$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa File: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (raw, json) Hash identifier: SE2ofOMjpGA8Mp+TnElaRpLIlZwdrwTXbMcfJ7cCZDA= Subject key identifier: 22:38:18:77:AB:21:DD:34:CC:C6:CD:09:E5:09:67:83:17:57:69:14 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F432858472405C4A6B850A073736677A0 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa Signing time: Sun 08 Sep 2024 01:00:31 +0000 ROA not before: Sun 08 Sep 2024 01:00:31 +0000 ROA not after: Sat 07 Dec 2024 02:00:31 +0000 asID: 14525 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:24:05:c4:a6:b8:50:a0:73:73:66:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Sep 8 01:00:31 2024 GMT Not After : Dec 7 02:00:31 2024 GMT Subject: CN=9336c194-f296-4187-b7bc-518de12df3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:7c:63:da:53:f6:58:a5:ea:ce:3b:e9:28: 8b:95:2e:00:9f:f7:d7:51:86:02:ae:5c:74:2a:07: ef:7d:6f:84:41:bb:58:1d:11:55:18:4f:0e:e1:e2: 20:a5:ee:ce:65:da:06:7b:11:fd:18:5f:4a:2e:4c: a6:27:90:12:57:4d:5a:8c:24:6c:e0:92:dc:53:30: 3e:6c:d2:63:cd:dd:94:2b:57:ae:35:5d:73:3c:b9: 86:0e:83:a1:83:22:d2:55:42:8f:4e:2e:0f:bb:a9: ef:3b:c3:74:5e:71:b0:3d:13:24:a0:b2:a4:f5:cf: a4:51:b2:8a:28:46:93:d1:49:b2:e3:5c:90:df:7e: 89:ff:72:b6:ea:6c:b8:d0:08:64:0e:97:9c:06:83: 85:25:eb:d9:71:b6:20:68:d5:c0:a8:d4:d4:6f:32: be:d0:54:22:dd:e7:f3:48:b1:93:dd:4e:db:5c:0f: 40:46:df:a8:aa:ac:e8:c9:14:88:cd:b1:c9:c3:04: 4d:f2:df:fe:81:7e:9d:2b:3e:73:15:68:06:ad:39: c5:f1:dc:6a:25:4b:26:6e:e7:33:29:17:7a:b7:a9: cd:79:2b:31:82:ff:99:e5:61:25:cb:ae:05:f6:b8: a3:50:fb:03:e4:a9:8f:87:f1:8a:3e:28:40:fa:3d: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:38:18:77:AB:21:DD:34:CC:C6:CD:09:E5:09:67:83:17:57:69:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:9c:7a:82:c2:7e:c6:5f:fa:6e:48:03:7b:6d:e9:25:5e:89: c4:83:6c:17:73:c0:f2:ca:59:85:7d:bf:4c:ef:6c:bc:77:28: 99:75:36:51:74:ea:0a:cd:5b:8b:26:23:09:22:0f:a2:bf:53: 90:a8:59:a9:18:72:07:cb:3f:56:70:0e:c9:2d:dc:fa:59:79: 67:18:5e:90:4f:4f:9f:99:a8:68:6c:ac:a1:7a:e8:cf:5d:ee: 56:df:45:c1:3b:0d:6f:a5:c9:79:e3:a8:7b:56:ac:93:f2:1e: 20:cb:0b:7d:98:a6:a2:be:ef:4e:01:99:f4:0e:8c:56:80:01: 95:6d:f8:38:81:e5:95:c1:53:cf:77:92:f8:d4:3c:9a:86:05: c2:37:5a:e7:31:6d:a4:cc:af:af:85:59:a9:2d:e7:72:a0:59: fc:69:00:83:76:00:98:08:8f:93:6e:6e:49:bd:a5:a2:31:db: aa:6e:93:f2:c9:98:f3:29:57:ea:0b:e3:01:07:ed:b4:0d:57: b1:80:7e:6b:bd:05:bb:c9:33:c8:bf:a5:ef:f7:3d:5a:47:73: ae:1e:64:e8:15:b8:c8:ce:2b:64:37:da:02:27:f4:05:92:aa: 81:03:0c:4e:cf:b6:36:4a:11:e8:ea:1c:17:a4:6d:d9:ff:e5: 04:c4:59:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcSmuFCgc3Nmd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk OTMzNmMxOTQtZjI5Ni00MTg3LWI3YmMtNTE4ZGUxMmRmM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvh8Y9pT9lil6s476SiLlS4An/fXUYYCrlx0 KgfvfW+EQbtYHRFVGE8O4eIgpe7OZdoGexH9GF9KLkymJ5ASV01ajCRs4JLcUzA+ bNJjzd2UK1euNV1zPLmGDoOhgyLSVUKPTi4Pu6nvO8N0XnGwPRMkoLKk9c+kUbKK KEaT0Umy41yQ336J/3K26my40AhkDpecBoOFJevZcbYgaNXAqNTUbzK+0FQi3efz SLGT3U7bXA9ARt+oqqzoyRSIzbHJwwRN8t/+gX6dKz5zFWgGrTnF8dxqJUsmbucz KRd6t6nNeSsxgv+Z5WEly64F9rijUPsD5KmPh/GKPihA+j24hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI4GHerId00zMbNCeUJZ4MXV2kUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMGNhOWZiNzEtNGQ1NC0z ZDMzLTk4MDUtNGU2NTg1ZjcxNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyceoLCfsZf+m5IA3tt6SVeicSDbBdzwPLKWYV9v0zvbLx3KJl1NlF0 6grNW4smIwkiD6K/U5CoWakYcgfLP1ZwDskt3PpZeWcYXpBPT5+ZqGhsrKF66M9d 7lbfRcE7DW+lyXnjqHtWrJPyHiDLC32YpqK+704BmfQOjFaAAZVt+DiB5ZXBU893 kvjUPJqGBcI3WucxbaTMr6+FWakt53KgWfxpAIN2AJgIj5Nubkm9paIx26puk/LJ mPMpV+oL4wEH7bQNV7GAfmu9BbvJM8i/pe/3PVpHc64eZOgVuMjOK2Q32gIn9AWS qoEDDE7PtjZKEejqHBekbdn/5QTEWWU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:36:44 2024 by rpki-client on console-fra.rpki-client.org