$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa File: c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json) Hash identifier: AiLiftlZ9Z3U5LvKSR9/l1sp8YZ7sfPOifD3oMNFC18= Subject key identifier: EA:13:2D:B6:6D:AF:1F:E8:24:9E:EC:18:6F:96:3B:D1:3D:02:14:75 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F43285847D29F5828F9D1106A5EB437C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 3738 IP address blocks: 192.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:58:28:f9:d1:10:6a:5e:b4:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=96280d49-e950-41f7-845b-ba87ffae815d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:42:64:55:8a:02:0b:18:ad:8b:0d:97:d2: 40:d6:50:de:5e:b6:78:af:fc:94:29:a4:28:d9:62: ee:00:30:f0:40:c4:09:7d:bf:72:63:d3:b1:2f:e1: c9:06:00:55:0a:b7:a6:2d:65:e4:5a:45:53:59:b4: 37:c9:22:71:34:88:9e:3c:76:ef:58:31:ca:97:a5: 89:d9:0f:75:b7:1e:87:8f:23:d9:f3:d9:88:1a:45: af:43:5c:6c:00:b4:61:66:36:21:f3:3d:49:47:49: 4d:5a:85:ec:ed:04:a1:69:3b:49:af:40:4e:b9:2f: 83:9b:c3:7e:f9:9c:67:6e:74:22:a2:8b:96:66:6a: ae:e5:d0:45:0e:3d:e3:bc:1b:f4:58:d3:60:a8:f9: 47:52:44:e2:32:13:c7:8b:12:e3:2c:53:ac:fc:2b: bd:cf:2c:f8:ea:8b:b8:b3:34:20:fb:3a:f5:25:fd: ca:20:5e:39:ae:0f:05:50:25:56:0e:83:73:8a:4e: a4:6b:d1:18:e9:ce:4f:54:44:67:be:52:be:ee:06: 4b:ae:fa:40:54:26:cc:53:64:77:0f:ad:5e:d3:36: 7f:88:37:03:ec:2d:94:26:73:90:15:0e:32:9b:10: 89:e4:6a:8d:6f:ec:84:9b:50:f6:40:b3:47:f7:47: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:13:2D:B6:6D:AF:1F:E8:24:9E:EC:18:6F:96:3B:D1:3D:02:14:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b4:a5:ce:7e:0f:0e:8b:4a:1b:39:f2:1b:02:55:5f:5a:05: 76:51:0c:88:1f:ca:ec:52:07:13:0e:4e:8a:7f:d1:0c:94:5e: 46:80:e7:41:3c:c2:f8:c1:88:64:2b:5b:d7:4c:ac:b1:48:8f: 13:85:29:27:ad:8e:b4:a4:6f:01:ab:c8:82:b3:dd:50:32:f0: c5:b7:ce:b6:d1:38:26:63:4c:27:14:14:cc:a6:9a:73:c7:e3: 6a:ba:79:fe:a1:79:c1:ac:32:7b:82:2e:e0:d8:84:c8:d0:2c: da:83:87:22:01:e7:64:d1:08:f8:d5:1e:ed:ee:16:1e:f9:50: bf:da:49:f7:31:68:5d:02:55:0b:91:86:67:3f:e2:00:95:74: d9:03:3e:b3:56:f5:96:25:80:c7:b6:ee:52:99:ad:1e:20:15: df:87:ec:6c:e4:14:94:a6:4b:73:e1:57:d6:7b:16:95:10:e0: 7b:72:e4:04:a2:34:b3:a7:6c:99:bb:d4:90:b2:c7:55:2d:fb: f4:2f:c1:85:c3:b7:d2:81:bc:2a:72:b0:6c:bc:42:95:b3:24: 1f:87:b7:7b:79:0a:7d:48:8f:d8:f6:6b:84:5e:18:15:6f:7c: b5:1f:52:c8:32:26:eb:32:5e:4a:45:7b:53:5f:c4:83:03:96: 02:86:64:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn1go+dEQal60N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk OTYyODBkNDktZTk1MC00MWY3LTg0NWItYmE4N2ZmYWU4MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU5CZFWKAgsYrYsNl9JA1lDeXrZ4r/yUKaQo 2WLuADDwQMQJfb9yY9OxL+HJBgBVCremLWXkWkVTWbQ3ySJxNIiePHbvWDHKl6WJ 2Q91tx6HjyPZ89mIGkWvQ1xsALRhZjYh8z1JR0lNWoXs7QShaTtJr0BOuS+Dm8N+ +ZxnbnQioouWZmqu5dBFDj3jvBv0WNNgqPlHUkTiMhPHixLjLFOs/Cu9zyz46ou4 szQg+zr1Jf3KIF45rg8FUCVWDoNzik6ka9EY6c5PVERnvlK+7gZLrvpAVCbMU2R3 D61e0zZ/iDcD7C2UJnOQFQ4ymxCJ5GqNb+yEm1D2QLNH90fyLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoTLbZtrx/oJJ7sGG+WO9E9AhR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzg5NWMyMzAtOGZlMS0z ZDkzLWFkNGItMzg1ZTc3ZTJiMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC0pc5+Dw6LShs58hsCVV9aBXZRDIgfyuxSBxMOTop/0QyUXkaA50E8 wvjBiGQrW9dMrLFIjxOFKSetjrSkbwGryIKz3VAy8MW3zrbROCZjTCcUFMymmnPH 42q6ef6hecGsMnuCLuDYhMjQLNqDhyIB52TRCPjVHu3uFh75UL/aSfcxaF0CVQuR hmc/4gCVdNkDPrNW9ZYlgMe27lKZrR4gFd+H7GzkFJSmS3PhV9Z7FpUQ4Hty5ASi NLOnbJm71JCyx1Ut+/QvwYXDt9KBvCpysGy8QpWzJB+Ht3t5Cn1Ij9j2a4ReGBVv fLUfUsgyJusyXkpFe1NfxIMDlgKGZBY= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org