:7a:26:b1:53:80:44:0d:43: 10:4a:02:df:7e:c7:6a:e3:9c:0e:37:83:05:45:ce:8e:5b:46: 47:ef:7d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9s2PnzyyRaChIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NGUwYWVkZGItMDRhMC00ZmViLWFhMDgtNjUyZjY4OWZmYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIRpcflg+MiQg78b/H7UkCpWfwyQP2F3hS0n 1NOBW5MS5y9P1xoyK+Jz5K98m9Ubkwlafkjk6bQItdr32A70mR2ZFf6wc39Xd96O Io0zjV17oBMdUZddbUgGleFgUNXoiWqdazmWzxZOfOMrJvun+1bEAwKzKv3aQlVA sdOsHuEpK+tBU2xsMCQ3Cq109I6ypEOopL5FkP4UHRYfuuune2iimvyezI+4kBKK kDAaJYi7zQeJhvM1P0Qwbv8ycQMUV45YmbdqRRhEmQbojAT7t0YftPKBRbGTahzN IbGykLg9OREnZPBCyuski6k1CIH2Ah14FsXOal2nOg0SCwnJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv/bHqe6yjjd0a79FeUsnxVVG0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgxXEHiLZgCPHAzmjn6QtCcTRhWoBwW/aADlSC5wNoK08K3H7RpXnEy 9agSObnRLsbChhJukVAos51EOa+AvKIFxRN3WlPTSPe6GkyTuw9/IPUZjsta9bwJ T4Pd82KIDPx189TBrkSF6zwkCokEGVJwIZyV8fHOyfADXzNHiB4/IDcxn5cWO5md CDsQSJCczcT1WBmqZAO6Aezz31GW8Iu/vYPgMlGYMcK11/4pTJTPhvmG607Wml0t aWWBP8s2lS5AEJmOKzwFAi7uoIk/0ZpMK7yhYzzTHrXlEhEUl6yAxFd6JrFTgEQN QxBKAt9+x2rjnA43gwVFzo5bRkfvfdY= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org