$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json) Hash identifier: 587IPpEEGva4N42CxtlIPpcVD2CR1lP494DDYIw7+dw= Subject key identifier: F6:65:3E:C7:43:18:22:FE:94:50:68:26:9A:E8:58:53:AC:9D:DC:83 Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F43285847F17AB8045643FE80E9477EC0 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa Signing time: Wed 20 Nov 2024 15:17:02 +0000 ROA not before: Wed 20 Nov 2024 15:17:02 +0000 ROA not after: Tue 18 Feb 2025 15:17:02 +0000 asID: 19782 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:7a:b8:04:56:43:fe:80:e9:47:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Nov 20 15:17:02 2024 GMT Not After : Feb 18 15:17:02 2025 GMT Subject: CN=cd55f5d8-e6a6-4ada-9332-a03b60488249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:33:aa:d6:90:64:fc:e5:b2:93:08:4b:c7: 69:4e:7d:d4:94:23:78:f3:bd:b7:99:b6:b8:46:30: 2d:a5:2c:37:76:85:3b:88:5b:97:74:89:24:f3:29: 0a:06:f6:60:ed:be:4a:c1:37:9b:66:cc:77:98:72: 1f:a3:85:92:3a:bc:a9:c1:55:40:0f:c3:97:02:cb: c5:54:74:24:6f:58:e2:97:1b:27:29:20:ed:b9:4c: 25:1d:9b:ef:6d:59:36:80:e7:89:89:36:a0:49:97: 12:e0:9a:1b:e0:7a:ec:9e:1b:a6:14:87:e8:10:0c: 28:77:e0:79:0a:53:13:9f:9e:9f:ad:4b:13:df:4d: 04:53:9f:cc:5e:52:38:df:0e:c3:d7:0a:60:93:db: 19:9f:a6:3a:d6:f1:d6:36:ea:e6:16:74:a0:49:29: f4:23:b5:d3:fa:3b:63:00:6c:10:77:ab:c0:d7:e6: 9d:5c:85:04:e6:fe:bb:89:41:b9:4f:63:05:28:d7: 69:ae:68:67:19:c5:b9:3f:05:25:dc:cf:db:98:0d: 3a:63:a8:30:93:de:83:ba:ff:65:d2:6f:14:b5:36: 58:ba:3d:da:34:33:61:e8:a7:2c:bf:e8:ce:80:0c: 72:85:bb:81:64:ac:84:27:e2:a6:5f:5b:d0:c2:2f: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:3E:C7:43:18:22:FE:94:50:68:26:9A:E8:58:53:AC:9D:DC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:69:c7:38:03:cc:de:95:d3:73:d6:f4:52:1b:92:28:87:ed: 03:41:4f:46:6a:92:b9:a6:2a:57:ea:55:55:f9:1a:ce:d6:94: a0:7c:f9:99:fd:8c:23:d2:ef:08:78:56:81:42:cc:d5:85:d9: fc:55:cf:e2:58:dd:bc:62:0f:a8:ff:59:5d:e4:f3:7c:2c:35: b3:75:6c:0f:08:a2:1b:84:4a:de:a8:df:21:14:30:21:77:00: 64:3e:93:2e:b6:11:bf:0f:8c:5c:50:cd:13:12:a0:c0:79:54: 4c:c5:25:b7:35:a3:1f:c7:11:f9:00:12:67:fc:e6:c6:5c:2d: 89:c8:04:e6:90:01:8f:45:ea:15:80:f3:38:19:7b:37:d7:86: 0b:79:bf:2a:c8:04:e9:c6:ca:05:49:6d:5b:e1:3d:da:b6:ac: bf:ad:b6:c5:1f:e7:e5:bb:07:1b:27:f3:9a:13:d2:82:cb:f9: 01:78:ea:83:70:48:2d:c5:49:a5:ed:fd:84:82:3d:f7:da:ed: 6b:f3:83:e8:1a:02:c3:b7:a1:41:e4:8b:a7:b8:d7:80:a9:24: c3:8d:45:af:61:10:f4:60:19:28:56:f7:61:30:90:9d:82:5d: 73:89:ff:38:d3:0f:18:d5:88:8b:10:be:ac:50:58:93:25:1f: f4:c9:0d:0b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEfxergEVkP+gOlHfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI0MTEyMDE1MTcwMloXDTI1MDIxODE1MTcwMlowLzEtMCsGA1UEAxMk Y2Q1NWY1ZDgtZTZhNi00YWRhLTkzMzItYTAzYjYwNDg4MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUMzqtaQZPzlspMIS8dpTn3UlCN48723mba4 RjAtpSw3doU7iFuXdIkk8ykKBvZg7b5KwTebZsx3mHIfo4WSOrypwVVAD8OXAsvF VHQkb1jilxsnKSDtuUwlHZvvbVk2gOeJiTagSZcS4Job4HrsnhumFIfoEAwod+B5 ClMTn56frUsT300EU5/MXlI43w7D1wpgk9sZn6Y61vHWNurmFnSgSSn0I7XT+jtj AGwQd6vA1+adXIUE5v67iUG5T2MFKNdprmhnGcW5PwUl3M/bmA06Y6gwk96Duv9l 0m8UtTZYuj3aNDNh6Kcsv+jOgAxyhbuBZKyEJ+KmX1vQwi/0iQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPZlPsdDGCL+lFBoJproWFOsndyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNDBjYTNkYTctZDkwNS0z ZGVmLTlmMTktMmUzMmI3ODA1ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAi2nHOAPM3pXTc9b0UhuSKIftA0FPRmqSuaYqV+pVVfka ztaUoHz5mf2MI9LvCHhWgULM1YXZ/FXP4ljdvGIPqP9ZXeTzfCw1s3VsDwiiG4RK 3qjfIRQwIXcAZD6TLrYRvw+MXFDNExKgwHlUTMUltzWjH8cR+QASZ/zmxlwticgE 5pABj0XqFYDzOBl7N9eGC3m/KsgE6cbKBUltW+E92rasv622xR/n5bsHGyfzmhPS gsv5AXjqg3BILcVJpe39hII999rta/OD6BoCw7ehQeSLp7jXgKkkw41Fr2EQ9GAZ KFb3YTCQnYJdc4n/ONMPGNWIixC+rFBYkyUf9MkNCw== -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org