$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa File: 3c42f4d1-9c05-38d4-8804-432f88c01675.roa (raw, json) Hash identifier: c/YNlSFnuwtMV7tq/EYThbw+yas2F71Ef8sMoppUD4k= Subject key identifier: 44:41:63:1D:9A:8C:47:CF:A1:4A:E3:3A:E9:6B:AD:91:8E:D6:6E:1D Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285847BD915B3C07340151544D3880 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa Signing time: Sat 02 Nov 2024 01:00:31 +0000 ROA not before: Sat 02 Nov 2024 01:00:31 +0000 ROA not after: Fri 31 Jan 2025 02:00:31 +0000 asID: 3738 IP address blocks: 192.250.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bd:91:5b:3c:07:34:01:51:54:4d:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Nov 2 01:00:31 2024 GMT Not After : Jan 31 02:00:31 2025 GMT Subject: CN=6b718bfe-7d87-47ed-bbbf-8a8fd91a0c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:42:d4:43:34:4c:07:ef:7e:6e:28:3b:6a: c8:f4:4a:2d:09:0c:91:b0:89:99:84:c7:62:be:43: 65:61:5f:c5:e6:11:2b:0a:22:17:3e:62:47:64:8d: 6c:0a:22:78:25:c9:7f:ae:aa:f1:97:a3:f5:56:4d: d8:96:1f:44:2e:5c:39:bb:cf:56:10:1f:d5:60:e7: 62:6e:46:71:4a:2a:bf:6a:62:b9:a0:5f:aa:85:8f: 3b:dd:33:f8:6b:4f:66:0e:b5:e9:fb:fe:f8:83:ba: 98:bf:fc:f8:54:49:ea:ca:4f:3b:ec:b6:74:aa:a0: f4:2e:c4:1a:9e:4a:19:7c:b1:3e:86:dc:f7:66:9e: 69:f8:22:ce:c7:aa:c6:18:29:a1:5a:01:cb:30:6f: ee:e9:94:1c:7f:91:bc:27:79:08:27:dc:29:14:e1: 3e:b0:b5:45:63:3f:85:e0:e5:ab:0e:8a:f8:1e:96: 11:df:49:74:32:b7:05:4d:0c:d0:6f:77:99:00:96: 49:22:8a:6d:d6:63:8b:bc:29:b9:a9:09:67:c2:3a: 89:b7:ec:2e:4a:3f:49:4a:fd:98:20:ac:82:35:f2: d8:4e:8d:68:19:8e:7e:26:43:af:56:1b:ec:ac:b6: b3:c5:e2:6b:f7:90:44:44:ea:ed:b8:11:44:0e:48: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:63:1D:9A:8C:47:CF:A1:4A:E3:3A:E9:6B:AD:91:8E:D6:6E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:71:80:d1:93:9e:aa:32:00:8c:88:8b:96:a2:a2:64:5f:75: 4e:bb:cf:aa:74:3e:b4:7b:31:de:6b:ee:8e:35:4f:e5:bb:2c: bb:63:f7:59:19:bf:cd:43:83:c6:62:75:ac:9e:6e:7d:79:3d: b5:4b:d6:4f:54:3d:fa:9d:ff:e8:ce:32:4e:53:27:82:3f:70: 56:d8:d1:aa:af:01:83:b9:7d:00:9b:33:0a:2d:c4:6f:b2:98: b9:b2:1a:c1:24:41:1a:02:3a:b8:49:9b:3e:b4:a6:6b:4f:8f: 8f:04:3a:8c:a0:dd:a0:03:bc:17:71:5e:e9:f4:e3:29:10:f4: aa:2d:81:ea:c1:f8:b0:28:c8:7f:ad:b9:f2:ab:18:74:d6:78: e1:41:23:f0:70:4c:be:31:9b:57:cb:a8:0a:fb:f0:ad:c1:f3: c9:d5:e6:14:60:58:4c:49:e9:f6:5b:5d:d7:a7:d2:ca:83:80: 85:40:17:c4:5f:77:ae:80:87:b8:f2:b8:4b:2e:c1:c1:ad:b1: 70:df:25:ce:69:97:db:80:a9:8b:70:f1:ef:00:57:8e:02:b8: 9f:22:f6:10:6b:05:7b:64:4d:88:3b:90:9b:c0:fe:ce:bd:d5: ac:db:c3:6a:7d:b5:c9:17:a5:c7:a0:28:44:07:ef:81:f7:c3: 85:95:20:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVs8BzQBUVRNOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmI3MThiZmUtN2Q4Ny00N2VkLWJiYmYtOGE4ZmQ5MWEwYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJNC1EM0TAfvfm4oO2rI9EotCQyRsImZhMdi vkNlYV/F5hErCiIXPmJHZI1sCiJ4Jcl/rqrxl6P1Vk3Ylh9ELlw5u89WEB/VYOdi bkZxSiq/amK5oF+qhY873TP4a09mDrXp+/74g7qYv/z4VEnqyk877LZ0qqD0LsQa nkoZfLE+htz3Zp5p+CLOx6rGGCmhWgHLMG/u6ZQcf5G8J3kIJ9wpFOE+sLVFYz+F 4OWrDor4HpYR30l0MrcFTQzQb3eZAJZJIopt1mOLvCm5qQlnwjqJt+wuSj9JSv2Y IKyCNfLYTo1oGY5+JkOvVhvsrLazxeJr95BEROrtuBFEDkjPGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERBYx2ajEfPoUrjOulrrZGO1m4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2M0MmY0ZDEtOWMwNS0z OGQ0LTg4MDQtNDMyZjg4YzAxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxxgNGTnqoyAIyIi5aiomRfdU67z6p0PrR7Md5r7o41T+W7LLtj91kZ v81Dg8Zidayebn15PbVL1k9UPfqd/+jOMk5TJ4I/cFbY0aqvAYO5fQCbMwotxG+y mLmyGsEkQRoCOrhJmz60pmtPj48EOoyg3aADvBdxXun04ykQ9KotgerB+LAoyH+t ufKrGHTWeOFBI/BwTL4xm1fLqAr78K3B88nV5hRgWExJ6fZbXden0sqDgIVAF8Rf d66Ah7jyuEsuwcGtsXDfJc5pl9uAqYtw8e8AV44CuJ8i9hBrBXtkTYg7kJvA/s69 1azbw2p9tckXpcegKEQH74H3w4WVIHc= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org