$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: p1vkfJ1veNl+MtF+JLk+7+H58lDbgHpLsuk+m7LFPpA= Subject key identifier: ED:87:E6:89:04:4B:8B:5D:12:02:59:F9:FF:41:4B:ED:1E:EE:2A:CF Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F432858479AABE3746BF7E076FB1C9800 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e3:74:6b:f7:e0:76:fb:1c:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=783eb33a-2b9f-4bdb-9f7c-47bd30d27702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:98:ea:42:78:c4:6e:d3:98:52:8c:11:14: 89:b1:77:79:0b:f3:5a:d0:4e:78:19:61:19:d2:0f: 28:46:e7:f4:d7:b4:8c:e5:27:d8:0e:f4:0e:6b:69: d3:ab:e1:33:4f:2a:95:87:31:c9:f8:9a:c1:bd:11: 12:7e:1c:ae:15:ab:5d:2e:49:eb:8f:67:16:cd:41: e0:fb:2e:ed:c7:00:ae:44:47:36:6b:6f:6d:8c:5c: 48:d9:77:44:43:7c:d9:5f:63:34:3a:de:5e:74:d3: fd:a1:ac:61:a3:9d:ce:75:29:9f:54:c4:11:25:45: 03:88:96:e5:04:9f:2a:8b:10:76:7f:b1:6e:fb:73: 39:28:37:2b:61:64:60:74:fa:f2:58:d1:29:6e:c5: 8f:f9:2c:ed:9d:e2:56:0c:43:46:db:08:3d:88:cc: 31:1e:a8:15:fa:5d:69:c9:24:c9:5d:b7:53:dc:ea: a3:9b:d8:ee:f2:fb:fd:c0:17:f0:5f:e3:9e:4c:e8: 4c:80:0d:a9:f0:80:2b:b0:f4:d3:5a:95:90:c7:85: d3:11:e2:15:d8:07:3c:4b:57:b3:b1:c0:f1:ac:26: c2:9a:01:7c:d8:8e:f3:b0:30:7a:8c:f8:dc:94:ae: 66:b0:40:3f:6f:41:c7:1d:88:23:fc:d9:dc:80:41: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:E6:89:04:4B:8B:5D:12:02:59:F9:FF:41:4B:ED:1E:EE:2A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:65:ba:bd:8b:b1:9a:28:ed:81:54:92:81:99:b6:2d:2c:88: 3c:e3:3c:9b:91:88:b5:99:ec:d8:fa:bb:d5:52:35:96:52:a8: 03:f0:73:4a:82:a0:12:e4:67:b9:49:2f:dc:59:a3:b0:19:2a: bc:43:94:a7:09:34:25:fd:8f:cd:77:1e:84:00:7f:50:94:ea: 6b:b9:6d:81:cb:1d:65:a9:06:60:e6:dd:14:38:83:00:1a:1e: 6d:7d:87:09:6c:d8:49:68:d7:9c:36:f0:f9:1c:74:b7:0b:cd: 9d:de:8e:54:de:0c:b4:60:ce:f5:0b:15:d0:bd:30:d7:79:5b: cc:92:97:7f:5d:0a:ff:72:92:81:2a:50:28:de:57:5f:ae:5b: 04:00:a5:4e:b0:2b:0e:44:fa:b0:0f:ee:72:fe:59:3e:18:d8: 14:83:6d:1f:a1:26:05:6f:0f:9f:80:98:39:7e:d7:de:8d:0e: 7a:f4:6b:3d:a6:29:89:04:17:d4:8d:15:36:f4:34:c8:f1:d6: 6b:cf:4c:40:5e:7f:1b:e6:44:91:14:9a:10:ce:cd:7d:fa:74: c7:b9:ed:b7:fb:28:63:b8:b4:cd:9e:3e:83:e0:f6:8f:af:6a: 16:c2:4e:6a:af:df:1a:33:8f:82:97:12:d7:de:f3:b8:ae:75: 43:59:95:82 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEeaq+N0a/fgdvscmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NzgzZWIzM2EtMmI5Zi00YmRiLTlmN2MtNDdiZDMwZDI3NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk+Y6kJ4xG7TmFKMERSJsXd5C/Na0E54GWEZ 0g8oRuf017SM5SfYDvQOa2nTq+EzTyqVhzHJ+JrBvRESfhyuFatdLknrj2cWzUHg +y7txwCuREc2a29tjFxI2XdEQ3zZX2M0Ot5edNP9oaxho53OdSmfVMQRJUUDiJbl BJ8qixB2f7Fu+3M5KDcrYWRgdPryWNEpbsWP+SztneJWDENG2wg9iMwxHqgV+l1p ySTJXbdT3Oqjm9ju8vv9wBfwX+OeTOhMgA2p8IArsPTTWpWQx4XTEeIV2Ac8S1ez scDxrCbCmgF82I7zsDB6jPjclK5msEA/b0HHHYgj/NncgEHuYwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFO2H5okES4tdEgJZ+f9BS+0e7irPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEJlur2LsZoo7YFUkoGZti0siDzjPJuRiLWZ7Nj6 u9VSNZZSqAPwc0qCoBLkZ7lJL9xZo7AZKrxDlKcJNCX9j813HoQAf1CU6mu5bYHL HWWpBmDm3RQ4gwAaHm19hwls2Elo15w28PkcdLcLzZ3ejlTeDLRgzvULFdC9MNd5 W8ySl39dCv9ykoEqUCjeV1+uWwQApU6wKw5E+rAP7nL+WT4Y2BSDbR+hJgVvD5+A mDl+196NDnr0az2mKYkEF9SNFTb0NMjx1mvPTEBefxvmRJEUmhDOzX36dMe57bf7 KGO4tM2ePoPg9o+vahbCTmqv3xozj4KXEtfe87iudUNZlYI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:53 2024 by rpki-client on console-fra.rpki-client.org