$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa File: 1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa (raw, json) Hash identifier: ZQFRFAOnzTlEkpDFZlQcl0XfFRujr6oc8BvgL9h7g4g= Subject key identifier: D3:89:B2:B0:2B:0A:0B:56:EC:1B:81:E5:43:B1:95:D3:2C:DB:FF:C1 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285847600B853DD414F8042CDF3180 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 13414 IP address blocks: 199.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:85:3d:d4:14:f8:04:2c:df:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=594d6883-4966-4048-971b-8cac8a7ef3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:10:84:56:e8:54:21:f3:4b:a5:46:3d:da: 31:e7:b5:9f:6e:d7:12:cf:7b:07:0a:07:7a:72:20: f2:ea:0f:fd:5e:52:bd:22:b6:48:64:8b:75:c5:c0: 7a:06:0e:6b:3e:38:42:6f:ff:4d:04:b5:f3:33:40: 13:b6:0a:42:e8:9e:08:6b:e2:a8:a0:e4:e4:a2:66: ba:1f:fa:94:8e:5b:13:16:65:90:03:f8:87:2f:9c: c4:28:61:75:9b:ee:eb:fc:e8:ec:37:da:95:74:39: ac:38:14:f4:d4:73:92:87:c3:dd:02:b2:f6:65:22: 1e:9e:bf:5d:3c:f6:a4:39:9b:d3:80:78:cc:22:ce: 11:51:3d:e5:14:d8:96:86:e4:6b:d5:a9:d6:63:eb: 9f:e0:4e:c8:19:5d:97:18:aa:b3:95:ba:0f:21:d5: ad:6e:87:95:e9:08:c6:bc:00:c9:db:c5:b9:dc:86: f7:a9:2b:27:f6:f5:37:1c:c2:55:6c:7c:b5:e3:d3: 70:3e:0a:1e:e0:0d:60:1f:59:bc:f0:42:84:09:a4: 33:f5:cd:1b:f4:77:f3:d7:7e:2c:8b:7d:b7:51:df: e2:63:15:2e:ba:94:7c:a5:6e:af:99:e6:0c:18:5b: 74:8b:44:78:bd:38:c0:9a:d3:6a:69:2a:f5:9f:74: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:B2:B0:2B:0A:0B:56:EC:1B:81:E5:43:B1:95:D3:2C:DB:FF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:56:92:30:d5:ce:a3:27:24:f7:4a:e2:3e:94:83:e3:4f:53: a6:20:a4:31:c2:04:2c:04:43:9f:3a:6f:e7:8c:87:3e:98:97: 4f:c2:f8:e9:ee:e1:5e:b4:76:e6:7b:bd:e1:97:ef:de:54:c1: 09:c1:7b:23:62:5e:d8:ad:0e:40:46:e1:7f:a0:d2:79:2e:45: 75:f5:88:10:f4:cf:10:0a:a1:da:db:91:7b:53:80:08:ca:39: 8d:d3:80:ce:fa:a9:dc:1d:ff:5f:75:47:f4:a0:ac:eb:6f:dd: ef:26:62:da:fa:c5:5f:21:7c:3d:89:0d:17:a2:07:ac:73:d8: 6b:6c:f3:e9:20:71:60:3d:da:9c:da:3f:62:9f:f5:ab:26:43: 56:85:26:a3:90:91:2a:c2:87:1e:46:95:49:37:ca:ad:de:ea: de:1b:bb:10:90:f8:51:3e:36:64:2b:8d:40:54:04:d3:38:7d: 50:fe:44:b4:2e:c1:81:fe:cf:61:f6:70:f4:a2:02:f7:b7:7f: 10:1c:97:30:dd:22:f7:0a:80:1e:eb:6a:d8:a4:d0:cb:01:a2: 54:fb:98:03:03:8d:86:cc:3c:cf:10:00:8d:90:2b:88:ea:b5: 92:f0:24:b3:c9:49:d5:24:a6:37:c5:5a:b9:84:13:6b:26:a4: d7:cc:38:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4U91BT4BCzfMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NTk0ZDY4ODMtNDk2Ni00MDQ4LTk3MWItOGNhYzhhN2VmM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wQhFboVCHzS6VGPdox57WfbtcSz3sHCgd6 ciDy6g/9XlK9IrZIZIt1xcB6Bg5rPjhCb/9NBLXzM0ATtgpC6J4Ia+KooOTkoma6 H/qUjlsTFmWQA/iHL5zEKGF1m+7r/OjsN9qVdDmsOBT01HOSh8PdArL2ZSIenr9d PPakOZvTgHjMIs4RUT3lFNiWhuRr1anWY+uf4E7IGV2XGKqzlboPIdWtboeV6QjG vADJ28W53Ib3qSsn9vU3HMJVbHy149NwPgoe4A1gH1m88EKECaQz9c0b9Hfz134s i323Ud/iYxUuupR8pW6vmeYMGFt0i0R4vTjAmtNqaSr1n3RFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOJsrArCgtW7BuB5UOxldMs2//BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMWJhNWQ5ZGMtMWE2Yi0z ODAzLWEzNjgtMmYzYTgyNGJjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVWkjDVzqMnJPdK4j6Ug+NPU6YgpDHCBCwEQ586b+eMhz6Yl0/C+Onu 4V60duZ7veGX795UwQnBeyNiXtitDkBG4X+g0nkuRXX1iBD0zxAKodrbkXtTgAjK OY3TgM76qdwd/191R/SgrOtv3e8mYtr6xV8hfD2JDReiB6xz2Gts8+kgcWA92pza P2Kf9asmQ1aFJqOQkSrChx5GlUk3yq3e6t4buxCQ+FE+NmQrjUBUBNM4fVD+RLQu wYH+z2H2cPSiAve3fxAclzDdIvcKgB7ratik0MsBolT7mAMDjYbMPM8QAI2QK4jq tZLwJLPJSdUkpjfFWrmEE2smpNfMODw= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org