$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/4d899bd9-6140-3ec5-ad79-50c0900e4cea.roa File: 4d899bd9-6140-3ec5-ad79-50c0900e4cea.roa (raw, json) Hash identifier: Xa+PRk+MlRs0CqTuHsU2G5I5xDUkRqvu8HFe6JlomO8= Subject key identifier: 90:2D:7D:E8:46:21:71:32:2A:98:54:69:73:70:89:45:BE:4E:88:99 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F43285847B10154325C40FA16665F10E0 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/4d899bd9-6140-3ec5-ad79-50c0900e4cea.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 1043 IP address blocks: 207.47.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:54:32:5c:40:fa:16:66:5f:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=33bd5acc-c60f-445e-8a12-b8de32285378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:70:07:ad:79:05:59:4b:f3:7a:48:0d:75: dd:36:e8:04:f5:be:19:5a:0d:d4:ad:ed:f7:67:1c: 44:e0:f0:82:15:d8:a3:ed:1c:e9:36:09:6a:f5:07: 2c:15:2e:b8:d5:48:cd:58:60:be:50:8a:6f:f7:c2: 60:10:5d:33:26:64:cb:31:3a:92:be:0c:9e:84:b6: 05:94:fe:04:9d:ba:54:49:9a:f1:61:1c:9c:1d:3d: 3d:4e:30:70:33:25:48:1e:b7:3c:42:08:fc:88:91: 48:55:07:aa:47:e5:0e:e3:12:01:52:88:f8:a9:4a: 68:35:2e:02:2f:fa:f6:a2:53:41:64:52:2e:50:4d: 26:70:3e:bf:4e:39:7e:1b:18:a1:a7:d2:da:77:ec: cb:9a:e3:33:36:77:36:31:7a:69:d8:f9:56:54:d6: 0a:9f:b7:69:89:4d:c4:7b:c9:e5:b1:77:8e:94:b2: 2b:db:c8:d8:27:40:9c:be:fa:e2:e5:f2:ad:6c:f0: 25:7a:eb:40:87:f6:8f:15:6a:30:5e:09:b8:f4:d1: fb:6a:a9:5f:9a:82:d1:23:29:f2:62:db:52:3f:c8: ea:d0:78:32:9d:ab:75:f2:c8:66:20:07:c7:46:c8: 51:05:af:63:63:ac:ad:13:81:5d:07:d8:cf:fa:f8: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2D:7D:E8:46:21:71:32:2A:98:54:69:73:70:89:45:BE:4E:88:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/4d899bd9-6140-3ec5-ad79-50c0900e4cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 207.47.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:6f:42:ac:31:0c:f2:28:b1:ab:ee:ae:cf:68:41:2c:36:1d: 76:48:f4:31:e8:93:8c:f7:60:83:12:39:a3:53:ce:15:c2:d5: e1:7f:ca:08:bf:00:3c:59:bc:fe:7b:70:b6:b6:f7:1e:e0:ad: b0:6b:1b:08:f1:ba:88:14:92:6c:03:49:aa:15:b0:ec:c7:c2: 45:0c:7f:0e:0d:e8:37:8e:5e:d1:da:f2:53:2b:ce:8b:4b:67: 6f:b1:1f:a1:a8:5d:a4:54:55:6a:71:93:50:5a:ba:98:dc:80: ad:ed:40:45:ce:04:f2:43:2f:d0:38:07:a2:ba:52:7f:7b:71: 3c:32:92:8e:2e:29:cd:45:1b:2c:0d:18:32:ef:6d:bb:2b:6c: ee:3d:6f:e4:78:f1:0e:a7:9c:f9:d4:ee:08:34:ff:47:24:09: 04:31:c4:7f:ae:0b:7e:e5:51:f5:02:9a:3a:6a:5e:0c:cb:fb: 6c:29:e9:82:6c:5e:7f:c8:3a:53:a6:d3:a9:5c:c0:ec:72:15: 9a:79:81:b6:c3:d8:ca:d7:0e:7e:fd:cc:61:83:3e:e3:b9:82: 5b:4b:e3:a0:9a:4a:e6:3a:17:ba:2a:94:16:1f:62:4a:1d:3b: e2:cd:0b:41:40:7a:f8:50:e7:90:d2:b6:e1:00:be:00:eb:b9: 56:41:89:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVQyXED6FmZfEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk MzNiZDVhY2MtYzYwZi00NDVlLThhMTItYjhkZTMyMjg1Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnlwB615BVlL83pIDXXdNugE9b4ZWg3Ure33 ZxxE4PCCFdij7RzpNglq9QcsFS641UjNWGC+UIpv98JgEF0zJmTLMTqSvgyehLYF lP4EnbpUSZrxYRycHT09TjBwMyVIHrc8Qgj8iJFIVQeqR+UO4xIBUoj4qUpoNS4C L/r2olNBZFIuUE0mcD6/Tjl+Gxihp9Lad+zLmuMzNnc2MXpp2PlWVNYKn7dpiU3E e8nlsXeOlLIr28jYJ0Ccvvri5fKtbPAleutAh/aPFWowXgm49NH7aqlfmoLRIyny YttSP8jq0Hgynat18shmIAfHRshRBa9jY6ytE4FdB9jP+vjXYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAtfehGIXEyKphUaXNwiUW+ToiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvNGQ4OTliZDktNjE0MC0z ZWM1LWFkNzktNTBjMDkwMGU0Y2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzy+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxvQqwxDPIosavurs9oQSw2HXZI9DHok4z3YIMSOaNTzhXC1eF/ygi/ ADxZvP57cLa29x7grbBrGwjxuogUkmwDSaoVsOzHwkUMfw4N6DeOXtHa8lMrzotL Z2+xH6GoXaRUVWpxk1BaupjcgK3tQEXOBPJDL9A4B6K6Un97cTwyko4uKc1FGywN GDLvbbsrbO49b+R48Q6nnPnU7gg0/0ckCQQxxH+uC37lUfUCmjpqXgzL+2wp6YJs Xn/IOlOm06lcwOxyFZp5gbbD2MrXDn79zGGDPuO5gltL46CaSuY6F7oqlBYfYkod O+LNC0FAevhQ55DStuEAvgDruVZBidQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:41 2024 by rpki-client on console-ams.rpki-client.org