$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa File: 1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa (raw, json) Hash identifier: 9GCcoLsH1XtwR0rfSSZiIoCHqeeu6lO/k0NIexMz40w= Subject key identifier: F1:9E:E7:83:8F:23:39:67:07:A4:1B:F9:EA:BC:F1:DA:20:5F:1D:30 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F43285847CD6C41EC30E8491CBF100780 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa Signing time: Thu 07 Nov 2024 17:18:47 +0000 ROA not before: Thu 07 Nov 2024 17:18:47 +0000 ROA not after: Wed 05 Feb 2025 17:18:47 +0000 asID: 397373 IP address blocks: 192.154.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cd:6c:41:ec:30:e8:49:1c:bf:10:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Nov 7 17:18:47 2024 GMT Not After : Feb 5 17:18:47 2025 GMT Subject: CN=3d5aafee-d6a5-4a71-8257-48b3d8b077e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:45:d6:8f:8a:64:39:0d:a7:11:f2:17:31: e8:c9:5e:4e:5c:ef:bc:64:e8:c7:94:01:6d:8b:ee: 40:e2:3c:e1:e5:11:2d:d6:6d:11:70:c6:84:d1:f3: 9d:8a:43:b3:82:e1:41:d4:08:e7:96:97:46:49:97: bc:3d:67:00:cf:3f:c6:ad:9b:d7:ee:41:8f:51:16: 20:2b:de:9c:63:53:c5:c2:b8:a3:67:e9:fd:51:a5: a6:4f:8c:fd:55:fb:3e:bd:0a:cb:c9:2b:93:69:34: 13:4c:39:b3:fa:84:38:12:26:ea:0b:55:33:5a:9f: 38:59:fe:83:f8:df:22:a3:c9:6a:33:60:c7:7b:73: 50:70:3a:07:00:e0:23:08:b3:7c:0d:ac:e0:3d:61: f6:10:cb:5f:20:8a:4f:81:ba:99:81:25:f1:fb:5c: 84:37:6f:00:b3:5d:a7:b5:31:32:7d:66:b1:d3:f3: a5:70:4e:06:c8:50:4a:a0:94:20:04:7a:44:05:f7: e7:c9:a6:c1:55:0b:f2:da:51:dd:52:f3:60:1f:f2: ed:e1:09:59:ff:28:e7:2b:84:38:d1:8d:0a:8c:0c: fe:ee:58:37:56:4b:8d:44:28:0e:e3:e4:45:7d:09: 77:19:e3:c8:64:38:92:31:ea:cc:4c:39:1b:09:ef: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9E:E7:83:8F:23:39:67:07:A4:1B:F9:EA:BC:F1:DA:20:5F:1D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1c90cbfb-dada-385a-9811-e9d9f7e7d19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:24:af:5a:17:06:60:7e:48:4c:13:0b:a1:9d:c7:a8:7e:ad: 4d:69:c1:42:2e:b4:7f:9d:08:e3:24:46:ea:ac:31:3f:6e:bd: 52:ee:2e:5d:f0:2e:27:06:9f:fa:ab:6e:03:42:d9:ae:fd:73: 5a:7e:3b:ee:d7:8d:e9:fb:d8:da:be:f2:1a:7b:40:44:6f:37: 14:37:8c:69:e6:e4:94:65:07:c1:7b:fe:14:c6:c2:39:32:52: f6:8f:87:d2:f2:23:bf:36:35:2e:95:db:84:7c:cd:4b:ab:40: 99:b5:ed:f3:b6:1c:63:36:02:58:b7:14:c9:c8:24:18:01:24: 84:a0:f5:88:39:b1:17:59:51:c8:4b:a7:14:9e:97:25:9a:30: 51:84:4a:27:cf:01:09:f4:17:27:01:87:ac:74:8c:00:c4:b2: 5c:1f:18:b1:f1:72:b8:aa:34:25:84:3b:5f:6a:41:d5:aa:58: a2:9f:4c:90:ff:fc:82:be:37:82:f7:2d:4f:6f:84:70:3e:4d: e4:e4:bb:b8:2e:48:c8:7e:c6:39:06:67:e9:fb:6e:c2:7e:67: 39:9b:c0:29:3e:54:49:cc:d7:f8:fc:9b:17:df:a9:8f:c6:be: 8a:e0:11:56:7c:3d:d3:28:77:a0:10:2f:f8:c7:48:e1:cd:69: 0d:98:d3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfNbEHsMOhJHL8QB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI0MTEwNzE3MTg0N1oXDTI1MDIwNTE3MTg0N1owLzEtMCsGA1UEAxMk M2Q1YWFmZWUtZDZhNS00YTcxLTgyNTctNDhiM2Q4YjA3N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqFF1o+KZDkNpxHyFzHoyV5OXO+8ZOjHlAFt i+5A4jzh5REt1m0RcMaE0fOdikOzguFB1AjnlpdGSZe8PWcAzz/GrZvX7kGPURYg K96cY1PFwrijZ+n9UaWmT4z9Vfs+vQrLySuTaTQTTDmz+oQ4EibqC1UzWp84Wf6D +N8io8lqM2DHe3NQcDoHAOAjCLN8DazgPWH2EMtfIIpPgbqZgSXx+1yEN28As12n tTEyfWax0/OlcE4GyFBKoJQgBHpEBffnyabBVQvy2lHdUvNgH/Lt4QlZ/yjnK4Q4 0Y0KjAz+7lg3VkuNRCgO4+RFfQl3GePIZDiSMerMTDkbCe+nqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGe54OPIzlnB6Qb+eq88dogXx0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMWM5MGNiZmItZGFkYS0z ODVhLTk4MTEtZTlkOWY3ZTdkMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkkr1oXBmB+SEwTC6Gdx6h+rU1pwUIutH+dCOMkRuqsMT9uvVLuLl3w LicGn/qrbgNC2a79c1p+O+7Xjen72Nq+8hp7QERvNxQ3jGnm5JRlB8F7/hTGwjky UvaPh9LyI782NS6V24R8zUurQJm17fO2HGM2Ali3FMnIJBgBJISg9Yg5sRdZUchL pxSelyWaMFGESifPAQn0FycBh6x0jADEslwfGLHxcriqNCWEO19qQdWqWKKfTJD/ /IK+N4L3LU9vhHA+TeTku7guSMh+xjkGZ+n7bsJ+ZzmbwCk+VEnM1/j8mxffqY/G vorgEVZ8PdMod6AQL/jHSOHNaQ2Y03Y= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:34 2024 by rpki-client on console-ams.rpki-client.org