$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/134181ba-ffac-3cb8-8f81-811d1b6746e3.roa File: 134181ba-ffac-3cb8-8f81-811d1b6746e3.roa (raw, json) Hash identifier: okRMJPjt20NBXHoL2Fhvf2FQDNkqSlmpSDUsTpxjv5U= Subject key identifier: DE:8B:7C:AD:2A:C8:FC:78:AE:8B:01:A6:97:66:A1:54:98:EC:E3:4C Certificate issuer: /CN=1b9641fa-fbd8-4692-ac29-eeb56994ee15 Certificate serial: 010D0C9F43285847A5D6A1CFE584B261127FF110 Authority key identifier: 3F:66:F8:E8:25:06:D1:01:1C:E8:A5:4B:98:50:60:F3:2F:D6:C1:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/134181ba-ffac-3cb8-8f81-811d1b6746e3.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 19230 IP address blocks: 192.252.240.0/20 maxlen: 20 2620:0:ce0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/1b9641fa-fbd8-4692-ac29-eeb56994ee15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/1b9641fa-fbd8-4692-ac29-eeb56994ee15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a1:cf:e5:84:b2:61:12:7f:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9641fa-fbd8-4692-ac29-eeb56994ee15 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=e26d8caa-acb8-4289-a6ca-f2f3eed6d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:32:a2:8a:c3:37:98:d8:73:26:ce:97:52: a7:a8:33:a4:fb:61:ed:35:cd:a5:81:13:d9:a3:54: 91:6b:48:74:51:04:c1:93:b2:15:d6:30:a5:19:7a: aa:0b:34:e1:96:46:cd:6a:68:2a:e9:a0:4e:23:b7: 21:5e:57:21:c3:8e:94:45:b7:5d:0c:e2:f3:f8:da: 6c:58:11:08:df:07:61:97:54:0f:81:5b:c7:6f:82: cc:54:4c:e8:09:1f:bf:9c:5f:36:17:f4:8b:1f:ea: de:22:65:e0:bb:14:c4:d5:3f:63:33:89:ae:e8:23: 50:4a:8a:77:a0:ad:5e:f2:49:a1:e0:5f:9e:c5:53: 83:f6:88:c6:2b:01:80:5d:83:3c:d8:a1:cf:82:bf: 3a:e6:1b:bf:92:ff:ef:03:80:81:ee:32:e1:8a:13: b0:de:93:77:3a:18:52:d9:df:6c:c8:b5:23:c7:78: 4d:49:fd:21:5f:f4:04:a3:6b:45:16:aa:bb:71:71: c8:b2:10:ae:e8:bd:d2:04:67:2b:bc:a7:ac:81:e9: f3:57:54:ac:06:00:94:a0:f8:d6:e4:8f:d8:b4:28: cf:15:9d:99:be:48:6d:30:35:b4:24:bd:f1:3b:a8: e1:67:b7:db:e9:c9:7c:29:18:9f:07:95:29:23:cd: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:7C:AD:2A:C8:FC:78:AE:8B:01:A6:97:66:A1:54:98:EC:E3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/134181ba-ffac-3cb8-8f81-811d1b6746e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15/1b9641fa-fbd8-4692-ac29-eeb56994ee15.crl X509v3 Authority Key Identifier: keyid:3F:66:F8:E8:25:06:D1:01:1C:E8:A5:4B:98:50:60:F3:2F:D6:C1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b9641fa-fbd8-4692-ac29-eeb56994ee15.cer sbgp-ipAddrBlock: critical IPv4: 192.252.240.0/20 IPv6: 