$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa File: 8462c1ed-9529-306f-9950-18fd383eb4c7.roa (raw, json) Hash identifier: qzAmHa9hN7Gx/QvE0+GPeM76/+Xx7DAIQ1urNvUvZuo= Subject key identifier: CB:62:00:8C:4A:14:38:4A:EB:46:5A:25:08:01:4A:7E:B2:B5:89:95 Certificate issuer: /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Certificate serial: 010D0C9F4328584726D07E574F56ED5B04602580 Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 64223 IP address blocks: 192.251.56.0/24 maxlen: 24 209.94.85.0/24 maxlen: 24 2620:70:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7e:57:4f:56:ed:5b:04:60:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=41365e49-12e0-4fe0-888a-7e7efbad861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:eb:32:bc:a9:0b:b4:50:17:91:6c:d9:a5: b2:75:dc:6e:6c:15:cd:2e:9e:d4:52:dd:f0:f0:df: a7:c8:93:8a:a2:11:ad:53:b5:33:84:cf:14:a3:f6: ee:af:20:41:95:cc:ce:61:09:89:5d:77:29:ae:36: 2a:b6:46:1f:e4:75:52:f6:88:38:40:3f:be:d6:79: 38:99:d0:b7:05:33:06:24:32:12:e6:c5:52:4e:65: 25:9e:f8:f8:04:a0:e8:ee:95:39:a9:91:32:b9:cf: 7a:2e:2e:8b:56:7f:0e:5f:72:5d:10:b2:a1:22:68: e8:17:dc:0e:97:d3:97:21:5b:dd:05:14:13:4f:56: 71:d3:f0:c5:e8:36:20:b6:a7:1c:f9:a5:cf:0a:90: b1:5a:da:d8:b0:1b:c1:2e:3a:48:07:11:dc:f3:b8: 20:26:01:18:96:04:9b:40:b0:ac:5a:8f:a7:14:37: de:19:a8:d6:3e:88:0c:65:cc:ce:e0:7b:5a:80:84: 38:28:c6:89:28:eb:c4:73:74:15:5d:5e:0d:f3:a2: ee:65:76:c9:09:98:75:d2:68:30:10:81:a2:93:9b: 27:3b:7e:6c:6d:0a:b2:90:6c:f6:9b:b4:01:39:19: 4d:dd:95:73:e2:0e:15:b9:88:f2:de:da:e6:95:a0: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:62:00:8C:4A:14:38:4A:EB:46:5A:25:08:01:4A:7E:B2:B5:89:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl X509v3 Authority Key Identifier: keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer sbgp-ipAddrBlock: critical IPv4: 192.251.56.0/24 209.94.85.0/24 IPv6: 2620:70:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:de:b8:02:2e:c0:50:37:2d:d8:6a:31:eb:d7:fc:4e:46:83: 6f:c6:3a:07:a5:a8:b3:ca:d2:a6:7c:76:4c:36:a3:57:9d:7f: fc:bb:af:e6:1f:d5:87:db:d3:a8:a5:0d:e9:69:0c:27:cc:4e: 84:e7:87:b7:b1:2b:23:b6:58:42:3b:3e:23:e6:e9:9a:10:97: 30:62:b8:5f:ce:14:58:67:d3:b1:c2:fe:a6:7c:58:04:8d:ec: 6d:77:2a:a6:27:13:32:42:67:20:00:a6:1e:51:19:ac:ba:63: 65:0f:f2:e0:d3:73:93:8a:b2:db:ba:82:e8:e2:48:3c:2f:a8: 9a:de:84:e9:71:0a:38:ea:75:5a:42:69:83:32:b8:a5:95:66: b9:17:30:b4:33:ef:0d:04:ee:73:ee:8f:9b:8e:d3:9f:ec:1e: 1c:b2:11:b8:94:71:d6:33:e0:ba:98:a1:ea:24:d4:70:db:2d: be:f4:45:3f:93:82:5c:4f:e6:d6:3c:14:de:d4:32:75:25:7b: 5b:d6:5f:48:fa:3c:b7:7a:22:ba:a0:ab:72:33:da:39:9d:b9: 5c:c6:70:74:f5:b3:18:1d:45:a0:66:8d:13:99:74:58:67:b3: 0e:d9:f6:67:31:4d:aa:27:a1:59:5c:39:a6:7b:ce:f2:7e:13: 75:f9:03:72 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEcm0H5XT1btWwRgJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxZjVlNmQtYWRhYS00M2Q1LTkzYTMtZjk2YzRiNzJm M2M4MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk NDEzNjVlNDktMTJlMC00ZmUwLTg4OGEtN2U3ZWZiYWQ4NjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMDrMrypC7RQF5Fs2aWyddxubBXNLp7UUt3w 8N+nyJOKohGtU7UzhM8Uo/buryBBlczOYQmJXXcprjYqtkYf5HVS9og4QD++1nk4 mdC3BTMGJDIS5sVSTmUlnvj4BKDo7pU5qZEyuc96Li6LVn8OX3JdELKhImjoF9wO l9OXIVvdBRQTT1Zx0/DF6DYgtqcc+aXPCpCxWtrYsBvBLjpIBxHc87ggJgEYlgSb QLCsWo+nFDfeGajWPogMZczO4HtagIQ4KMaJKOvEc3QVXV4N86LuZXbJCZh10mgw EIGik5snO35sbQqykGz2m7QBORlN3ZVz4g4VuYjy3trmlaB7uQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFMtiAIxKFDhK60ZaJQgBSn6ytYmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFm NWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZjNGI3MmYzYzgvODQ2MmMxZWQtOTUyOS0z MDZmLTk5NTAtMThmZDM4M2ViNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxZjVlNmQtYWRhYS00M2Q1LTkz YTMtZjk2YzRiNzJmM2M4LzI5MWY1ZTZkLWFkYWEtNDNkNS05M2EzLWY5NmM0Yjcy ZjNjOC5jcmwwHwYDVR0jBBgwFoAUN1WCZ2iQYj+jsmfjU4Vm8haiHgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFmNWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZj NGI3MmYzYzguY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwPs4AwQA 0V5VMA8EAgACMAkDBwAmIABwQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYN64Ai7AUDct2Gox69f8TkaD b8Y6B6Wos8rSpnx2TDajV51//Luv5h/Vh9vTqKUN6WkMJ8xOhOeHt7ErI7ZYQjs+ I+bpmhCXMGK4X84UWGfTscL+pnxYBI3sbXcqpicTMkJnIACmHlEZrLpjZQ/y4NNz k4qy27qC6OJIPC+omt6E6XEKOOp1WkJpgzK4pZVmuRcwtDPvDQTuc+6Pm47Tn+we HLIRuJRx1jPgupih6iTUcNstvvRFP5OCXE/m1jwU3tQydSV7W9ZfSPo8t3oiuqCr cjPaOZ25XMZwdPWzGB1FoGaNE5l0WGezDtn2ZzFNqiehWVw5pnvO8n4TdfkDcg== -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org