$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa File: 3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa (raw, json) Hash identifier: /okEjV5vivF3MfLfxkQaOhO++HMXAwZh0gwuxFu6T2Y= Subject key identifier: F5:53:BC:F7:56:35:9B:E0:82:2E:08:39:64:CE:84:F0:E6:DF:18:16 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F43285847213B20FF44187CC8FD281A80 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 395077 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:20:ff:44:18:7c:c8:fd:28:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=5d292af2-3d12-4f9c-b1c7-4fe78cabe444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:6e:12:6a:6e:ba:e7:d7:e8:b3:c8:e9:cb: 15:18:15:db:ab:27:a0:74:66:92:66:8b:a7:4b:dc: d5:0d:95:2e:e5:18:8b:73:d6:c5:0c:ad:9e:9d:75: 4e:2f:6b:6c:66:a1:fe:19:5f:3f:37:9b:8c:bb:4b: e4:c7:92:a0:41:55:15:6d:60:29:e1:f1:04:dc:a9: dc:64:19:4c:29:85:82:41:00:05:23:38:39:38:05: 13:cc:99:66:e6:d2:4b:08:e9:84:fd:97:b2:61:47: bc:02:43:8f:55:35:1f:e9:35:46:73:8a:2f:11:6a: c3:f6:58:7f:43:22:c9:bc:86:cc:01:5e:2d:aa:fc: ee:c4:af:d7:43:69:80:ae:ff:65:1a:32:ff:8c:bc: 13:28:00:09:5a:dd:a5:87:e4:12:b4:94:41:31:0b: 98:56:35:ef:83:c4:28:38:1b:ab:45:16:78:60:59: 1a:0a:42:3c:ba:d0:64:bf:21:ad:cd:25:78:39:25: 35:ec:cd:d3:70:9c:5d:da:63:94:c4:30:44:e0:6b: 70:36:fb:64:89:a2:35:7d:94:f8:90:59:0f:c0:50: 63:eb:7d:9b:45:46:03:02:93:5c:77:d3:33:da:84: 61:ca:6e:5b:f5:1b:4d:5b:83:fa:bc:fc:fd:8f:ea: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:53:BC:F7:56:35:9B:E0:82:2E:08:39:64:CE:84:F0:E6:DF:18:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1b:0f:28:91:fd:d1:de:92:3f:cc:3d:a4:2d:ac:d1:c9:be: f9:89:43:64:7d:6a:4d:7d:03:05:dd:34:5e:96:54:15:fc:44: be:bc:ae:c0:42:8b:5a:39:30:8b:05:76:3a:00:f4:f0:e3:44: 60:10:e0:05:d2:bd:82:88:3e:27:bd:43:7d:81:e1:03:be:d1: de:fa:91:df:52:ba:01:0b:0b:1c:2a:a0:5c:ad:5d:4f:7b:2c: 1c:54:21:a4:47:6b:b5:33:aa:bb:39:39:85:b3:ab:95:64:39: eb:db:55:ef:4f:63:1c:09:7e:8f:75:3a:90:23:b2:06:5f:11: 42:e1:a1:38:59:f8:81:00:fb:08:5f:97:d1:0c:b5:98:1d:3a: 7f:81:7d:de:ce:f0:3e:c1:98:1f:38:39:32:ea:96:a5:4f:1f: fd:08:7e:02:f7:6f:8f:17:61:88:02:e2:a1:6e:96:9b:2d:6a: 18:6b:25:15:94:fa:91:e5:1e:02:60:07:4c:22:86:4d:55:72: f9:c7:e3:2d:5f:30:07:f4:56:fc:9a:24:41:53:15:37:80:c9: c2:0b:3c:bb:4d:86:20:37:32:8b:16:f0:0f:f0:18:25:68:84: cb:04:a6:ac:62:5b:72:af:5b:cd:ca:cd:a1:51:eb:ae:1e:00: 78:b8:97:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOyD/RBh8yP0oGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk NWQyOTJhZjItM2QxMi00ZjljLWIxYzctNGZlNzhjYWJlNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi1uEmpuuufX6LPI6csVGBXbqyegdGaSZoun S9zVDZUu5RiLc9bFDK2enXVOL2tsZqH+GV8/N5uMu0vkx5KgQVUVbWAp4fEE3Knc ZBlMKYWCQQAFIzg5OAUTzJlm5tJLCOmE/ZeyYUe8AkOPVTUf6TVGc4ovEWrD9lh/ QyLJvIbMAV4tqvzuxK/XQ2mArv9lGjL/jLwTKAAJWt2lh+QStJRBMQuYVjXvg8Qo OBurRRZ4YFkaCkI8utBkvyGtzSV4OSU17M3TcJxd2mOUxDBE4GtwNvtkiaI1fZT4 kFkPwFBj632bRUYDApNcd9Mz2oRhym5b9RtNW4P6vPz9j+rWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVTvPdWNZvggi4IOWTOhPDm3xgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvM2VmYTY5YjktMzk4YS0z N2QwLThlNGEtYzhjODFhOWU1NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIbDyiR/dHekj/MPaQtrNHJvvmJQ2R9ak19AwXdNF6WVBX8RL68rsBC i1o5MIsFdjoA9PDjRGAQ4AXSvYKIPie9Q32B4QO+0d76kd9SugELCxwqoFytXU97 LBxUIaRHa7Uzqrs5OYWzq5VkOevbVe9PYxwJfo91OpAjsgZfEULhoThZ+IEA+whf l9EMtZgdOn+Bfd7O8D7BmB84OTLqlqVPH/0IfgL3b48XYYgC4qFulpstahhrJRWU +pHlHgJgB0wihk1VcvnH4y1fMAf0VvyaJEFTFTeAycILPLtNhiA3MosW8A/wGCVo hMsEpqxiW3KvW83KzaFR664eAHi4l9w= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:46 2024 by rpki-client on console-ams.rpki-client.org