$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa File: 7a1d4876-3def-3187-938f-10513510e226.roa (raw, json) Hash identifier: aYGoD1Fd6/CAcfBpo//odVnzgeCv3TRBK+aiAGZ0jck= Subject key identifier: D1:64:63:EA:05:E2:A3:46:36:80:97:AD:E8:28:CA:59:85:68:9C:17 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F432858479AABE6A5EE1CFFF82F382E80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 396982 IP address blocks: 192.19.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e6:a5:ee:1c:ff:f8:2f:38:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=815e97fa-d8dd-4062-ae2f-c9deb2227b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:79:0f:00:65:4f:33:8d:84:8d:1c:d3:9d: 64:62:32:a7:c9:60:38:03:33:c2:93:26:17:91:d1: 5d:50:92:6c:55:8b:d3:e5:fc:ca:4b:73:54:31:dd: 57:c8:59:bf:c9:26:31:1a:b5:dd:9b:5c:46:80:64: fc:5c:82:86:81:9f:4e:38:e8:58:06:f2:93:62:3e: 3a:70:72:eb:62:e9:6e:ec:38:4a:22:70:d0:c5:a3: 01:0c:c4:58:bc:db:1d:fd:e8:5c:c6:ad:68:b4:fd: a1:a5:c3:52:d6:bb:97:63:2c:da:1d:d0:2d:7c:4c: 8f:fa:35:ab:0f:b3:a8:75:de:f4:08:82:03:fe:53: 93:a7:bf:ee:36:3f:5b:a9:7a:52:53:1e:15:1a:ca: 8a:9e:41:9f:53:65:4b:02:2d:4c:f2:e1:ca:15:9f: 72:49:53:de:85:29:2d:36:fc:4f:27:23:1f:ec:26: 1e:f1:e8:dd:53:85:66:5c:f8:a1:70:53:94:1b:59: 78:0f:a4:30:ab:05:ab:6d:ab:ea:8f:23:62:6a:80: c5:af:44:38:40:46:a4:91:aa:8e:03:e4:fe:02:ea: 85:76:87:ee:e5:4c:e4:39:0d:c5:26:e2:6a:9a:d5: fb:ae:00:72:83:c0:4d:fe:a9:03:ea:a4:cb:ef:96: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:64:63:EA:05:E2:A3:46:36:80:97:AD:E8:28:CA:59:85:68:9C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6a:44:b4:af:64:3a:ea:ea:37:6c:ba:d4:e9:7b:1c:76:f4: 06:b6:3c:3a:3d:90:46:e3:f1:87:84:54:a7:4d:38:e0:20:32: e4:27:95:9d:8c:0d:c7:48:45:58:7b:6e:84:8b:a3:33:3e:bd: b9:10:8d:e0:c2:50:32:a5:5a:42:23:34:6d:2f:15:a8:f4:ed: 8d:73:2c:2d:37:24:be:67:91:aa:5d:a5:d3:49:2f:af:ac:fc: 72:fa:f7:6d:60:85:7d:ef:96:0d:d8:bf:07:a4:a1:e4:a3:86: 77:67:e8:4d:a5:f3:73:ab:69:33:0d:bc:d5:fd:8a:a7:ca:96: 82:79:a6:63:46:bd:d6:81:50:c0:a1:14:50:40:22:be:02:91: 3c:0c:e8:d7:2e:4e:5d:7e:8d:e2:fa:be:0d:f7:b2:94:b7:e6: 8f:5f:2d:64:e2:ea:c0:33:2f:65:e4:b9:d9:88:fa:60:9a:d0: 93:a6:a9:af:ab:9b:a5:31:3b:5a:77:33:08:d6:cb:c4:64:17: 4d:57:e4:5c:bb:78:2b:81:8a:40:8d:1b:5b:73:70:0e:c8:19: c9:60:d2:99:be:55:49:e3:33:e3:2d:f2:7e:90:a0:57:6a:cf: ad:a3:a4:a2:ae:6d:17:e0:c8:c6:d4:e0:80:2d:05:a9:44:d9: 43:cd:27:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+al7hz/+C84LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk ODE1ZTk3ZmEtZDhkZC00MDYyLWFlMmYtYzlkZWIyMjI3YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZJ5DwBlTzONhI0c051kYjKnyWA4AzPCkyYX kdFdUJJsVYvT5fzKS3NUMd1XyFm/ySYxGrXdm1xGgGT8XIKGgZ9OOOhYBvKTYj46 cHLrYulu7DhKInDQxaMBDMRYvNsd/ehcxq1otP2hpcNS1ruXYyzaHdAtfEyP+jWr D7Oodd70CIID/lOTp7/uNj9bqXpSUx4VGsqKnkGfU2VLAi1M8uHKFZ9ySVPehSkt NvxPJyMf7CYe8ejdU4VmXPihcFOUG1l4D6QwqwWrbavqjyNiaoDFr0Q4QEakkaqO A+T+AuqFdofu5UzkOQ3FJuJqmtX7rgByg8BN/qkD6qTL75bfCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFkY+oF4qNGNoCXregoylmFaJwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvN2ExZDQ4NzYtM2RlZi0z MTg3LTkzOGYtMTA1MTM1MTBlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFqRLSvZDrq6jdsutTpexx29Aa2PDo9kEbj8YeEVKdNOOAgMuQnlZ2M DcdIRVh7boSLozM+vbkQjeDCUDKlWkIjNG0vFaj07Y1zLC03JL5nkapdpdNJL6+s /HL6921ghX3vlg3YvwekoeSjhndn6E2l83OraTMNvNX9iqfKloJ5pmNGvdaBUMCh FFBAIr4CkTwM6NcuTl1+jeL6vg33spS35o9fLWTi6sAzL2XkudmI+mCa0JOmqa+r m6UxO1p3MwjWy8RkF01X5Fy7eCuBikCNG1tzcA7IGclg0pm+VUnjM+Mt8n6QoFdq z62jpKKubRfgyMbU4IAtBalE2UPNJzk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:41 2024 by rpki-client on console-ams.rpki-client.org