$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa File: d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json) Hash identifier: atq0b5zFUEZkdnEJFoNljLUbIL5nWYHb+m+zzqDcOoQ= Subject key identifier: 77:AA:4F:C0:BB:F6:D4:9C:F7:DB:1B:82:28:FE:5D:BA:51:D0:FC:26 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F432858476C9DB33672C54DAD1B0DE440 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 397373 IP address blocks: 192.158.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b3:36:72:c5:4d:ad:1b:0d:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=0889d801-0db0-44e1-9e35-6018247eda49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:02:ad:13:e9:f5:43:94:0a:da:bb:5e:2d: cf:25:4f:c2:ff:69:0a:df:75:73:09:86:af:15:d3: cf:c2:05:3d:93:b1:a1:8a:41:f6:db:a3:9f:e7:1e: 9a:85:97:76:81:21:e6:75:dd:40:06:25:ee:eb:cb: 47:16:0d:cc:7d:7f:94:47:a5:52:8d:85:93:14:58: c3:c5:9d:d2:f5:4e:5e:49:6b:b9:7b:bc:d9:4c:ea: 8a:7e:66:55:48:0e:77:5a:be:ea:0e:ae:8e:41:dd: 4c:2f:77:f9:82:a1:f7:d0:2b:2b:40:c5:f7:bb:4a: d7:97:f3:f5:ed:24:85:58:6e:39:23:32:3f:8c:ef: f5:8b:9a:16:64:d6:87:0e:07:67:6b:10:8a:1d:41: 8a:a8:bd:9c:06:6a:21:35:6e:b6:9f:e8:33:15:96: 79:cd:45:f7:23:9b:bb:30:37:f3:63:97:50:e6:56: 56:bd:af:ca:17:97:e0:2b:4c:87:25:da:5d:12:be: bb:7b:19:b4:db:34:99:88:b3:6d:6c:79:71:50:eb: d4:be:2e:b9:a7:b6:9d:27:ff:97:f4:ff:63:a9:41: be:a7:66:10:ef:af:91:a3:f3:ba:95:1c:6f:15:3d: b5:28:f1:be:c2:2a:d6:f8:aa:ff:d9:7b:56:c0:fb: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:4F:C0:BB:F6:D4:9C:F7:DB:1B:82:28:FE:5D:BA:51:D0:FC:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:13:a6:2d:6f:6a:f3:37:a0:e8:5c:7a:75:da:b1:b8:05:ea: f9:f6:f8:94:e3:e4:52:eb:2a:f7:98:b3:22:d2:57:b1:c3:98: 4a:7d:77:42:eb:15:e3:b6:d4:f0:f7:d0:b6:97:76:b7:76:16: d3:ad:30:cf:7c:74:fd:d5:98:f9:c8:e2:9e:0b:d0:03:d8:87: 1a:82:e3:6c:3c:3c:51:d1:72:b6:04:a7:93:f7:dc:2c:ec:10: b8:f9:91:24:5e:0e:a8:d2:60:7f:3c:70:a9:72:67:ac:cb:14: 71:d8:ed:66:7a:46:67:22:a1:0e:7b:81:af:54:d8:f2:85:d6: 67:19:89:d8:a2:e4:88:dd:85:87:10:a7:05:91:9e:f8:67:5d: d7:02:63:91:97:31:03:87:14:09:d3:5d:e8:92:34:a8:70:2a: 6c:41:81:1f:e4:75:cc:7e:71:2c:85:17:bc:ba:f3:57:72:d3: e6:ef:e3:ad:92:9f:fb:e9:01:b4:11:bf:6a:97:aa:59:e1:7f: 13:22:dc:dc:1c:44:81:2c:9a:03:16:f3:9e:b8:2d:5c:6b:d7: 5b:16:d6:ba:3c:bf:2d:04:cb:e9:43:0e:11:68:c2:97:1e:28: 69:e0:53:78:e3:62:96:f9:9c:42:49:fd:b4:51:33:3a:0f:1f: c0:31:ca:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbM2csVNrRsN5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk MDg4OWQ4MDEtMGRiMC00NGUxLTllMzUtNjAxODI0N2VkYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv0CrRPp9UOUCtq7Xi3PJU/C/2kK33VzCYav FdPPwgU9k7GhikH226Of5x6ahZd2gSHmdd1ABiXu68tHFg3MfX+UR6VSjYWTFFjD xZ3S9U5eSWu5e7zZTOqKfmZVSA53Wr7qDq6OQd1ML3f5gqH30CsrQMX3u0rXl/P1 7SSFWG45IzI/jO/1i5oWZNaHDgdnaxCKHUGKqL2cBmohNW62n+gzFZZ5zUX3I5u7 MDfzY5dQ5lZWva/KF5fgK0yHJdpdEr67exm02zSZiLNtbHlxUOvUvi65p7adJ/+X 9P9jqUG+p2YQ76+Ro/O6lRxvFT21KPG+wirW+Kr/2XtWwPvvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeqT8C79tSc99sbgij+XbpR0PwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDc4NGIwZTUtYzc1Zi0z NmExLWIyMWUtZWFkZTM3ODhjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwTpi1vavM3oOhcenXasbgF6vn2+JTj5FLrKveYsyLSV7HDmEp9d0Lr FeO21PD30LaXdrd2FtOtMM98dP3VmPnI4p4L0APYhxqC42w8PFHRcrYEp5P33Czs ELj5kSReDqjSYH88cKlyZ6zLFHHY7WZ6RmcioQ57ga9U2PKF1mcZidii5IjdhYcQ pwWRnvhnXdcCY5GXMQOHFAnTXeiSNKhwKmxBgR/kdcx+cSyFF7y681dy0+bv462S n/vpAbQRv2qXqlnhfxMi3NwcRIEsmgMW8564LVxr11sW1ro8vy0Ey+lDDhFowpce KGngU3jjYpb5nEJJ/bRRMzoPH8AxylI= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:42 2024 by rpki-client on console-fra.rpki-client.org