$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa File: e32cc202-c503-3060-ab79-bb4f841233b4.roa (raw, json) Hash identifier: 8c2mL6TyTDdppSafycfgB8afYcDrAwEIk4CRZxcnFo0= Subject key identifier: 8B:86:25:5A:1C:02:39:D0:EC:E0:0C:5F:24:C5:CA:B3:24:F8:E3:65 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285847B2669D3C20877F4066589800 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 16509 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9d:3c:20:87:7f:40:66:58:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=4c8b027f-f42e-4a85-8311-8fd90ea462e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:02:4a:5f:7c:05:3e:24:39:90:94:de:d7: 75:95:db:80:7f:da:a6:76:0b:7a:a4:07:07:c1:f4: 47:90:ac:f4:36:d4:6c:bb:ee:5a:4d:6b:d4:6f:98: 24:e2:98:fc:4e:ef:e0:26:b7:01:26:a3:e6:2c:a2: d3:04:23:bb:67:87:e3:94:c6:f6:7b:50:07:9f:eb: d3:c3:88:76:8c:e6:01:8b:23:e8:8b:80:2b:a9:d4: 57:51:e5:2f:ef:e3:46:d8:12:0d:b9:73:15:15:27: 93:a9:dd:ee:d4:82:0b:d0:c1:4c:0a:09:37:b8:ba: 43:68:18:60:7b:bb:d6:2a:9c:21:ed:d0:08:d5:8d: c8:f7:52:a2:91:ed:a2:41:00:dc:b9:09:3d:54:5f: 99:82:22:b3:7d:f7:96:ed:f6:96:91:1e:a1:eb:fd: 03:5f:8e:6d:eb:39:bb:73:b3:da:2b:d4:35:a3:6c: 03:8a:d5:b5:ac:6e:46:ce:5b:26:33:e2:c8:fa:0f: 4d:9e:45:ce:c9:7f:9b:54:24:66:08:f9:1a:57:75: 9b:d1:61:cd:1f:fb:cd:17:2a:d7:e3:25:ee:c5:bf: 0f:66:af:f6:9c:9d:ad:db:51:d5:3c:ab:2e:81:cc: 72:23:3f:b0:b9:b1:95:a8:84:36:a2:fa:b7:83:5d: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:25:5A:1C:02:39:D0:EC:E0:0C:5F:24:C5:CA:B3:24:F8:E3:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e32cc202-c503-3060-ab79-bb4f841233b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8e:46:36:1a:56:6b:42:a9:4f:2c:1b:fb:10:95:8a:8d:00: 85:b3:c0:de:48:ca:b8:17:12:73:e9:76:09:66:83:5a:6d:33: bc:13:5e:37:38:21:99:2a:40:29:b2:3a:c0:5c:d4:df:2d:b0: 33:a8:ad:57:b2:c5:f7:a6:e7:d8:7f:fa:45:7c:ed:d0:bb:8d: 92:ff:b2:e4:de:7e:ff:ea:8a:f5:76:ac:d1:a7:f0:d0:fc:84: ec:3b:69:a7:4e:3a:df:33:2e:4b:41:f5:e4:61:86:05:9e:b6: ee:1d:a6:22:bc:19:52:3e:ae:61:61:88:4c:d3:46:59:49:41: df:ac:ac:ba:90:e3:b2:18:d4:bf:d0:58:6c:37:33:b2:ba:2e: 12:2a:41:69:d1:85:e6:9e:81:07:2e:be:c0:bc:20:6d:31:1b: 12:8b:b2:18:70:8c:77:61:ad:99:18:d4:d6:41:39:ce:3a:9b: da:5d:03:d1:3b:a6:1d:a0:09:34:51:7a:bf:73:8e:24:50:e0: 6b:0c:f6:9e:0c:c3:de:9b:e7:fb:e1:e2:8b:37:83:70:58:29: 5a:02:14:0e:0a:1b:5d:c9:76:cd:89:c2:0b:ca:4f:4b:8f:2a: eb:dc:17:a2:01:a5:97:5e:22:8b:2d:40:cc:53:61:28:3c:58: 63:f2:a1:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZp08IId/QGZYmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NGM4YjAyN2YtZjQyZS00YTg1LTgzMTEtOGZkOTBlYTQ2MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAsCSl98BT4kOZCU3td1lduAf9qmdgt6pAcH wfRHkKz0NtRsu+5aTWvUb5gk4pj8Tu/gJrcBJqPmLKLTBCO7Z4fjlMb2e1AHn+vT w4h2jOYBiyPoi4ArqdRXUeUv7+NG2BINuXMVFSeTqd3u1IIL0MFMCgk3uLpDaBhg e7vWKpwh7dAI1Y3I91Kike2iQQDcuQk9VF+ZgiKzffeW7faWkR6h6/0DX45t6zm7 c7PaK9Q1o2wDitW1rG5GzlsmM+LI+g9NnkXOyX+bVCRmCPkaV3Wb0WHNH/vNFyrX 4yXuxb8PZq/2nJ2t21HVPKsugcxyIz+wubGVqIQ2ovq3g10nUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuGJVocAjnQ7OAMXyTFyrMk+ONlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZTMyY2MyMDItYzUwMy0z MDYwLWFiNzktYmI0Zjg0MTIzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKORjYaVmtCqU8sG/sQlYqNAIWzwN5IyrgXEnPpdglmg1ptM7wTXjc4 IZkqQCmyOsBc1N8tsDOorVeyxfem59h/+kV87dC7jZL/suTefv/qivV2rNGn8ND8 hOw7aadOOt8zLktB9eRhhgWetu4dpiK8GVI+rmFhiEzTRllJQd+srLqQ47IY1L/Q WGw3M7K6LhIqQWnRheaegQcuvsC8IG0xGxKLshhwjHdhrZkY1NZBOc46m9pdA9E7 ph2gCTRRer9zjiRQ4GsM9p4Mw96b5/vh4os3g3BYKVoCFA4KG13Jds2JwgvKT0uP KuvcF6IBpZdeIostQMxTYSg8WGPyocY= -----END CERTIFICATE-----Generated at Sun Nov 24 17:21:55 2024 by rpki-client on console-fra.rpki-client.org