$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa File: 37c207ef-3109-390a-8c00-0f9195cf738d.roa (raw, json) Hash identifier: rbnvpgf03kcfD1ne/kv2ginNunrbT3iCI9cMt8RjkmU= Subject key identifier: 8B:A8:52:51:B3:FA:32:73:A1:4F:D1:5F:70:B8:A6:63:CF:7A:80:30 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F43285847E78F6AC9B165C1A0CEEBE600 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 55039 IP address blocks: 199.231.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:6a:c9:b1:65:c1:a0:ce:eb:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=09d30687-291b-4589-b4e8-377852119aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:66:99:11:2d:75:bb:36:96:3e:70:55:9b:78: 0d:2a:22:47:9a:f7:45:ca:6c:d8:95:30:1f:b6:26: 46:55:ed:23:45:76:66:14:de:f3:14:85:32:92:e8: 03:dc:93:5d:47:64:c4:54:b0:e7:cd:23:e0:21:b5: 36:f1:5e:d0:2a:81:eb:b1:cd:8f:bd:5e:48:cc:c9: a1:0f:5f:ce:8a:76:d0:44:62:83:97:54:f1:91:a7: 02:e7:91:b6:88:78:58:3a:00:af:67:bb:ea:9d:df: ec:9e:12:16:ca:2f:7a:13:55:d7:f0:e5:b5:b7:d8: 45:58:e8:0a:08:36:90:9a:ce:78:09:58:8b:5b:65: d9:c4:2d:61:66:2e:2f:c0:14:9a:5e:13:26:11:e0: 1e:ee:fe:fd:23:28:5c:b8:af:39:7c:43:b5:c9:63: ed:ab:8c:a0:c1:88:d8:d9:d5:db:9c:ad:54:9f:d8: 72:6f:41:80:35:a5:2d:54:b9:56:f6:04:45:14:dc: b4:d6:99:a0:ce:2c:e6:bd:63:d2:fd:18:44:0d:b9: db:0b:9c:ed:19:34:a9:b1:41:22:8e:56:c5:5d:69: 0e:c2:d3:12:18:7a:19:0f:ca:e9:24:41:0e:33:12: 78:45:a2:e9:a2:af:28:a2:6f:85:27:d7:b7:66:7e: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A8:52:51:B3:FA:32:73:A1:4F:D1:5F:70:B8:A6:63:CF:7A:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 199.231.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1d:ca:43:e9:54:60:2c:c1:cb:63:54:02:72:58:d2:1d:ef: 0b:14:c0:9b:1c:8d:08:dc:15:6c:df:d0:6c:2d:01:2d:6e:b8: 06:90:32:d2:13:cc:45:63:60:c8:1d:49:9f:39:03:cc:98:67: 2f:50:c1:d8:75:3d:c3:bb:96:51:1a:49:85:66:08:dc:e5:74: c5:52:06:8a:be:c4:3c:34:f5:7c:4b:12:8e:cf:ef:3f:5d:ef: cb:04:d9:40:7b:7f:4e:8a:70:c6:47:fb:df:1e:ef:df:b9:75: e2:87:d7:80:f6:9d:7a:43:6e:06:89:1d:24:d8:29:bd:49:70: ce:12:60:52:a5:1b:11:f6:82:d2:eb:89:ca:e4:65:62:27:3e: 42:79:47:7e:d0:47:9c:03:a3:70:37:96:cf:09:f8:f6:3d:25: 88:5a:2e:a4:e0:a0:15:70:a3:07:62:f1:a8:8a:d2:6a:28:0a: 47:0d:21:b6:d7:d1:9c:4c:59:62:0f:16:ec:08:e4:3a:48:c5: d2:a4:01:70:61:87:24:6c:b8:fb:be:76:50:13:9e:fe:c2:28: a8:7c:23:8e:1f:4b:1c:e6:22:f2:3c:63:64:a1:d2:09:cf:ce: 75:75:08:2a:57:b3:fa:b5:4c:88:40:72:3a:9d:58:27:34:1a: 98:ea:7b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2rJsWXBoM7r5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk MDlkMzA2ODctMjkxYi00NTg5LWI0ZTgtMzc3ODUyMTE5YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WaZES11uzaWPnBVm3gNKiJHmvdFymzYlTAf tiZGVe0jRXZmFN7zFIUykugD3JNdR2TEVLDnzSPgIbU28V7QKoHrsc2PvV5IzMmh D1/OinbQRGKDl1TxkacC55G2iHhYOgCvZ7vqnd/snhIWyi96E1XX8OW1t9hFWOgK CDaQms54CViLW2XZxC1hZi4vwBSaXhMmEeAe7v79IyhcuK85fEO1yWPtq4ygwYjY 2dXbnK1Un9hyb0GANaUtVLlW9gRFFNy01pmgzizmvWPS/RhEDbnbC5ztGTSpsUEi jlbFXWkOwtMSGHoZD8rpJEEOMxJ4RaLpoq8oom+FJ9e3Zn413wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuoUlGz+jJzoU/RX3C4pmPPeoAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMzdjMjA3ZWYtMzEwOS0z OTBhLThjMDAtMGY5MTk1Y2Y3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUdykPpVGAswctjVAJyWNId7wsUwJscjQjcFWzf0GwtAS1uuAaQMtIT zEVjYMgdSZ85A8yYZy9Qwdh1PcO7llEaSYVmCNzldMVSBoq+xDw09XxLEo7P7z9d 78sE2UB7f06KcMZH+98e79+5deKH14D2nXpDbgaJHSTYKb1JcM4SYFKlGxH2gtLr icrkZWInPkJ5R37QR5wDo3A3ls8J+PY9JYhaLqTgoBVwowdi8aiK0mooCkcNIbbX 0ZxMWWIPFuwI5DpIxdKkAXBhhyRsuPu+dlATnv7CKKh8I44fSxzmIvI8Y2Sh0gnP znV1CCpXs/q1TIhAcjqdWCc0Gpjqe+o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org