$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa File: 0dbacf1d-4230-3d02-84fd-6777d863a650.roa (raw, json) Hash identifier: wYSuQNGTkdGOfbFFswddY3/yN4waaq1z6otTqA3Vlcg= Subject key identifier: 24:9E:39:8A:B5:3E:BF:40:A3:73:35:7B:F6:DC:60:9B:65:E7:65:42 Certificate issuer: /CN=8332c7ea-33d5-482c-9c3e-a035a45cee4b Certificate serial: 010D0C9F43285847AB6C084C30C4E533F4525840 Authority key identifier: CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 23313 IP address blocks: 199.16.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:08:4c:30:c4:e5:33:f4:52:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332c7ea-33d5-482c-9c3e-a035a45cee4b Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=954ee47b-bb94-4b4b-97a2-28a9781e53b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:68:5c:1d:b0:04:0f:fe:c9:07:80:35:18: 0c:2b:dc:3c:89:fd:8e:37:1b:97:06:60:c2:d7:36: 70:6c:b1:1f:c6:63:9b:53:f6:d1:91:b8:96:89:c0: f4:ca:3d:19:72:dd:1b:96:d4:53:22:95:f0:bb:7c: 08:9e:72:8e:bf:c4:e4:85:38:d6:dc:af:51:15:c6: 11:55:cd:9b:15:34:dc:45:20:31:5f:78:ba:a7:2a: 03:38:3c:79:bc:d9:a1:bf:15:e8:79:73:45:aa:a7: 9a:47:23:03:49:f3:77:3b:9b:af:93:ae:ca:f4:5d: 62:1f:8d:09:8c:e7:14:60:c6:d2:1c:8b:c3:6d:50: b6:84:ed:bc:cf:82:4b:28:a8:d9:e1:de:48:c4:a0: d5:1e:9b:34:9e:c2:05:4d:1e:12:ba:bc:a3:68:f5: 7d:d9:13:bf:76:49:45:5f:ec:1f:57:6b:b6:59:ce: 45:e5:dc:2b:0a:74:65:93:fa:df:66:b7:fb:55:ca: b3:1f:c7:87:e9:04:a7:c4:73:84:0b:2f:c5:1b:a5: 9a:d8:51:f3:a7:b3:23:92:2b:77:bc:4c:94:fb:2a: 38:ad:7f:42:74:0d:b0:cd:50:a6:b9:1b:c6:ea:3b: d4:82:45:0b:58:66:16:ef:d0:e0:13:75:3f:87:b1: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9E:39:8A:B5:3E:BF:40:A3:73:35:7B:F6:DC:60:9B:65:E7:65:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.crl X509v3 Authority Key Identifier: keyid:CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer sbgp-ipAddrBlock: critical IPv4: 199.16.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a6:6f:2e:d2:e0:6a:be:54:a1:a0:9a:b1:1c:3e:a1:5c:1e: aa:23:05:13:f2:c8:a9:a6:6e:0d:68:d0:8e:5b:cd:ad:27:d1: f2:34:15:6d:a0:1b:5b:a8:9a:d8:ef:f5:c4:b8:6b:94:4e:95: 39:23:ac:0f:37:71:fe:40:4b:d9:6c:ea:11:d9:d1:29:ba:03: 83:7b:db:33:0d:bf:21:36:5b:83:15:9d:3f:c2:b5:c6:e1:0f: 80:ca:7f:00:65:1a:4e:53:dc:3c:3a:22:14:0c:d1:13:b6:9b: f2:3e:b8:2b:73:39:04:f0:28:e1:40:fc:86:2f:7c:f1:fb:8d: 4a:b1:62:34:41:e9:20:b5:ff:32:42:26:36:63:77:d6:dc:80: 25:c1:42:05:12:e0:0e:45:b1:02:a4:86:d8:ef:1b:3f:a4:73: 49:8e:94:d1:37:c1:10:71:26:ce:f1:b8:98:bb:d7:e6:c0:34: 95:84:21:dc:32:5a:41:03:db:d0:e8:17:86:5e:4c:2b:90:3e: 1d:a1:c3:fb:d9:70:1a:01:a6:d2:a8:f5:13:4b:77:81:30:c4: 33:c4:c7:cd:d6:e0:71:75:d0:22:25:3f:d3:0d:9b:1d:b1:a1: 72:28:ae:cb:d5:73:10:ca:e9:17:65:04:b1:fa:b5:76:e9:80: 26:1b:93:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAhMMMTlM/RSWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMzMmM3ZWEtMzNkNS00ODJjLTljM2UtYTAzNWE0NWNl ZTRiMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk OTU0ZWU0N2ItYmI5NC00YjRiLTk3YTItMjhhOTc4MWU1M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbtoXB2wBA/+yQeANRgMK9w8if2ONxuXBmDC 1zZwbLEfxmObU/bRkbiWicD0yj0Zct0bltRTIpXwu3wInnKOv8TkhTjW3K9RFcYR Vc2bFTTcRSAxX3i6pyoDODx5vNmhvxXoeXNFqqeaRyMDSfN3O5uvk67K9F1iH40J jOcUYMbSHIvDbVC2hO28z4JLKKjZ4d5IxKDVHps0nsIFTR4SuryjaPV92RO/dklF X+wfV2u2Wc5F5dwrCnRlk/rfZrf7VcqzH8eH6QSnxHOECy/FG6Wa2FHzp7Mjkit3 vEyU+yo4rX9CdA2wzVCmuRvG6jvUgkULWGYW79DgE3U/h7HInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSeOYq1Pr9Ao3M1e/bcYJtl52VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzMy YzdlYS0zM2Q1LTQ4MmMtOWMzZS1hMDM1YTQ1Y2VlNGIvMGRiYWNmMWQtNDIzMC0z ZDAyLTg0ZmQtNjc3N2Q4NjNhNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODMzMmM3ZWEtMzNkNS00ODJjLTlj M2UtYTAzNWE0NWNlZTRiLzgzMzJjN2VhLTMzZDUtNDgyYy05YzNlLWEwMzVhNDVj ZWU0Yi5jcmwwHwYDVR0jBBgwFoAUzI55TIyUr2sMbfEDlU471rqgmMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzMyYzdlYS0zM2Q1LTQ4MmMtOWMzZS1hMDM1 YTQ1Y2VlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSmby7S4Gq+VKGgmrEcPqFcHqojBRPyyKmmbg1o0I5bza0n0fI0FW2g G1uomtjv9cS4a5ROlTkjrA83cf5AS9ls6hHZ0Sm6A4N72zMNvyE2W4MVnT/Ctcbh D4DKfwBlGk5T3Dw6IhQM0RO2m/I+uCtzOQTwKOFA/IYvfPH7jUqxYjRB6SC1/zJC JjZjd9bcgCXBQgUS4A5FsQKkhtjvGz+kc0mOlNE3wRBxJs7xuJi71+bANJWEIdwy WkED29DoF4ZeTCuQPh2hw/vZcBoBptKo9RNLd4EwxDPEx83W4HF10CIlP9MNmx2x oXIorsvVcxDK6RdlBLH6tXbpgCYbk2k= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org