$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa File: f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa (raw, json) Hash identifier: CysnFSaxxmznYrm7BEeV+Y5eukkOvh3UXeFeFuDPFb0= Subject key identifier: 62:FC:6C:E6:2F:BB:06:74:3A:31:EF:14:DA:4E:04:B1:6F:8D:1A:0D Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285847D6CF4AC5E4DE90AF2A0C1B00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 13445 IP address blocks: 144.196.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:4a:c5:e4:de:90:af:2a:0c:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=0f6c534e-b49a-4c31-8741-5b34ebcc35d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:96:a2:1b:ec:29:91:9e:b8:46:5b:9b:d0: 0a:2d:23:2f:b1:30:82:ee:a3:70:4b:34:44:18:07: 41:2d:42:d7:1d:7c:6e:1e:38:d7:dd:03:7a:a1:96: 5f:49:89:7c:d0:7d:65:73:df:b7:62:ab:16:da:53: 58:1b:cc:49:39:50:59:00:17:80:d9:e8:85:47:d2: 8d:7d:1e:b7:bf:19:9e:10:5b:d9:32:8c:78:cd:ec: 91:03:2e:2e:81:ce:77:51:4f:08:dc:d1:7b:4b:4b: 8e:a5:ce:be:6f:e7:b7:c0:e3:f7:95:80:d9:c1:64: 82:73:d0:8d:e9:c4:69:25:69:c9:e9:9f:49:53:02: cc:d3:dc:90:4c:dc:1b:7a:fe:f5:db:ed:fe:c0:90: 10:1f:ea:cb:8c:3a:ee:62:05:f1:fe:d5:0a:bd:b9: d2:86:71:41:55:31:2b:03:78:c4:82:4c:1c:1d:aa: 1d:2c:40:7b:89:c6:d8:ab:1c:79:86:bd:c0:8e:13: 20:1a:0c:3a:d4:fc:71:01:d6:93:66:41:01:22:22: 1d:83:fb:8a:ad:24:fb:02:0b:76:48:29:68:ae:85: 80:f0:f4:7d:a5:d8:df:cc:b4:b4:62:c7:63:e6:31: ab:c2:08:c4:45:c0:90:23:dd:d1:24:6c:d0:d5:7e: 61:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FC:6C:E6:2F:BB:06:74:3A:31:EF:14:DA:4E:04:B1:6F:8D:1A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:78:cd:75:bc:e1:b9:63:5f:44:d1:6c:6b:20:db:2b:06:0b: b6:fb:9e:9f:f0:00:8b:61:ab:2f:c5:6a:86:6f:59:cd:18:17: 88:94:27:94:70:ec:33:35:c9:96:50:81:83:d5:90:72:4c:47: db:5a:41:27:90:cc:48:e0:75:6a:9f:58:a4:1f:a2:16:fd:8c: c4:ac:cc:b8:3f:82:40:94:fb:67:db:6f:c2:56:24:75:72:ce: 49:0b:75:61:58:ab:07:fd:09:24:d5:ef:1f:27:77:c2:b8:bf: c6:21:e9:32:90:b7:02:52:f5:36:89:b8:09:bb:3d:68:c0:08: de:c9:35:7b:70:7c:87:66:f2:d3:6e:fe:89:eb:b4:1a:e5:c7: 53:ec:3e:43:81:69:4e:27:f0:94:e1:86:ae:0c:60:5f:a1:94: 6c:5c:c3:1a:9f:63:fd:aa:20:51:64:c5:5c:66:2e:ab:f0:b2: ef:bc:86:6c:e6:9d:71:c6:26:a0:4a:1e:6b:2d:e0:7d:ef:57: 19:e0:af:ff:79:d4:c4:df:e4:05:33:9a:1c:39:14:3f:d8:f7: 52:9d:27:8a:f9:3d:0b:79:bf:fe:86:e5:76:c5:83:32:ee:5f: 23:e4:47:9e:a5:c7:9c:cc:a7:33:82:8f:77:ff:a1:be:04:20: e7:2e:c5:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0rF5N6QryoMGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MGY2YzUzNGUtYjQ5YS00YzMxLTg3NDEtNWIzNGViY2MzNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJaWohvsKZGeuEZbm9AKLSMvsTCC7qNwSzRE GAdBLULXHXxuHjjX3QN6oZZfSYl80H1lc9+3YqsW2lNYG8xJOVBZABeA2eiFR9KN fR63vxmeEFvZMox4zeyRAy4ugc53UU8I3NF7S0uOpc6+b+e3wOP3lYDZwWSCc9CN 6cRpJWnJ6Z9JUwLM09yQTNwbev712+3+wJAQH+rLjDruYgXx/tUKvbnShnFBVTEr A3jEgkwcHaodLEB7icbYqxx5hr3AjhMgGgw61PxxAdaTZkEBIiIdg/uKrST7Agt2 SCloroWA8PR9pdjfzLS0Ysdj5jGrwgjERcCQI93RJGzQ1X5hyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL8bOYvuwZ0OjHvFNpOBLFvjRoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjQyZjg1ZGMtMmQ3Yy0z MTg3LWI3ZGEtNTlmN2JhNDk1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALt4zXW84bljX0TRbGsg2ysGC7b7np/wAIthqy/FaoZvWc0YF4iUJ5Rw 7DM1yZZQgYPVkHJMR9taQSeQzEjgdWqfWKQfohb9jMSszLg/gkCU+2fbb8JWJHVy zkkLdWFYqwf9CSTV7x8nd8K4v8Yh6TKQtwJS9TaJuAm7PWjACN7JNXtwfIdm8tNu /onrtBrlx1PsPkOBaU4n8JThhq4MYF+hlGxcwxqfY/2qIFFkxVxmLqvwsu+8hmzm nXHGJqBKHmst4H3vVxngr/951MTf5AUzmhw5FD/Y91KdJ4r5PQt5v/6G5XbFgzLu XyPkR56lx5zMpzOCj3f/ob4EIOcuxfE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org