$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa File: 641289ff-4442-3d1e-9fea-b77b6846946e.roa (raw, json) Hash identifier: Fjf12heMUMtXIqbFJpcKD1UOblCNQLvBIlaAmoQ9gjU= Subject key identifier: E1:04:B5:CF:14:39:11:20:33:AF:AD:21:09:5E:B2:78:1D:C7:27:8F Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F43285847A5D6B0B6AC1CB7388D9D4B00 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 8075 IP address blocks: 142.0.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b0:b6:ac:1c:b7:38:8d:9d:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=c08d9c8f-1b2f-44a2-b93e-ee4ddc161e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:a6:52:62:39:4e:dc:5a:bc:c5:36:65:e4: 54:0f:fe:96:eb:5e:b4:5d:7c:90:14:73:49:a1:26: ec:c7:d5:95:cb:2b:e6:e4:ce:89:f4:f0:eb:fa:0c: 80:86:22:f4:af:ef:b8:44:54:0e:04:c7:79:21:ff: 33:ad:64:74:77:06:c1:38:ac:8f:32:dd:77:e2:9f: 77:ff:2f:65:c6:35:fb:48:c3:ad:17:6c:b5:a1:c0: 3e:c5:78:0b:39:5a:4e:25:6b:1f:bb:2e:9c:e4:b6: 52:51:b5:35:e8:3b:58:69:04:99:d0:8e:f0:c6:9b: ec:91:3d:74:5d:cf:57:56:03:5f:b6:cc:b8:dc:b3: 42:60:c5:af:e5:fc:f3:2d:0a:69:93:bd:1e:54:c1: d5:1b:8e:5b:68:32:f6:4b:46:ec:66:ee:16:f8:6f: 93:02:07:69:a0:69:28:ab:48:60:8b:e1:38:39:26: cf:34:f4:2b:bf:28:11:7d:13:cd:d0:0b:4d:47:09: 03:c7:82:e1:6a:13:b4:0a:8b:97:db:96:b9:fd:f0: a2:1a:a2:55:72:82:67:85:72:49:8c:d3:ab:ed:7b: 78:44:b1:66:25:71:d7:7b:f4:19:04:69:5b:20:f4: 7b:b4:de:fa:1d:43:bc:e2:8b:d1:04:8f:60:3f:60: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:B5:CF:14:39:11:20:33:AF:AD:21:09:5E:B2:78:1D:C7:27:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:13:22:b0:42:d9:59:e9:9c:c7:ca:1c:43:e8:58:5a:1d:79: 1e:57:50:a8:7a:7d:ab:df:d3:29:24:6d:c7:f5:99:55:92:be: 72:c5:b2:af:16:b1:82:34:fb:6a:e0:15:4a:cd:98:2e:ed:7f: e6:72:44:f0:37:34:84:b1:c4:27:0a:4d:71:90:5a:27:3b:ac: da:e0:61:a0:a3:18:e7:b1:c3:93:2a:ba:bd:c8:cc:7c:1c:b8: 3c:f7:c7:d9:d2:77:71:6d:45:c2:31:25:bd:74:35:c0:a2:31: ac:fd:bd:4c:f8:22:44:2d:45:b5:cc:be:32:3e:4c:a5:d9:c0: ae:47:6c:eb:82:1d:5e:54:45:ba:0b:7e:a3:cf:56:84:ff:3e: 6a:ac:a3:82:aa:64:77:f3:e8:e8:cb:f7:8e:d5:0d:0d:b3:b3: 0e:1b:32:89:4f:9f:99:c3:22:b1:66:f5:ee:15:63:99:f5:36: d1:c7:ee:a0:58:40:c9:a2:bd:59:f2:58:2b:a7:ea:a3:59:01: c5:1b:9a:24:4b:21:a7:25:2d:4c:99:58:76:d9:38:9c:e8:93: 56:d4:58:9a:e8:2e:fc:89:f6:3b:5f:c6:24:6a:c2:16:f3:de: 73:da:b7:22:f8:2c:a6:b8:35:e2:2a:46:d2:d7:08:81:39:ca: f7:ce:65:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rC2rBy3OI2dSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YzA4ZDljOGYtMWIyZi00NGEyLWI5M2UtZWU0ZGRjMTYxZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrqmUmI5TtxavMU2ZeRUD/6W6160XXyQFHNJ oSbsx9WVyyvm5M6J9PDr+gyAhiL0r++4RFQOBMd5If8zrWR0dwbBOKyPMt134p93 /y9lxjX7SMOtF2y1ocA+xXgLOVpOJWsfuy6c5LZSUbU16DtYaQSZ0I7wxpvskT10 Xc9XVgNftsy43LNCYMWv5fzzLQppk70eVMHVG45baDL2S0bsZu4W+G+TAgdpoGko q0hgi+E4OSbPNPQrvygRfRPN0AtNRwkDx4LhahO0CouX25a5/fCiGqJVcoJnhXJJ jNOr7Xt4RLFmJXHXe/QZBGlbIPR7tN76HUO84ovRBI9gP2BCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEEtc8UOREgM6+tIQlesngdxyePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvNjQxMjg5ZmYtNDQ0Mi0z ZDFlLTlmZWEtYjc3YjY4NDY5NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMTIrBC2VnpnMfKHEPoWFodeR5XUKh6favf0ykkbcf1mVWSvnLFsq8W sYI0+2rgFUrNmC7tf+ZyRPA3NISxxCcKTXGQWic7rNrgYaCjGOexw5Mqur3IzHwc uDz3x9nSd3FtRcIxJb10NcCiMaz9vUz4IkQtRbXMvjI+TKXZwK5HbOuCHV5URboL fqPPVoT/Pmqso4KqZHfz6OjL947VDQ2zsw4bMolPn5nDIrFm9e4VY5n1NtHH7qBY QMmivVnyWCun6qNZAcUbmiRLIaclLUyZWHbZOJzok1bUWJroLvyJ9jtfxiRqwhbz 3nPatyL4LKa4NeIqRtLXCIE5yvfOZcs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org