$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa File: f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa (raw, json) Hash identifier: EEVcHUr1bFyjfvy6A55x771fuPRw0BypBAunFH9tAhs= Subject key identifier: 3F:E3:6B:D1:7B:AE:A0:25:3C:E0:77:60:EE:90:30:4C:56:17:B3:9D Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F43285847845678E7097538131A1A9A80 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 12129 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:78:e7:09:75:38:13:1a:1a:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=bb5795f1-b136-49d4-800d-7b74e88e90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:9f:e6:b7:f5:f8:a2:ee:79:49:c6:00:0f: 7b:b8:93:64:42:23:c4:de:43:12:ce:7e:11:47:b1: 1d:56:32:99:f8:ac:fd:c4:3e:e4:b5:74:11:fa:40: 5a:d4:1b:a2:96:a0:98:b4:23:34:4e:76:94:ef:af: 4d:fe:98:c9:8c:39:52:17:2c:2c:2e:ad:9f:d8:d0: 52:08:4d:c9:61:6e:a2:9d:55:45:22:e4:e5:63:09: c9:90:f5:70:d3:e6:d1:b8:e7:45:dd:00:51:7a:75: 49:f4:57:56:43:fe:02:50:dc:bd:a6:c6:25:04:47: 14:d8:4e:79:99:b5:07:b1:e7:94:41:bf:17:22:f5: 1f:f8:5d:98:7b:c1:bb:3d:f8:27:8e:07:a5:9e:f8: 62:5e:5d:a1:1c:00:0a:00:33:40:04:bd:61:a3:e1: 46:3c:f7:b3:64:a3:75:be:53:56:f1:2e:93:a4:69: 2c:15:40:33:dc:95:80:70:f8:7b:c6:2b:a8:62:9c: 45:5e:0d:21:f8:06:ec:e4:c4:ed:19:da:80:cc:01: d9:b6:5f:f2:f4:ca:b3:f7:ab:4e:fc:b5:92:df:1f: c0:67:99:e0:33:54:e1:e1:f0:ca:14:1c:6e:26:4c: 69:92:16:65:27:64:03:99:a1:79:34:44:fa:38:96: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:6B:D1:7B:AE:A0:25:3C:E0:77:60:EE:90:30:4C:56:17:B3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0c:16:d5:51:8f:63:45:f4:b3:67:a3:53:29:79:4a:7e:ec: 3c:6a:18:fb:12:2d:51:bc:63:16:a1:04:a3:ac:37:1f:49:34: 33:ea:a8:e8:aa:fd:ed:11:6b:8f:1c:53:df:1b:05:a8:28:40: ed:37:2e:d4:42:67:18:3d:75:28:af:41:c3:64:f6:b7:14:1f: c1:9f:c8:4c:2e:26:b2:3e:00:7e:fd:3e:72:96:35:21:24:c0: e1:31:fc:2c:b4:70:56:a7:99:13:22:19:a1:6e:9a:e2:92:02: 5c:b6:45:bd:7a:c0:8e:c1:bb:c8:08:87:b1:0d:d4:d2:00:17: 1b:b5:fa:ed:1d:60:45:f6:f6:63:14:13:19:64:50:98:85:72: 38:ed:3a:47:8e:e6:38:5e:42:3c:ea:61:51:5e:1e:41:1b:36: 75:13:59:bc:c6:7d:f8:1b:d7:ed:8a:6d:58:17:66:8c:30:ba: 23:ef:4e:66:43:18:ed:60:49:e2:4e:6a:37:c1:3a:ba:fa:8a: 74:8d:f6:b5:63:3c:6d:22:8c:20:f7:27:56:b7:1a:22:bd:0a: 7d:87:81:8f:09:55:d7:df:d2:a9:dc:1e:8d:8d:5a:17:d9:c9: 7e:8b:c9:db:67:24:6d:6d:03:ea:b9:1a:34:57:b0:a3:b9:42: d5:e5:d3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnjnCXU4ExoamoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk YmI1Nzk1ZjEtYjEzNi00OWQ0LTgwMGQtN2I3NGU4OGU5MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEqf5rf1+KLueUnGAA97uJNkQiPE3kMSzn4R R7EdVjKZ+Kz9xD7ktXQR+kBa1BuilqCYtCM0TnaU769N/pjJjDlSFywsLq2f2NBS CE3JYW6inVVFIuTlYwnJkPVw0+bRuOdF3QBRenVJ9FdWQ/4CUNy9psYlBEcU2E55 mbUHseeUQb8XIvUf+F2Ye8G7PfgnjgelnvhiXl2hHAAKADNABL1ho+FGPPezZKN1 vlNW8S6TpGksFUAz3JWAcPh7xiuoYpxFXg0h+Abs5MTtGdqAzAHZtl/y9Mqz96tO /LWS3x/AZ5ngM1Th4fDKFBxuJkxpkhZlJ2QDmaF5NET6OJYj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/ja9F7rqAlPOB3YO6QMExWF7OdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvZjZmYWMwOWUtNmRmZC0z MGVmLWI4YzAtMmRhOTJiYzUzYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQMFtVRj2NF9LNno1MpeUp+7DxqGPsSLVG8YxahBKOsNx9JNDPqqOiq /e0Ra48cU98bBagoQO03LtRCZxg9dSivQcNk9rcUH8GfyEwuJrI+AH79PnKWNSEk wOEx/Cy0cFanmRMiGaFumuKSAly2Rb16wI7Bu8gIh7EN1NIAFxu1+u0dYEX29mMU ExlkUJiFcjjtOkeO5jheQjzqYVFeHkEbNnUTWbzGffgb1+2KbVgXZowwuiPvTmZD GO1gSeJOajfBOrr6inSN9rVjPG0ijCD3J1a3GiK9Cn2HgY8JVdff0qncHo2NWhfZ yX6LydtnJG1tA+q5GjRXsKO5QtXl02g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:57 2024 by rpki-client on console-ams.rpki-client.org