2620:0:ce0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:09:a3:d9:f5:27:72:6f:7e:9f:e2:80:0b:87:22:22:eb:3e: 16:b5:66:4e:d7:bc:f8:1e:3d:f9:3e:a6:91:be:3c:2d:8e:4f: 82:4b:c0:a2:66:0b:0e:a6:db:48:47:b1:c7:b3:33:dc:21:d2: c8:52:6d:b7:8b:58:35:f9:6f:f2:10:50:61:2d:3f:86:04:d4: 41:2d:91:32:d7:12:9d:a7:f7:0b:99:a2:79:ee:0d:d0:3e:65: d3:85:1e:45:bc:27:1f:12:3d:14:16:b2:d9:93:d5:27:c3:dc: 2d:59:fb:77:3a:de:45:45:d8:54:90:3b:bd:d6:e7:6f:67:7e: bc:68:31:e8:96:27:74:ed:ff:6d:4d:8a:ba:99:d2:83:4d:d3: e7:6c:94:2a:59:17:36:52:61:f0:36:f4:7d:06:3d:d0:df:b9: 4c:83:47:3b:00:78:33:59:95:94:bd:b3:34:3d:87:0f:d1:e0: 77:7f:ee:ca:f3:29:e1:49:0e:85:78:c7:ad:0b:68:3d:ef:11: b4:e8:96:c5:a3:e9:55:7d:e4:dc:e2:44:0a:09:38:e4:08:99: 35:28:29:b8:e5:71:46:27:16:75:f3:e4:74:d2:f1:fe:e6:8b: eb:d9:ea:f7:6f:cf:41:47:46:3c:d4:ad:92:61:b6:16:b5:1d: 87:f9:68:c4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEel1qHP5YSyYRJ/8RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5NjQxZmEtZmJkOC00NjkyLWFjMjktZWViNTY5OTRl ZTE1MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZTI2ZDhjYWEtYWNiOC00Mjg5LWE2Y2EtZjJmM2VlZDZkM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQyoorDN5jYcybOl1KnqDOk+2HtNc2lgRPZ o1SRa0h0UQTBk7IV1jClGXqqCzThlkbNamgq6aBOI7chXlchw46URbddDOLz+Nps WBEI3wdhl1QPgVvHb4LMVEzoCR+/nF82F/SLH+reImXguxTE1T9jM4mu6CNQSop3 oK1e8kmh4F+exVOD9ojGKwGAXYM82KHPgr865hu/kv/vA4CB7jLhihOw3pN3OhhS 2d9syLUjx3hNSf0hX/QEo2tFFqq7cXHIshCu6L3SBGcrvKesgenzV1SsBgCUoPjW 5I/YtCjPFZ2ZvkhtMDW0JL3xO6jhZ7fb6cl8KRifB5UpI8075QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFN6LfK0qyPx4rosBppdmoVSY7ONMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjk2 NDFmYS1mYmQ4LTQ2OTItYWMyOS1lZWI1Njk5NGVlMTUvMTM0MTgxYmEtZmZhYy0z Y2I4LThmODEtODExZDFiNjc0NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWI5NjQxZmEtZmJkOC00NjkyLWFj MjktZWViNTY5OTRlZTE1LzFiOTY0MWZhLWZiZDgtNDY5Mi1hYzI5LWVlYjU2OTk0 ZWUxNS5jcmwwHwYDVR0jBBgwFoAUP2b46CUG0QEc6KVLmFBg8y/WwVUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjk2NDFmYS1mYmQ4LTQ2OTItYWMyOS1lZWI1 Njk5NGVlMTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwPzwMA8E AgACMAkDBwAmIAAADOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA1gmj2fUncm9+n+KAC4ciIus+FrVmTte8 +B49+T6mkb48LY5PgkvAomYLDqbbSEexx7Mz3CHSyFJtt4tYNflv8hBQYS0/hgTU QS2RMtcSnaf3C5miee4N0D5l04UeRbwnHxI9FBay2ZPVJ8PcLVn7dzreRUXYVJA7 vdbnb2d+vGgx6JYndO3/bU2KupnSg03T52yUKlkXNlJh8Db0fQY90N+5TINHOwB4 M1mVlL2zND2HD9Hgd3/uyvMp4UkOhXjHrQtoPe8RtOiWxaPpVX3k3OJECgk45AiZ NSgpuOVxRicWdfPkdNLx/uaL69nq92/PQUdGPNStkmG2FrUdh/loxA== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org