$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa File: c8093db6-db1b-33e7-8501-039e28445968.roa (raw, json) Hash identifier: afm9XHme2fKDMpq5lEMOa/vCseqDAtZotIf0qlOD9Z0= Subject key identifier: F2:E1:12:09:F9:4C:EB:75:5A:7D:B8:C8:ED:59:26:20:9C:43:4D:02 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285847B7FBFAFD49AAA364EDFDD4A0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa Signing time: Thu 31 Oct 2024 01:00:31 +0000 ROA not before: Thu 31 Oct 2024 01:00:31 +0000 ROA not after: Wed 29 Jan 2025 02:00:31 +0000 asID: 3738 IP address blocks: 192.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:fb:fa:fd:49:aa:a3:64:ed:fd:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Oct 31 01:00:31 2024 GMT Not After : Jan 29 02:00:31 2025 GMT Subject: CN=bd2231f7-a279-4765-862f-4ded3096c3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:68:38:1c:f8:4a:3f:7d:08:55:bd:76:38: ae:78:8d:75:82:37:12:a8:1e:df:76:e2:73:e0:b9: 4f:8b:10:53:70:e6:47:6c:9f:1f:bc:6d:3a:d7:8f: b2:7f:1d:80:3c:83:5b:f9:2c:a3:8b:5f:5d:03:b4: 4f:63:c7:dd:9b:be:45:18:cd:e8:5f:ae:76:e3:31: d4:b2:bd:86:3d:4d:9a:ac:14:f5:cf:94:31:56:42: 37:39:6e:2a:f3:dc:a4:76:0e:76:e7:07:d2:8d:02: 12:cd:5c:92:15:77:71:c6:be:ba:1e:69:2e:c1:9d: 56:c6:7f:1c:4c:51:47:5c:f5:b0:38:c5:8d:4e:17: 54:fc:e3:ce:05:35:fc:7b:75:52:94:99:21:01:cd: 67:95:6c:50:ab:21:a9:8f:3a:c0:ed:74:65:1d:60: f9:77:55:31:a6:12:a9:b3:7b:bb:cf:60:7b:ee:b6: 6e:11:e1:b7:f2:f5:c8:64:16:fb:51:f1:2d:5f:e4: 13:d7:41:09:34:34:2e:36:e9:bd:c8:15:6d:d6:28: 9c:cf:45:b5:80:fb:fa:41:3b:b1:bc:47:96:0e:7a: 15:f4:67:ae:d9:9d:18:b4:eb:42:b9:39:44:34:dc: ef:fa:ff:80:d3:a6:c0:0d:3b:73:f2:c8:ee:e5:a3: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:12:09:F9:4C:EB:75:5A:7D:B8:C8:ED:59:26:20:9C:43:4D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:78:1d:7f:36:75:41:df:d8:a9:4a:8b:a3:1d:3f:fe:ef:07: 41:ce:a8:8b:bf:ce:1f:7d:ab:08:64:97:01:4b:e1:e0:52:3e: 78:6d:8e:42:0a:3a:aa:49:7f:e1:98:39:85:70:33:c4:58:b8: 5f:e9:72:dc:bb:2d:d1:34:6c:f9:39:42:56:d9:07:10:50:7b: 59:57:21:ab:1c:23:9f:f9:99:2a:4c:66:a1:89:cf:89:96:fc: a6:78:cf:bd:2f:5a:36:dc:c2:6e:68:fd:83:f9:26:a2:c6:61: 1f:f7:49:79:f8:bc:59:99:7c:c4:f8:be:fd:b2:b5:9f:42:b3: 4e:f1:d0:77:b5:3c:46:1b:f0:0a:de:a2:75:25:1d:d5:f9:ce: 06:32:5b:60:6d:b9:b3:d3:79:74:e2:73:b7:fc:5b:ab:fb:01: 13:dd:9c:8e:8c:fa:ba:fa:dd:14:70:f8:17:92:23:21:f1:da: bd:f4:0f:51:c5:04:f0:3c:e1:b2:39:bd:a1:c4:3e:f4:b7:03: b8:00:8e:cd:31:94:b8:d4:28:4d:ca:98:c7:e8:7e:e0:e5:cd: c6:71:74:b7:b4:cd:b8:30:16:18:43:eb:ef:db:3e:aa:9b:f1: 52:a0:85:09:f3:75:aa:33:b4:c5:e6:44:0e:40:f5:9d:31:9e: ef:47:f1:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe3+/r9SaqjZO391KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MTAzMTAxMDAzMVoXDTI1MDEyOTAyMDAzMVowLzEtMCsGA1UEAxMk YmQyMjMxZjctYTI3OS00NzY1LTg2MmYtNGRlZDMwOTZjM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjFoOBz4Sj99CFW9djiueI11gjcSqB7fduJz 4LlPixBTcOZHbJ8fvG0614+yfx2APINb+Syji19dA7RPY8fdm75FGM3oX6524zHU sr2GPU2arBT1z5QxVkI3OW4q89ykdg525wfSjQISzVySFXdxxr66HmkuwZ1Wxn8c TFFHXPWwOMWNThdU/OPOBTX8e3VSlJkhAc1nlWxQqyGpjzrA7XRlHWD5d1UxphKp s3u7z2B77rZuEeG38vXIZBb7UfEtX+QT10EJNDQuNum9yBVt1iicz0W1gPv6QTux vEeWDnoV9Geu2Z0YtOtCuTlENNzv+v+A06bADTtz8sju5aPAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLhEgn5TOt1Wn24yO1ZJiCcQ00CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzgwOTNkYjYtZGIxYi0z M2U3LTg1MDEtMDM5ZTI4NDQ1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB4HX82dUHf2KlKi6MdP/7vB0HOqIu/zh99qwhklwFL4eBSPnhtjkIK OqpJf+GYOYVwM8RYuF/pcty7LdE0bPk5QlbZBxBQe1lXIascI5/5mSpMZqGJz4mW /KZ4z70vWjbcwm5o/YP5JqLGYR/3SXn4vFmZfMT4vv2ytZ9Cs07x0He1PEYb8Are onUlHdX5zgYyW2BtubPTeXTic7f8W6v7ARPdnI6M+rr63RRw+BeSIyHx2r30D1HF BPA84bI5vaHEPvS3A7gAjs0xlLjUKE3KmMfofuDlzcZxdLe0zbgwFhhD6+/bPqqb 8VKghQnzdaoztMXmRA5A9Z0xnu9H8QE= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org