$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44d0b41-4b4e-35cd-ba1f-fb221d72b80d.roa File: e44d0b41-4b4e-35cd-ba1f-fb221d72b80d.roa (raw, json) Hash identifier: slGcPsz+DMiBQmqMJNnvpKlXsAQK2z/xOZ+r+kw8rmw= Subject key identifier: E3:DB:A7:FB:60:C3:B8:C2:AE:4D:BC:63:7B:93:AC:2C:6A:EB:4D:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5C5E319D4501CCB0BFA780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44d0b41-4b4e-35cd-ba1f-fb221d72b80d.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 199.27.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:5c:5e:31:9d:45:01:cc:b0:bf:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=966f0834-163e-4441-81bf-edfe0952b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:f4:76:50:70:1a:97:da:6e:7f:c6:0e:0c: 7d:ed:d2:e9:7f:a6:a5:d9:ef:a4:e1:ef:45:1a:a0: 62:7a:26:5a:ae:97:4a:f3:be:db:87:6e:09:8d:f5: 8a:12:ea:e6:11:3a:b3:47:86:a6:19:6e:62:33:e2: 90:cb:c2:64:6b:f7:a7:bf:0e:bd:d1:c2:07:b2:08: 74:9b:51:e5:b0:40:81:a7:03:7c:68:0a:02:8b:cf: e6:e7:d1:ea:18:2e:4f:d7:39:64:fc:71:aa:4e:cc: ce:8a:9f:6c:ad:19:ff:05:df:bc:2d:4e:83:b1:99: 58:41:92:a4:23:28:d6:d4:61:22:62:fd:66:81:75: 79:a3:4a:64:dc:a1:ce:38:9a:2a:d6:89:b7:e5:03: b6:e9:74:70:60:58:26:eb:3c:c9:1c:78:3d:66:d8: 9a:5f:ba:3f:d8:4d:2a:9f:f1:05:34:9f:b9:3e:b8: 81:8c:c0:91:9d:e9:f8:1e:3c:5a:3a:e4:7d:49:bb: 26:1c:01:dc:91:ff:a4:e4:e3:9c:f3:63:65:d0:51: 1e:9a:15:7a:fc:38:b7:92:9b:e7:ac:44:57:04:09: 56:03:3c:13:b1:2b:5a:ce:dc:75:e6:16:42:0a:72: 50:33:97:0e:df:9f:e3:bd:8a:be:0e:0d:c9:36:63: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:A7:FB:60:C3:B8:C2:AE:4D:BC:63:7B:93:AC:2C:6A:EB:4D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44d0b41-4b4e-35cd-ba1f-fb221d72b80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 199.27.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:41:de:af:ca:9c:88:32:87:bf:fb:93:75:4e:52:0e:bf:a9: 0f:1c:bd:3b:b3:67:d1:6d:9c:62:95:98:69:fb:5c:5b:38:ce: 03:85:ae:74:4d:98:ed:fb:0e:05:21:88:8f:00:3a:ca:39:a3: 08:8d:1f:77:6f:09:e6:3e:c3:97:63:ef:32:8b:62:9f:28:50: f2:34:51:da:16:a6:e0:12:8b:34:08:82:e8:d8:48:64:a4:e2: 48:68:1e:df:5a:7a:9b:84:1d:25:ca:1c:b7:1b:8f:aa:d5:9a: 2e:9b:b0:d1:ab:32:60:cd:0b:81:a8:f8:8b:fd:89:18:9b:25: 82:b9:b5:ba:76:9e:12:94:eb:82:69:35:e8:0f:82:80:8f:49: bc:f4:20:4a:56:6a:98:fb:79:9e:af:cf:07:90:41:8b:5e:b8: 1f:04:f3:8b:e9:cc:3d:77:06:82:c2:6a:54:c7:3c:64:08:3a: ca:bb:ed:06:4e:6c:00:dd:03:0c:99:40:9c:36:8b:58:82:f6: ba:7e:69:ef:76:72:c2:6a:c2:7f:21:53:e2:bd:c1:41:44:46: b8:34:86:d7:61:d6:c7:03:16:23:09:c7:26:60:4b:86:43:d5: 7a:03:02:69:76:3f:d0:d6:29:8b:4b:b4:c5:35:b3:41:85:cd: b9:df:fd:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7XF4xnUUBzLC/p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk OTY2ZjA4MzQtMTYzZS00NDQxLTgxYmYtZWRmZTA5NTJiMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyz0dlBwGpfabn/GDgx97dLpf6al2e+k4e9F GqBieiZarpdK877bh24JjfWKEurmETqzR4amGW5iM+KQy8Jka/envw690cIHsgh0 m1HlsECBpwN8aAoCi8/m59HqGC5P1zlk/HGqTszOip9srRn/Bd+8LU6DsZlYQZKk IyjW1GEiYv1mgXV5o0pk3KHOOJoq1om35QO26XRwYFgm6zzJHHg9ZtiaX7o/2E0q n/EFNJ+5PriBjMCRnen4HjxaOuR9SbsmHAHckf+k5OOc82Nl0FEemhV6/Di3kpvn rERXBAlWAzwTsStaztx15hZCCnJQM5cO35/jvYq+Dg3JNmM/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPbp/tgw7jCrk28Y3uTrCxq601oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTQ0ZDBiNDEtNGI0ZS0z NWNkLWJhMWYtZmIyMjFkNzJiODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9B3q/KnIgyh7/7k3VOUg6/qQ8cvTuzZ9FtnGKVmGn7XFs4zgOFrnRN mO37DgUhiI8AOso5owiNH3dvCeY+w5dj7zKLYp8oUPI0UdoWpuASizQIgujYSGSk 4khoHt9aepuEHSXKHLcbj6rVmi6bsNGrMmDNC4Go+Iv9iRibJYK5tbp2nhKU64Jp NegPgoCPSbz0IEpWapj7eZ6vzweQQYteuB8E84vpzD13BoLCalTHPGQIOsq77QZO bADdAwyZQJw2i1iC9rp+ae92csJqwn8hU+K9wUFERrg0htdh1scDFiMJxyZgS4ZD 1XoDAml2P9DWKYtLtMU1s0GFzbnf/as= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:15 2024 by rpki-client on console-ams.rpki-client.org