$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa File: c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa (raw, json) Hash identifier: +mc1bc7yz4prZ+Ai7KJCkTmJZZZ3RNDYdUVAwPwpf2Y= Subject key identifier: 52:DA:A3:4F:1B:AF:6B:C3:ED:33:26:46:EE:96:4A:7F:6C:E8:83:8A Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F432858476E0103550F455447ACA38FC0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 971 IP address blocks: 192.34.101.0/24 maxlen: 24 2604:fbc0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:01:03:55:0f:45:54:47:ac:a3:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=e9d94881-73e5-48c0-be00-d88c846ed16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:08:64:37:e0:6a:a3:da:15:dd:6d:5f:37: d6:6a:54:92:df:ac:f8:15:a7:67:80:bb:7d:1b:75: 45:cb:68:72:e5:bd:16:29:45:8a:d3:fe:96:55:f2: b7:db:8f:7c:1a:b0:9f:66:09:ac:04:fe:35:5a:29: 1d:8f:cb:04:2c:78:a4:e3:15:76:d4:c3:70:e5:6d: 06:86:4b:a5:06:a9:fc:40:74:3c:ab:28:14:48:12: 87:9a:05:ad:2a:1e:0d:68:cf:97:11:88:95:86:cd: 7f:2b:0b:1b:69:dd:a3:17:9c:d1:40:f5:8c:12:a4: 25:6d:70:a6:03:10:b7:f1:11:6a:29:16:aa:ee:fc: c7:2c:9b:2a:a0:b5:44:c8:5c:47:54:3a:88:89:e3: 1c:47:8c:cf:58:be:99:08:13:46:75:a4:71:86:70: 61:de:f6:64:af:8e:c0:9f:20:2f:15:a0:48:eb:ea: 15:d3:92:4b:a0:ba:a5:d8:4b:13:7a:d9:7a:1c:66: 2d:97:dd:44:46:af:88:9b:29:0f:a0:47:e3:48:43: 8b:b1:50:5a:f6:6e:b4:90:40:b6:20:ad:e3:58:6d: 82:a8:b1:f2:77:fa:77:ca:f8:6d:10:f7:27:50:90: e7:8e:12:26:e8:71:9e:c0:60:0d:0d:e2:0d:f2:96: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:A3:4F:1B:AF:6B:C3:ED:33:26:46:EE:96:4A:7F:6C:E8:83:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/c5e030a6-56f9-33d7-bf1d-a6e9bd24df84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 192.34.101.0/24 IPv6: 2604:fbc0:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:d7:c7:d3:93:b7:ac:f1:4e:4a:26:db:38:f1:11:87:44:98: 09:d1:3a:24:7d:ec:37:f1:84:7f:ff:0b:f2:34:2f:f3:f6:4c: ac:16:7e:f0:f1:ca:10:e2:2e:58:bb:c6:a0:e4:5b:3f:55:8b: 54:7e:e1:39:2a:a3:e4:ca:48:05:f4:06:67:8c:69:d4:1d:61: cd:40:e8:fb:0f:33:e6:fe:f3:e5:96:34:fb:08:0e:f9:12:64: c5:d4:5d:57:76:77:b0:d5:cb:01:21:c9:eb:fd:83:d5:e4:7f: b2:53:92:ac:f2:5a:b8:49:c2:85:60:fd:0a:a5:1f:5d:5b:07: e9:d8:8c:8c:e6:7f:20:bd:47:16:7c:86:73:9e:01:9f:4d:05: c9:8b:53:fb:fa:1a:80:e9:33:57:ce:9d:2a:22:22:f5:c8:c9: 5c:cd:e9:ff:df:df:f8:a7:9f:6a:cb:5e:e1:ff:0e:61:60:41: 84:54:18:09:06:e3:49:cb:f0:8f:c5:31:74:0c:70:9a:f9:67: c6:ae:a6:1e:d0:af:59:13:3c:35:ff:68:8d:1e:c1:52:d1:19: 1e:f4:1d:b8:d8:ed:99:b5:e9:24:d4:17:d8:6b:5e:85:97:d0: 4b:98:42:eb:fc:96:ce:e7:07:02:9a:f5:90:08:0a:13:cd:b3: c1:f3:61:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEduAQNVD0VUR6yjj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk ZTlkOTQ4ODEtNzNlNS00OGMwLWJlMDAtZDg4Yzg0NmVkMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nkIZDfgaqPaFd1tXzfWalSS36z4FadngLt9 G3VFy2hy5b0WKUWK0/6WVfK32498GrCfZgmsBP41Wikdj8sELHik4xV21MNw5W0G hkulBqn8QHQ8qygUSBKHmgWtKh4NaM+XEYiVhs1/Kwsbad2jF5zRQPWMEqQlbXCm AxC38RFqKRaq7vzHLJsqoLVEyFxHVDqIieMcR4zPWL6ZCBNGdaRxhnBh3vZkr47A nyAvFaBI6+oV05JLoLql2EsTetl6HGYtl91ERq+ImykPoEfjSEOLsVBa9m60kEC2 IK3jWG2CqLHyd/p3yvhtEPcnUJDnjhIm6HGewGANDeIN8pZ/8wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFLao08br2vD7TMmRu6WSn9s6IOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYzVlMDMwYTYtNTZmOS0z M2Q3LWJmMWQtYTZlOWJkMjRkZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwCJlMA4E AgACMAgDBgQmBPvAEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDU18fTk7es8U5KJts48RGHRJgJ0Tokfew3 8YR//wvyNC/z9kysFn7w8coQ4i5Yu8ag5Fs/VYtUfuE5KqPkykgF9AZnjGnUHWHN QOj7DzPm/vPlljT7CA75EmTF1F1Xdnew1csBIcnr/YPV5H+yU5Ks8lq4ScKFYP0K pR9dWwfp2IyM5n8gvUcWfIZzngGfTQXJi1P7+hqA6TNXzp0qIiL1yMlczen/39/4 p59qy17h/w5hYEGEVBgJBuNJy/CPxTF0DHCa+WfGrqYe0K9ZEzw1/2iNHsFS0Rke 9B242O2Ztekk1BfYa16Fl9BLmELr/JbO5wcCmvWQCAoTzbPB82GC -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:27 2024 by rpki-client on console-fra.rpki-client.org