$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: VxmcAZQbjOoARwUwTSbta4y6iuw1rmL+b/yTwaQmrKo= Subject key identifier: C2:C2:4D:13:3E:28:B2:A6:6B:36:52:FF:CE:BA:1D:A3:07:E6:F5:8C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858477D5B9D835F13BEC76D2D9740 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:9d:83:5f:13:be:c7:6d:2d:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=422ae502-bb25-4c4d-a0d0-38b0441fcac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:69:1e:8b:8c:88:8b:64:d7:6d:3e:1e:97:ad: 64:6b:d1:6e:19:df:33:7c:d5:f9:cd:45:8c:11:88: 3e:23:ff:38:bb:a3:06:1b:79:6b:c6:e7:2b:ab:0a: e3:99:2a:4c:36:de:e3:80:88:65:68:78:d6:22:ec: 92:1e:d3:41:47:8a:e8:8b:2d:b5:eb:1d:2c:1f:20: 14:3c:10:32:c7:34:ae:89:9f:c3:76:b7:53:f8:b0: 85:2e:5a:32:62:17:d1:2b:5a:ba:88:08:c9:3c:e2: ae:0f:8d:c0:df:0d:15:41:38:ed:1b:0a:c7:8d:6c: 96:7a:c8:6e:9e:f9:5d:d2:b3:f9:7e:2f:0d:fe:0d: ce:cc:cf:f2:b3:d6:84:33:49:51:eb:75:5d:87:a5: 58:70:5c:17:0e:3e:74:57:2d:95:05:b8:38:2a:b1: 67:a0:bc:66:8a:f1:ef:63:b8:9f:d3:65:82:1e:4e: 57:f9:69:5b:4a:e7:fc:d6:64:86:a4:9c:50:cf:3e: 0f:2a:5c:c1:6f:c3:2a:e1:e8:df:a7:ab:84:8d:dc: 4b:d5:00:f7:28:fc:81:1e:05:43:e9:ad:f8:8d:cf: 42:1a:d8:c3:ca:6c:e7:f3:b2:16:a9:9c:35:b9:50: 67:e2:10:d7:70:0b:e8:af:5e:3a:ce:76:51:73:41: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C2:4D:13:3E:28:B2:A6:6B:36:52:FF:CE:BA:1D:A3:07:E6:F5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:90:fa:c1:f1:d8:8e:d1:75:69:41:68:a3:30:b8:90:8e:9c: 88:46:83:4b:ed:7b:dd:4c:ff:eb:af:ad:1b:8f:4b:85:0b:38: d3:1b:78:87:6f:2b:d5:a2:45:59:86:7a:04:98:e3:21:ea:d9: 8e:c5:4d:f8:db:d6:00:29:0d:6e:e6:ca:d3:a4:43:71:e4:8b: 35:09:6d:ef:8c:14:78:45:0b:de:59:1f:2a:72:24:51:c9:80: 28:42:00:3c:33:d0:d1:16:09:71:f1:5e:85:07:a9:99:2f:b3: 74:e1:07:4a:47:e2:13:f9:f1:06:37:39:13:2f:6a:40:b8:5c: 3d:88:be:18:74:41:97:26:1a:9a:34:45:b7:67:43:1f:b3:37: 9c:91:2f:ab:aa:5a:ca:5a:aa:f7:59:6b:25:f8:de:04:90:fb: 9f:3a:f5:30:bf:83:00:ba:14:2e:93:36:0d:44:ea:69:c1:60: 8d:ad:48:03:56:78:cb:0f:84:f6:c3:bf:8b:87:b7:2a:ea:f4: 0c:bc:17:8e:53:5a:7f:07:81:0f:62:5d:9c:6c:6e:57:72:72: 2e:67:25:32:a0:ae:b1:bb:53:d5:ee:bc:3c:16:e8:0a:06:e1: b5:6f:bb:03:0e:21:e4:16:f5:3f:2d:14:0a:bb:e5:bf:e4:1c: 11:f3:85:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W52DXxO+x20tl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk NDIyYWU1MDItYmIyNS00YzRkLWEwZDAtMzhiMDQ0MWZjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Gkei4yIi2TXbT4el61ka9FuGd8zfNX5zUWM EYg+I/84u6MGG3lrxucrqwrjmSpMNt7jgIhlaHjWIuySHtNBR4roiy216x0sHyAU PBAyxzSuiZ/DdrdT+LCFLloyYhfRK1q6iAjJPOKuD43A3w0VQTjtGwrHjWyWeshu nvld0rP5fi8N/g3OzM/ys9aEM0lR63Vdh6VYcFwXDj50Vy2VBbg4KrFnoLxmivHv Y7if02WCHk5X+WlbSuf81mSGpJxQzz4PKlzBb8Mq4ejfp6uEjdxL1QD3KPyBHgVD 6a34jc9CGtjDymzn87IWqZw1uVBn4hDXcAvor146znZRc0FXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLCTRM+KLKmazZS/866HaMH5vWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Q+sHx2I7RdWlBaKMwuJCOnIhGg0vte91M/+uvrRuPS4ULONMbeIdv K9WiRVmGegSY4yHq2Y7FTfjb1gApDW7mytOkQ3HkizUJbe+MFHhFC95ZHypyJFHJ gChCADwz0NEWCXHxXoUHqZkvs3ThB0pH4hP58QY3ORMvakC4XD2Ivhh0QZcmGpo0 RbdnQx+zN5yRL6uqWspaqvdZayX43gSQ+5869TC/gwC6FC6TNg1E6mnBYI2tSANW eMsPhPbDv4uHtyrq9Ay8F45TWn8HgQ9iXZxsbldyci5nJTKgrrG7U9XuvDwW6AoG 4bVvuwMOIeQW9T8tFAq75b/kHBHzhbk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org