$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa File: 999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (raw, json) Hash identifier: PHRMmlA/6BG5TybxajzT5/55sXMYu7jjqJ+1WhbRGt4= Subject key identifier: 80:28:67:97:C3:C4:86:5D:E0:6A:DC:2F:B5:6F:35:4E:54:4A:6F:66 Certificate issuer: /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Certificate serial: 010D0C9F43285847BEF6D1856295B96CDF6A1D00 Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 399385 IP address blocks: 205.137.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d1:85:62:95:b9:6c:df:6a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=dff2591e-4ef0-4918-93d4-4d342677ab1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:be:2c:92:cd:0e:29:37:f0:58:5f:f5:32: 42:6e:ea:d6:3b:51:93:2c:0a:41:ba:22:fa:bb:b2: cf:b2:94:6a:47:45:33:48:f8:36:da:ee:52:57:71: c4:a9:98:f1:62:49:20:89:d1:9d:71:d9:6b:65:0f: c4:90:91:a1:f3:77:bb:86:cb:81:bf:c5:88:65:ce: 6e:a4:b1:cd:57:44:f0:a6:0b:e7:0b:57:26:9e:db: d7:95:2e:73:89:21:3e:f8:bd:2f:6e:eb:25:21:d0: 60:18:0a:73:2b:a6:74:95:1b:e7:43:76:60:22:27: 54:a3:bc:b3:11:7e:04:b0:ed:05:0d:f9:92:33:5a: 4d:7d:0b:60:91:87:b0:5c:42:63:e6:be:7b:b8:5f: af:c4:97:07:cd:8e:18:11:e7:f7:61:fa:9e:1a:90: e3:64:1d:66:6e:a2:9f:35:2b:9d:99:bd:e3:e0:47: f0:de:86:e7:60:e4:0e:f1:55:b7:ab:24:24:91:e5: 42:a3:56:6f:8f:7b:53:5a:2d:3d:b6:45:c6:45:e3: 3e:e4:3a:f4:6c:b4:37:5c:96:45:fd:a2:0e:7b:c2: e7:64:5c:f4:8a:84:f1:f4:23:21:8a:38:a5:a5:13: 65:ff:9b:1f:d2:fa:81:1a:7a:00:60:f9:a7:37:48: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:28:67:97:C3:C4:86:5D:E0:6A:DC:2F:B5:6F:35:4E:54:4A:6F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl X509v3 Authority Key Identifier: keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer sbgp-ipAddrBlock: critical IPv4: 205.137.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3b:25:78:32:ce:59:e3:48:0a:ac:22:cb:a9:dd:51:b0:f5: 5f:5d:6e:19:04:88:f1:b6:6e:7b:1f:5a:cc:e5:e4:d3:f8:ef: 3f:38:8b:5b:30:dc:f2:49:07:b2:27:56:be:76:0b:48:57:35: f7:d8:b2:c7:72:7b:ec:2a:7f:bb:79:e0:07:04:2a:52:60:03: cf:6c:6e:20:73:ad:6e:1e:c6:87:ff:1f:e9:d1:7e:fa:e2:ea: 13:e1:bf:6f:1b:4a:47:19:90:fb:cf:c5:a1:8c:5b:67:3d:54: 19:6f:6d:43:79:df:c6:b2:d8:ad:26:a8:2b:e4:a6:fe:a2:2c: e9:9c:7f:15:33:f4:7b:8c:4a:be:54:4a:07:af:04:d9:b1:05: 2e:4a:4d:38:44:b9:48:b9:32:40:69:80:53:d0:1c:93:85:5e: 43:a8:13:36:f0:05:5b:8c:d6:70:45:6a:24:2e:9a:3d:c8:d7: 1d:3d:39:25:1a:fd:6c:52:83:85:10:12:34:d9:f4:ef:52:75: c9:f7:12:66:34:bd:77:08:0d:00:28:6c:32:7c:54:21:79:29: 25:82:0b:89:c0:a5:68:06:b0:07:0c:02:28:8c:13:f9:90:e5: f4:42:ad:97:f7:41:c4:68:ea:c3:73:a9:6b:bc:24:08:71:79: 7c:6e:03:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tGFYpW5bN9qHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm ZjYxMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ZGZmMjU5MWUtNGVmMC00OTE4LTkzZDQtNGQzNDI2NzdhYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI++LJLNDik38Fhf9TJCburWO1GTLApBuiL6 u7LPspRqR0UzSPg22u5SV3HEqZjxYkkgidGdcdlrZQ/EkJGh83e7hsuBv8WIZc5u pLHNV0TwpgvnC1cmntvXlS5ziSE++L0vbuslIdBgGApzK6Z0lRvnQ3ZgIidUo7yz EX4EsO0FDfmSM1pNfQtgkYewXEJj5r57uF+vxJcHzY4YEef3YfqeGpDjZB1mbqKf NSudmb3j4Efw3obnYOQO8VW3qyQkkeVCo1Zvj3tTWi09tkXGReM+5Dr0bLQ3XJZF /aIOe8LnZFz0ioTx9CMhijilpRNl/5sf0vqBGnoAYPmnN0hRkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAoZ5fDxIZd4GrcL7VvNU5USm9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3 Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOTk5YmFmM2QtNThiNC0z ZmRmLTliNWYtNGMwZDI4MDFlM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4 OWMzZWZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY7JXgyzlnjSAqsIsup3VGw9V9dbhkEiPG2bnsfWszl5NP47z84i1sw 3PJJB7InVr52C0hXNffYssdye+wqf7t54AcEKlJgA89sbiBzrW4exof/H+nRfvri 6hPhv28bSkcZkPvPxaGMW2c9VBlvbUN538ay2K0mqCvkpv6iLOmcfxUz9HuMSr5U SgevBNmxBS5KTThEuUi5MkBpgFPQHJOFXkOoEzbwBVuM1nBFaiQumj3I1x09OSUa /WxSg4UQEjTZ9O9Sdcn3EmY0vXcIDQAobDJ8VCF5KSWCC4nApWgGsAcMAiiME/mQ 5fRCrZf3QcRo6sNzqWu8JAhxeXxuA7w= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:22 2024 by rpki-client on console-ams.rpki-client.org