$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa File: 998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa (raw, json) Hash identifier: cdbPoqFSEOosOw6R30+VIhEvAzdwuFZtMgyif7HgzPg= Subject key identifier: 60:ED:2B:A0:16:71:84:06:C9:E3:E9:4D:2A:AA:30:8F:F3:89:C9:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C1DF5287416CB54CA4565900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 0 IP address blocks: 143.42.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:52:87:41:6c:b5:4c:a4:56:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=5463c94b-818d-4845-bb8c-461630beaf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:f7:10:91:30:e8:94:84:96:df:94:78:2d: 86:5e:d3:e1:32:c9:d3:bd:95:b7:ac:6e:a8:9e:03: d7:ca:e9:cf:d9:6b:e5:35:53:1e:ed:dc:a2:2e:fe: 62:1a:21:91:18:a9:4d:a6:fb:89:6f:a7:73:31:08: e7:a1:32:86:0b:9e:9c:4f:92:a0:12:cc:4c:29:1f: 19:ec:16:53:69:f2:07:5a:bf:99:10:eb:75:cf:58: f8:47:57:f4:2f:5a:df:0c:2b:d4:e1:ce:cd:a6:c2: 29:23:41:0b:7d:fa:82:06:cb:22:81:82:ff:49:2f: ba:3b:80:8e:c5:db:8c:83:86:d4:89:b1:08:c9:68: bb:04:da:29:35:bb:b0:7e:1b:32:6c:d5:af:a2:49: d8:93:96:27:51:bd:cb:72:30:e0:cf:62:dd:31:28: db:8d:cf:0e:86:cf:02:b8:c3:58:70:a7:32:34:38: d9:52:86:5a:e2:cb:57:b8:30:26:1a:c5:0e:63:ef: 3b:87:37:48:51:45:3c:e6:8f:cd:52:c3:a5:8e:7d: 8a:2b:8c:06:aa:35:3a:90:e5:01:72:6d:54:98:cf: 54:07:f2:7d:86:94:7a:61:b7:89:3c:d1:2a:12:f5: 37:97:37:cb:3c:23:7b:3b:46:d9:9f:f8:b8:bb:97: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:2B:A0:16:71:84:06:C9:E3:E9:4D:2A:AA:30:8F:F3:89:C9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998a9cae-aac3-3649-ba08-fb94cd2a4ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3c:60:ac:9c:d2:c7:2a:b9:8d:3e:04:d7:29:4a:fa:75:f1: 98:ea:74:fb:e3:69:1c:2f:b1:71:00:7c:cd:e8:3e:7c:6e:8b: bb:fe:9a:ca:8b:f8:0a:2d:dd:f8:e6:4a:b8:09:cd:4b:51:ff: 7a:bf:f4:33:db:75:eb:16:66:cd:07:cd:67:21:a4:e0:39:2a: 02:8d:67:75:25:2b:8d:a8:18:46:c4:58:f3:15:87:ed:7a:94: 39:05:14:4f:de:67:85:a4:c0:b2:0f:f3:5e:15:02:63:c7:5c: d1:be:db:84:b2:84:24:3e:f3:d1:a3:bd:90:cf:aa:b0:52:6c: b3:ec:c6:8f:7d:9f:ce:4f:8a:1f:2f:39:72:52:64:c8:0f:d5: af:51:e6:7b:c8:ae:5a:0b:c7:c4:8e:92:2e:2b:bb:7c:12:00: 6c:f4:72:98:b3:d9:18:e7:e9:f1:94:a9:94:5b:9b:83:98:70: 0b:a2:85:2c:51:57:12:fd:f4:13:98:f7:16:8b:ed:2b:25:b7: e0:fa:ef:ab:53:02:ca:80:07:b1:25:40:5f:f0:52:96:20:53: 42:56:f3:54:4b:3a:79:4f:28:db:91:5e:bf:78:e7:f1:82:06: 07:a7:27:31:86:64:96:a8:56:88:c1:fa:5f:65:97:b2:f4:45: 0d:0b:bc:27 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfB31KHQWy1TKRWWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NTQ2M2M5NGItODE4ZC00ODQ1LWJiOGMtNDYxNjMwYmVhZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjn3EJEw6JSElt+UeC2GXtPhMsnTvZW3rG6o ngPXyunP2WvlNVMe7dyiLv5iGiGRGKlNpvuJb6dzMQjnoTKGC56cT5KgEsxMKR8Z 7BZTafIHWr+ZEOt1z1j4R1f0L1rfDCvU4c7NpsIpI0ELffqCBssigYL/SS+6O4CO xduMg4bUibEIyWi7BNopNbuwfhsybNWvoknYk5YnUb3LcjDgz2LdMSjbjc8Ohs8C uMNYcKcyNDjZUoZa4stXuDAmGsUOY+87hzdIUUU85o/NUsOljn2KK4wGqjU6kOUB cm1UmM9UB/J9hpR6YbeJPNEqEvU3lzfLPCN7O0bZn/i4u5fPSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGDtK6AWcYQGyePpTSqqMI/zickRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4YTljYWUtYWFjMy0z NjQ5LWJhMDgtZmI5NGNkMmE0YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjyowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATTxgrJzSxyq5jT4E1ylK+nXxmOp0++NpHC+xcQB8zeg+fG6Lu/6ayov4 Ci3d+OZKuAnNS1H/er/0M9t16xZmzQfNZyGk4DkqAo1ndSUrjagYRsRY8xWH7XqU OQUUT95nhaTAsg/zXhUCY8dc0b7bhLKEJD7z0aO9kM+qsFJss+zGj32fzk+KHy85 clJkyA/Vr1Hme8iuWgvHxI6SLiu7fBIAbPRymLPZGOfp8ZSplFubg5hwC6KFLFFX Ev30E5j3FovtKyW34Prvq1MCyoAHsSVAX/BSliBTQlbzVEs6eU8o25Fev3jn8YIG B6cnMYZklqhWiMH6X2WXsvRFDQu8Jw== -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:06 2024 by rpki-client on console-ams.rpki-client.org