$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa File: 73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa (raw, json) Hash identifier: cfj32UkOgxRPB88nPYTstqpJX64NyIp5GHklZXqQMaY= Subject key identifier: 57:56:10:66:9B:A7:0D:37:8C:D3:31:98:B2:99:60:6C:48:97:9C:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AF9B145A8B816E4DAE800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 99.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:f9:b1:45:a8:b8:16:e4:da:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=943eaa47-c44d-4cec-8a9d-a6b2fa774e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:7c:57:51:31:62:77:f9:53:a3:70:48:04: d1:13:81:d1:57:c4:17:65:31:84:1d:d4:5a:59:5e: a2:97:8d:db:83:3d:aa:90:19:a2:07:c3:1e:e0:32: eb:e4:1a:32:ce:16:2a:81:4a:ba:97:0c:ba:50:38: aa:90:37:eb:bc:80:24:28:71:17:da:cb:68:c9:1b: b3:f1:d5:55:ef:53:39:40:1f:32:48:d5:46:36:7a: 3a:11:9e:27:22:eb:66:74:d8:93:0e:67:60:62:17: 47:8f:e1:45:e8:3e:b4:37:bd:95:5f:97:4c:c8:14: d7:6a:23:9a:9a:aa:77:80:a6:17:93:a2:cb:ba:8b: e1:45:0d:0c:98:4b:28:72:0b:42:00:aa:55:60:36: d2:2a:99:6b:b1:7a:8a:fb:dd:03:b0:ea:23:86:58: f9:1b:00:ef:d9:5a:4a:32:7f:25:ee:af:57:70:d4: 3a:c6:f3:1c:bb:1e:8b:04:9b:ed:44:95:5c:ad:42: a2:cb:38:a4:d7:30:f5:76:65:39:6e:ba:f8:5a:ff: f9:88:c0:2b:95:70:41:cb:13:94:e4:1e:b8:10:5b: 30:5b:1c:3b:77:44:d6:c4:73:c7:29:be:94:f5:95: d5:cc:65:7e:69:94:8c:04:51:34:47:1f:94:a8:ef: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:56:10:66:9B:A7:0D:37:8C:D3:31:98:B2:99:60:6C:48:97:9C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:5c:c9:0f:6e:3e:7a:0b:37:6e:31:a4:8a:c3:94:92:8c:3d: 7e:2d:4b:71:2e:c4:72:49:18:9e:ba:bf:0f:14:2f:fc:89:b5: 3c:3a:34:ae:77:17:3c:71:1e:5f:2d:86:a4:8a:ce:23:07:d8: d7:c0:b1:35:ab:6a:0a:30:02:df:c8:4c:c6:06:d3:a0:cc:e1: af:be:7d:de:65:05:a0:2c:7b:ac:3a:ce:fc:a2:17:7a:22:3b: 17:2a:39:04:35:a3:b2:a8:a0:54:eb:c8:38:8f:30:ef:d6:5d: 73:84:b5:e2:03:da:95:a8:24:aa:9c:a3:6f:31:e9:5b:c5:75: 86:2c:2c:a9:ae:e8:ad:ed:78:a7:e5:3c:28:ec:42:d0:7a:20: e1:5b:a0:d7:d6:c6:a5:85:0a:15:ab:43:fa:32:86:cd:49:7d: 02:96:7b:46:a3:36:eb:3e:d0:09:d4:8c:18:d3:6e:91:d2:9f: 3e:6a:4b:43:68:fa:a7:01:22:7c:0d:bc:88:b9:32:b2:ab:2b: c2:dd:03:67:c9:3c:55:6c:c0:b0:78:df:e0:0a:d1:4b:b5:a0: b4:15:f4:fb:df:a6:40:8f:7b:90:1d:9a:73:2f:1f:26:ee:ba: e9:01:d9:06:83:df:9b:39:13:de:b6:0c:85:19:e8:8f:7d:65: 07:6a:66:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKvmxRai4FuTa6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTQzZWFhNDctYzQ0ZC00Y2VjLThhOWQtYTZiMmZhNzc0ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouZ8V1ExYnf5U6NwSATRE4HRV8QXZTGEHdRa WV6il43bgz2qkBmiB8Me4DLr5BoyzhYqgUq6lwy6UDiqkDfrvIAkKHEX2stoyRuz 8dVV71M5QB8ySNVGNno6EZ4nIutmdNiTDmdgYhdHj+FF6D60N72VX5dMyBTXaiOa mqp3gKYXk6LLuovhRQ0MmEsocgtCAKpVYDbSKplrsXqK+90DsOojhlj5GwDv2VpK Mn8l7q9XcNQ6xvMcux6LBJvtRJVcrUKiyzik1zD1dmU5brr4Wv/5iMArlXBByxOU 5B64EFswWxw7d0TWxHPHKb6U9ZXVzGV+aZSMBFE0Rx+UqO+C5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdWEGabpw03jNMxmLKZYGxIl5xFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzNiYzY1YTctZGE2ZS0z MGE3LTlkZDgtYmE2NjExY2FjOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZcyQ9uPnoLN24xpIrDlJKMPX4tS3EuxHJJGJ66vw8UL/yJtTw6NK53 FzxxHl8thqSKziMH2NfAsTWragowAt/ITMYG06DM4a++fd5lBaAse6w6zvyiF3oi OxcqOQQ1o7KooFTryDiPMO/WXXOEteID2pWoJKqco28x6VvFdYYsLKmu6K3teKfl PCjsQtB6IOFboNfWxqWFChWrQ/oyhs1JfQKWe0ajNus+0AnUjBjTbpHSnz5qS0No +qcBInwNvIi5MrKrK8LdA2fJPFVswLB43+AK0Uu1oLQV9PvfpkCPe5AdmnMvHybu uukB2QaD35s5E962DIUZ6I99ZQdqZhc= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:25 2024 by rpki-client on console-ams.rpki-client.org