$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa File: a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa (raw, json) Hash identifier: e/7fLP3aunKBazp82ce+KN+DHAPejQLosLnngNSSYMU= Subject key identifier: 5F:DB:18:94:E1:D7:E3:06:88:E0:5F:97:30:B6:DE:3F:41:8C:5F:DF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285847D29F5A552E6F8A68D61C87E0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 3738 IP address blocks: 192.250.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:5a:55:2e:6f:8a:68:d6:1c:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=9d8f29dc-0c37-4f4f-9962-01f06ab0fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:4e:09:b2:d0:00:d1:f0:b1:87:c1:8c:17: 5e:92:f2:21:ff:af:47:d3:a4:c6:93:9e:ce:08:cc: 87:ed:b0:13:0b:8a:8d:db:55:d0:0f:22:97:5f:02: 8e:23:97:a4:36:05:2b:26:d0:eb:71:2a:24:d5:a2: 1f:f2:0c:5e:e3:3b:e4:26:f6:72:9f:34:e2:92:91: 09:be:02:d7:af:c5:1c:ec:d0:d0:ae:91:2a:95:2d: 3e:06:87:ad:19:c2:20:9d:c8:50:bf:b2:5a:4d:6c: 0a:db:dd:78:ae:97:fb:ad:83:45:9a:a5:32:53:44: 29:db:c6:61:2a:d9:e8:d4:be:0e:8e:d8:98:9b:9c: 0b:e6:16:c5:b8:fe:8d:81:18:be:9e:b3:cb:a2:d7: 16:a2:6e:26:3a:ba:17:80:a3:32:66:0d:59:fa:69: e6:01:56:67:d9:9d:ae:79:4c:7c:8a:c0:b9:eb:03: 1d:f9:ec:6e:b7:bd:ca:6c:26:6f:60:24:d3:31:b1: 5b:90:0a:58:c1:be:d9:a8:3d:91:c9:44:a8:42:3d: 0b:e4:83:26:89:03:f3:36:6e:9e:60:7c:f8:76:95: 71:63:60:fc:a4:ea:bd:c1:59:76:80:19:1a:62:ac: ed:35:5e:21:a8:a4:8c:6b:67:07:d4:80:ac:2d:6c: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DB:18:94:E1:D7:E3:06:88:E0:5F:97:30:B6:DE:3F:41:8C:5F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:fb:ec:bf:46:5f:6b:46:a2:25:34:de:ff:d0:96:00:4c:3b: 60:83:4c:81:65:fd:c2:ba:f6:6a:fc:99:88:ac:b1:5a:51:c2: f2:93:87:62:4f:94:00:2c:a3:62:b5:91:7c:8f:72:0c:56:cc: e0:02:5e:8d:de:65:81:d6:55:d2:36:1d:e2:79:88:e7:c5:82: b8:53:59:7c:1f:70:f7:88:34:f3:bb:57:ae:19:62:f7:4e:cb: 6d:f7:01:69:2a:3d:be:48:5f:0a:a4:db:0c:2c:27:14:55:55: 5f:a9:33:e0:e6:53:52:83:22:77:68:d3:2f:2f:ab:45:d4:c7: 6b:0b:03:e6:fc:02:14:9e:14:6d:73:79:66:78:6e:48:e5:ed: aa:25:e4:5a:0b:b8:cd:4f:11:dc:b8:a4:ff:b1:2c:41:a0:a5: 2e:fe:22:61:a9:52:90:04:fe:32:27:f1:f2:97:6b:a5:df:01: e9:17:30:21:06:5b:c4:51:90:b4:3a:4c:c2:cc:48:73:56:ab: e4:c4:31:03:a0:62:50:21:44:85:3a:d4:b1:24:67:f9:8a:d6: 64:c9:91:20:a3:f0:d4:3c:22:ed:d0:c1:8d:06:be:06:46:9d: 18:63:8c:f8:cc:11:51:67:6a:9b:f7:86:34:49:7d:b9:39:00: 1d:00:46:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn1pVLm+KaNYch+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk OWQ4ZjI5ZGMtMGMzNy00ZjRmLTk5NjItMDFmMDZhYjBmY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqZOCbLQANHwsYfBjBdekvIh/69H06TGk57O CMyH7bATC4qN21XQDyKXXwKOI5ekNgUrJtDrcSok1aIf8gxe4zvkJvZynzTikpEJ vgLXr8Uc7NDQrpEqlS0+BoetGcIgnchQv7JaTWwK2914rpf7rYNFmqUyU0Qp28Zh Ktno1L4OjtiYm5wL5hbFuP6NgRi+nrPLotcWom4mOroXgKMyZg1Z+mnmAVZn2Z2u eUx8isC56wMd+exut73KbCZvYCTTMbFbkApYwb7ZqD2RyUSoQj0L5IMmiQPzNm6e YHz4dpVxY2D8pOq9wVl2gBkaYqztNV4hqKSMa2cH1ICsLWwOfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/bGJTh1+MGiOBflzC23j9BjF/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYTVmYmExZWUtMzBkZC0z Zjc3LWJiNTktOThhYzQ1MGQ3MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI377L9GX2tGoiU03v/QlgBMO2CDTIFl/cK69mr8mYissVpRwvKTh2JP lAAso2K1kXyPcgxWzOACXo3eZYHWVdI2HeJ5iOfFgrhTWXwfcPeINPO7V64ZYvdO y233AWkqPb5IXwqk2wwsJxRVVV+pM+DmU1KDIndo0y8vq0XUx2sLA+b8AhSeFG1z eWZ4bkjl7aol5FoLuM1PEdy4pP+xLEGgpS7+ImGpUpAE/jIn8fKXa6XfAekXMCEG W8RRkLQ6TMLMSHNWq+TEMQOgYlAhRIU61LEkZ/mK1mTJkSCj8NQ8Iu3QwY0GvgZG nRhjjPjMEVFnapv3hjRJfbk5AB0ARuU= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org