$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa File: 0d31c566-d234-3f99-8c25-5aa651e59579.roa (raw, json) Hash identifier: ts1YbOLyQFN6dJ3Pr9gSl5P9sLXHsdw7pIsBTz7viNo= Subject key identifier: 0E:A4:D4:EE:67:F4:7A:76:20:AA:83:25:F6:C0:0F:B1:72:1F:A6:09 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285847B531515AF490F3B5801FE9C0 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 40342 IP address blocks: 199.47.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:51:5a:f4:90:f3:b5:80:1f:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=2de74306-2bcd-4cfa-8765-9165eae5fa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a4:4a:ba:1e:c7:da:47:86:14:2f:86:6f:50: e3:dd:5f:9b:23:89:89:ea:ff:c5:14:de:f4:f8:b9: 53:19:3c:8e:85:36:2b:c6:c8:69:77:ed:90:77:1b: 4d:c5:85:d0:86:30:99:19:dc:35:5b:87:36:bd:da: 5d:6d:09:9c:ed:4e:e0:98:c5:73:c5:c1:a9:30:0b: 80:4f:31:f1:5b:e1:a4:98:d5:b9:d9:cb:a0:e7:9e: 1f:ce:3d:65:98:71:ea:09:76:88:97:09:e9:64:27: 79:e0:bc:c0:fe:6f:5e:4d:67:6f:b1:f5:7a:88:b5: c6:7a:27:8b:c6:20:6b:a5:53:98:93:38:7b:d4:47: bb:ef:aa:4f:13:2b:05:88:24:f2:ec:16:d1:63:c1: d4:63:d6:c3:76:33:eb:cb:09:ea:aa:77:41:bd:cc: e8:12:5d:d0:2a:29:38:50:4f:17:7f:50:0d:0b:06: 53:39:ce:78:23:9d:b6:00:8c:43:f5:aa:fe:f8:96: b7:8b:f4:30:fb:d7:14:f6:b3:e6:11:0c:61:8e:09: fc:8d:17:72:e9:fa:ba:55:41:0e:1f:b6:be:d8:e4: 69:e7:27:3b:eb:d0:07:80:95:3c:0c:39:51:96:d6: c1:31:91:76:7c:11:f5:b9:d3:18:78:e7:bc:b0:bb: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:D4:EE:67:F4:7A:76:20:AA:83:25:F6:C0:0F:B1:72:1F:A6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a4:6f:01:c6:df:b8:c2:ab:0a:63:e7:fe:0e:ed:b2:8c:68: 2e:a5:92:26:39:4f:d9:2f:7b:9e:bc:8d:1a:d2:88:63:93:75: d1:a6:a4:42:fd:6e:5d:d0:3d:b5:83:bc:10:0c:34:07:ea:ac: 1a:ad:0c:82:01:a1:0e:d2:82:37:fb:cf:58:1f:38:8c:f9:1c: 1d:a8:7d:5c:35:02:65:9b:6c:2e:b3:77:0f:79:09:c9:6e:8c: dc:11:0d:54:c4:00:c4:c9:ce:83:27:77:a5:7c:3b:bb:10:2f: 43:4a:e7:44:8e:fc:43:8e:20:56:e0:04:b9:04:24:10:2a:c0: 7d:ef:86:61:af:e4:d1:a3:c6:bb:59:f8:2c:a3:1e:33:b1:20: 50:4d:bb:6f:7b:33:f6:7f:6c:cd:7c:71:a1:08:7f:8c:b6:90: a5:c0:e0:6f:29:3e:68:f7:c5:1f:f5:43:64:89:a7:d2:db:b4: 5d:fc:c0:f2:76:05:d5:dd:4b:f4:d5:67:c7:2a:da:e7:a3:9f: 1e:23:b9:a0:62:13:fd:3f:e6:d7:55:82:25:22:90:01:a6:e3: bf:31:af:84:d3:bb:50:af:0f:6a:19:17:c9:f6:1d:d0:e7:63: c0:cb:fc:16:b7:cf:f0:3b:54:cb:9a:64:42:b3:1f:e0:63:7f: 04:91:5d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVFa9JDztYAf6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk MmRlNzQzMDYtMmJjZC00Y2ZhLTg3NjUtOTE2NWVhZTVmYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aRKuh7H2keGFC+Gb1Dj3V+bI4mJ6v/FFN70 +LlTGTyOhTYrxshpd+2QdxtNxYXQhjCZGdw1W4c2vdpdbQmc7U7gmMVzxcGpMAuA TzHxW+GkmNW52cug554fzj1lmHHqCXaIlwnpZCd54LzA/m9eTWdvsfV6iLXGeieL xiBrpVOYkzh71Ee776pPEysFiCTy7BbRY8HUY9bDdjPrywnqqndBvczoEl3QKik4 UE8Xf1ANCwZTOc54I522AIxD9ar++Ja3i/Qw+9cU9rPmEQxhjgn8jRdy6fq6VUEO H7a+2ORp5yc769AHgJU8DDlRltbBMZF2fBH1udMYeOe8sLt07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6k1O5n9Hp2IKqDJfbAD7FyH6YJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMGQzMWM1NjYtZDIzNC0z Zjk5LThjMjUtNWFhNjUxZTU5NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAykbwHG37jCqwpj5/4O7bKMaC6lkiY5T9kve568jRrSiGOTddGmpEL9 bl3QPbWDvBAMNAfqrBqtDIIBoQ7Sgjf7z1gfOIz5HB2ofVw1AmWbbC6zdw95Cclu jNwRDVTEAMTJzoMnd6V8O7sQL0NK50SO/EOOIFbgBLkEJBAqwH3vhmGv5NGjxrtZ +CyjHjOxIFBNu297M/Z/bM18caEIf4y2kKXA4G8pPmj3xR/1Q2SJp9LbtF38wPJ2 BdXdS/TVZ8cq2uejnx4juaBiE/0/5tdVgiUikAGm478xr4TTu1CvD2oZF8n2HdDn Y8DL/Ba3z/A7VMuaZEKzH+BjfwSRXS0= -----END CERTIFICATE-----Generated at Mon Nov 25 21:42:16 2024 by rpki-client on console-ams.rpki-client.org