$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa File: 6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json) Hash identifier: rZq2Z+hRWAjtLFw+Go0RJKWuRgPh9gDPWTSYe1Jcfq8= Subject key identifier: 26:76:FF:98:E2:BC:29:6C:01:CF:A6:59:C5:D6:81:FE:96:0A:FD:9D Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858477230E225E1B5DD6F03CB4800 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 16509 IP address blocks: 192.175.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:e2:25:e1:b5:dd:6f:03:cb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=28b7294c-f02e-444c-bd49-5b2a330ad877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:27:f5:e2:7c:45:7c:72:1b:58:41:fb:c4:4f: 2a:02:9d:e0:51:0e:10:7f:96:1f:27:09:40:8a:4f: 26:6f:76:f5:04:60:7f:43:07:3b:24:a7:b0:bb:e6: d4:2a:15:1d:65:04:df:b4:0f:6a:e7:81:80:02:11: a1:5f:d8:e0:95:d6:e5:89:19:57:62:bc:83:78:99: 33:7c:f0:ba:0c:53:5d:37:b9:2e:eb:59:3e:07:df: 54:11:7d:fa:87:ef:f7:90:56:7d:00:ea:df:47:da: 42:83:14:99:e4:a5:f6:43:5d:da:25:44:ae:a4:0b: cb:cc:bf:dc:19:0b:06:1b:fc:e6:ce:1b:7e:77:64: b3:54:54:2f:35:ac:17:b6:07:0c:e4:46:bb:95:b5: 38:f0:ed:97:9b:03:03:cf:e7:7d:ac:ef:c7:04:1d: d2:cb:41:30:f3:cc:16:a6:2d:c8:b5:83:37:61:c0: 12:36:c2:59:85:5f:32:9e:a7:9c:82:a5:fe:8c:40: 1f:1d:8e:fa:e5:83:2c:fc:0d:05:bf:75:8b:21:bc: 06:12:9c:23:3b:e4:fd:7b:8b:c1:42:99:e5:62:db: 8a:f4:38:c1:bb:9b:8c:60:86:49:14:94:44:cb:20: 95:f6:4b:b0:e5:2d:a0:44:c7:64:60:2a:4e:a8:73: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:76:FF:98:E2:BC:29:6C:01:CF:A6:59:C5:D6:81:FE:96:0A:FD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 192.175.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:5e:31:32:f3:53:44:90:82:f6:db:d2:6d:70:84:24:aa:33: 93:51:93:e1:6b:61:8e:b9:e9:8c:dd:70:38:e2:44:34:34:ee: 6a:00:40:c4:51:70:cf:55:7f:ed:18:69:7a:80:08:51:62:f2: f5:45:8b:47:44:cb:94:d8:26:90:34:8b:94:79:22:e7:7f:1b: c8:b4:60:8f:ca:42:2c:e7:ea:ba:39:23:65:2c:9e:0a:fe:47: cf:b8:8d:b3:0e:25:1c:22:b2:5d:f5:5b:9a:e8:d0:22:a9:1e: 78:f5:3a:91:9c:f5:e4:65:5f:2b:c5:98:6a:84:2c:94:3d:66: 5b:4e:09:72:96:61:bd:5b:44:fc:5c:9b:1e:f8:4e:8b:52:c1: 79:4b:e6:ac:2d:10:8b:9e:d3:16:2f:5f:d7:14:fa:16:47:98: 05:ef:1f:b7:93:c2:5e:65:65:f3:b5:84:2c:33:4d:99:06:68: 59:d4:38:52:a3:ca:ba:bc:d8:17:2e:67:cd:17:bd:06:48:51: 27:83:ff:49:bb:4c:1d:17:a4:d6:d5:c9:2b:1c:4d:e2:6c:84: 0a:cb:fd:b4:37:dd:33:77:e0:10:b5:56:21:da:99:91:d4:46: a4:cf:d6:0b:2e:f0:cf:f3:64:71:02:8a:77:bd:bc:34:c3:5c: 8c:b9:9c:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOIl4bXdbwPLSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk MjhiNzI5NGMtZjAyZS00NDRjLWJkNDktNWIyYTMzMGFkODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgif14nxFfHIbWEH7xE8qAp3gUQ4Qf5YfJwlA ik8mb3b1BGB/Qwc7JKewu+bUKhUdZQTftA9q54GAAhGhX9jgldbliRlXYryDeJkz fPC6DFNdN7ku61k+B99UEX36h+/3kFZ9AOrfR9pCgxSZ5KX2Q13aJUSupAvLzL/c GQsGG/zmzht+d2SzVFQvNawXtgcM5Ea7lbU48O2XmwMDz+d9rO/HBB3Sy0Ew88wW pi3ItYM3YcASNsJZhV8ynqecgqX+jEAfHY765YMs/A0Fv3WLIbwGEpwjO+T9e4vB QpnlYtuK9DjBu5uMYIZJFJREyyCV9kuw5S2gRMdkYCpOqHPNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ2/5jivClsAc+mWcXWgf6WCv2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNmUyZTZhZGMtYzk3OS0z ZTlhLWI1ZjUtNThjOWEzYzU4NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpeMTLzU0SQgvbb0m1whCSqM5NRk+FrYY656YzdcDjiRDQ07moAQMRR cM9Vf+0YaXqACFFi8vVFi0dEy5TYJpA0i5R5Iud/G8i0YI/KQizn6ro5I2Usngr+ R8+4jbMOJRwisl31W5ro0CKpHnj1OpGc9eRlXyvFmGqELJQ9ZltOCXKWYb1bRPxc mx74TotSwXlL5qwtEIue0xYvX9cU+hZHmAXvH7eTwl5lZfO1hCwzTZkGaFnUOFKj yrq82BcuZ80XvQZIUSeD/0m7TB0XpNbVySscTeJshArL/bQ33TN34BC1ViHamZHU RqTP1gsu8M/zZHECine9vDTDXIy5nGM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:56 2024 by rpki-client on console-ams.rpki-client.org