$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa File: 02a2b201-0d63-3b68-aadd-ec4984b4846f.roa (raw, json) Hash identifier: 3WwSKJlhvMn1CXIYBw8lkxAH/0cVLbH+jzA2LzSoej8= Subject key identifier: FD:68:E7:A9:2A:A1:48:EE:ED:30:01:98:37:71:7A:E6:7F:07:6A:1F Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F43285847BEF6D043DE5228D3AC9948B4 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 12129 IP address blocks: 199.167.252.0/24 maxlen: 24 199.167.253.0/24 maxlen: 24 199.167.254.0/24 maxlen: 24 199.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d0:43:de:52:28:d3:ac:99:48:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=6e31275d-3986-4c5c-9cf7-d5fe5fcdba70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:a3:18:3f:e8:98:22:08:bc:52:8a:4e:2b: c6:f0:53:b2:71:ea:54:82:c6:57:aa:e3:e9:52:e3: fc:17:ae:34:81:12:1d:27:ec:74:3e:ac:62:60:d2: c5:06:08:fc:b8:61:86:a1:e9:22:11:19:e9:77:c2: f9:67:b9:21:ad:dc:62:b4:5b:71:4c:7b:86:d6:b9: 84:2a:0c:6b:61:9b:d4:d7:9f:24:39:2b:10:51:e1: d0:f7:90:e8:1d:d9:b4:f0:4e:a8:8c:a7:75:57:e6: ca:62:ea:c6:77:03:af:36:57:44:1d:ee:09:85:d6: 70:5b:d1:6a:a9:38:1c:d1:fa:be:0f:a4:bb:7d:91: be:20:5a:54:a6:d0:4a:fa:f7:21:9d:b9:9c:bb:48: ed:8a:a0:f6:da:4e:f8:05:b8:fe:97:53:d6:ad:56: 56:3c:7a:2d:20:e5:53:37:23:d3:19:b1:94:b6:c5: ed:13:53:3d:72:e1:3e:7e:5b:f0:01:a3:c6:19:de: 58:36:3a:c6:90:74:27:c5:4b:1d:88:96:64:8c:00: b8:e4:bf:6a:1e:82:75:e5:7d:58:d2:8a:53:2b:70: 82:9b:96:46:34:0a:7c:fc:2f:91:f3:2b:7e:7f:a3: a9:b9:c7:38:ca:5f:19:14:ad:db:74:4f:03:fc:bc: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:68:E7:A9:2A:A1:48:EE:ED:30:01:98:37:71:7A:E6:7F:07:6A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:43:3d:c8:01:ff:3b:15:60:52:8f:43:df:6a:e6:0f:86:03: 55:89:35:47:68:92:e5:fd:8c:d4:34:22:c2:cd:53:8e:46:3b: ca:e1:80:2c:a1:6e:b9:68:ab:42:ca:7b:9d:25:17:95:f7:37: a3:3f:3b:23:d7:30:88:0b:bc:0b:75:2a:66:b0:87:ed:15:a6: 15:51:c0:bd:21:a1:b9:5a:de:c4:d9:43:09:df:0e:19:37:40: de:b4:26:66:23:06:9a:84:27:35:a9:ae:b4:28:c4:ba:79:a5: b8:b6:b6:10:e0:a0:39:c6:c2:d3:82:c2:01:6e:f9:4d:31:08: f9:54:9e:02:00:7c:87:be:74:77:0f:02:77:08:fa:e0:71:79: 59:8a:7c:d6:94:d4:15:cc:db:3d:7a:24:7f:e1:d1:12:cc:2a: 0d:14:05:2f:1c:49:a0:1f:7b:31:a2:f3:78:0e:b0:96:ec:e6: 82:fa:a1:88:59:e6:89:47:d6:65:9e:17:47:25:68:b4:df:a7: a0:f1:c8:35:d5:10:5b:53:53:f7:ab:8b:e0:76:4d:31:b2:69: a8:b3:d0:0c:fe:f0:3b:dd:64:56:66:1c:38:97:11:31:06:ca: f4:03:6e:48:56:a2:84:88:51:37:aa:a8:91:a2:34:11:57:ff: 97:23:d4:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tBD3lIo06yZSLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NmUzMTI3NWQtMzk4Ni00YzVjLTljZjctZDVmZTVmY2RiYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrCjGD/omCIIvFKKTivG8FOycepUgsZXquPp UuP8F640gRIdJ+x0PqxiYNLFBgj8uGGGoekiERnpd8L5Z7khrdxitFtxTHuG1rmE KgxrYZvU158kOSsQUeHQ95DoHdm08E6ojKd1V+bKYurGdwOvNldEHe4JhdZwW9Fq qTgc0fq+D6S7fZG+IFpUptBK+vchnbmcu0jtiqD22k74Bbj+l1PWrVZWPHotIOVT NyPTGbGUtsXtE1M9cuE+flvwAaPGGd5YNjrGkHQnxUsdiJZkjAC45L9qHoJ15X1Y 0opTK3CCm5ZGNAp8/C+R8yt+f6Opucc4yl8ZFK3bdE8D/LwATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1o56kqoUju7TABmDdxeuZ/B2ofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvMDJhMmIyMDEtMGQ2My0z YjY4LWFhZGQtZWM0OTg0YjQ4NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhDPcgB/zsVYFKPQ99q5g+GA1WJNUdokuX9jNQ0IsLNU45GO8rhgCyh brloq0LKe50lF5X3N6M/OyPXMIgLvAt1Kmawh+0VphVRwL0hobla3sTZQwnfDhk3 QN60JmYjBpqEJzWprrQoxLp5pbi2thDgoDnGwtOCwgFu+U0xCPlUngIAfIe+dHcP AncI+uBxeVmKfNaU1BXM2z16JH/h0RLMKg0UBS8cSaAfezGi83gOsJbs5oL6oYhZ 5olH1mWeF0claLTfp6DxyDXVEFtTU/eri+B2TTGyaaiz0Az+8DvdZFZmHDiXETEG yvQDbkhWooSIUTeqqJGiNBFX/5cj1KM= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org