$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa File: 3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa (raw, json) Hash identifier: CPy/Gr+q41iXABec8CzQhVGIT7Q0Rsa2jiztTLNny9M= Subject key identifier: CB:EE:49:64:E5:A0:60:3D:E3:F5:2F:37:29:18:04:D5:F8:D4:3F:55 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285847600B8C13C13ACC5EF8A13880 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 13414 IP address blocks: 199.59.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:8c:13:c1:3a:cc:5e:f8:a1:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=ead56864-2e60-4cdf-8533-61ae6cbe6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:e0:f2:70:d3:eb:49:cb:85:8e:fa:22:37: e4:03:33:d8:e0:92:13:50:78:70:56:61:1e:49:df: a2:ec:bf:12:66:94:33:91:25:5f:04:66:2d:3e:d4: d6:a0:ba:c0:68:5c:69:3c:74:31:1e:87:84:7c:a0: 4b:01:0e:f4:22:96:b5:bd:3d:66:b8:fa:5e:e2:86: 9f:ac:8f:58:3b:b4:15:ef:a6:da:4a:66:6b:cc:b4: 2d:62:06:46:0d:ed:5d:94:40:8b:61:17:e8:3b:60: 81:b3:25:2a:8d:01:5b:b5:5a:57:72:47:56:74:d8: 82:e2:61:c3:38:7d:6c:17:42:26:33:19:92:00:85: 6a:fe:ad:07:6a:34:bb:29:c8:f3:07:64:43:fe:73: e1:7f:4b:00:4f:40:70:52:17:db:31:7b:e6:e2:19: e3:e3:83:13:81:ab:d6:ae:75:02:e9:23:ce:cf:0f: 20:a0:8e:b4:fc:de:5b:97:17:23:a8:c0:8e:c0:8d: 9f:83:f1:10:f3:22:81:9a:1e:a1:a8:71:b7:a0:97: 0c:8f:a3:35:58:58:07:fb:12:2d:85:6f:2f:be:14: eb:96:0e:82:a7:73:6c:4d:29:02:a6:d2:5c:63:f4: 49:3b:b6:4e:4e:a9:66:dc:e6:e2:d6:33:2b:e2:b2: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:49:64:E5:A0:60:3D:E3:F5:2F:37:29:18:04:D5:F8:D4:3F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3f7c2cc1-e2c4-3546-b6d3-cbfb4428e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ef:c2:50:59:64:81:7c:77:47:f4:79:50:8c:b7:5e:a1:f3: 84:37:45:da:0e:6f:7a:60:93:43:4c:3a:dc:bc:47:6e:59:6d: e7:e5:05:bd:00:07:31:14:02:9b:1f:a0:04:52:00:f5:ba:39: df:e3:8c:4c:9f:18:c8:01:86:1b:2b:f1:15:bb:20:23:71:47: a7:dc:64:b2:3c:71:bd:31:03:cb:c6:35:8c:09:01:fe:b7:6b: 24:71:67:9d:53:af:6c:8b:6b:6b:83:31:28:73:ba:d3:3a:4e: c5:5c:e5:0c:e4:0c:ea:57:77:66:92:f8:8a:16:3b:f7:b2:59: 86:7d:6d:19:15:7d:4a:ec:ba:d4:c9:57:99:93:5f:1c:8d:a7: 53:a5:83:7f:38:e1:cc:8c:61:42:14:b6:44:35:5b:d8:33:b2: 23:3e:f8:fe:af:d8:4f:3d:34:9e:bd:33:ea:b0:d9:6e:02:98: 6d:82:53:ef:8c:e5:30:c6:1d:a8:dd:fd:6b:a2:6a:c0:af:4f: 5e:f5:d4:2b:11:c6:37:be:5e:c5:92:c0:f4:a2:79:1e:85:a8: 9e:9b:0a:16:a9:f8:de:bc:d5:cb:00:da:8f:cf:ec:6a:73:f6: f9:4e:01:a1:80:7c:e4:40:6d:c9:d0:b4:d3:f8:0b:ce:35:96: 00:24:23:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4wTwTrMXvihOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZWFkNTY4NjQtMmU2MC00Y2RmLTg1MzMtNjFhZTZjYmU2NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrfg8nDT60nLhY76IjfkAzPY4JITUHhwVmEe Sd+i7L8SZpQzkSVfBGYtPtTWoLrAaFxpPHQxHoeEfKBLAQ70Ipa1vT1muPpe4oaf rI9YO7QV76baSmZrzLQtYgZGDe1dlECLYRfoO2CBsyUqjQFbtVpXckdWdNiC4mHD OH1sF0ImMxmSAIVq/q0HajS7KcjzB2RD/nPhf0sAT0BwUhfbMXvm4hnj44MTgavW rnUC6SPOzw8goI60/N5blxcjqMCOwI2fg/EQ8yKBmh6hqHG3oJcMj6M1WFgH+xIt hW8vvhTrlg6Cp3NsTSkCptJcY/RJO7ZOTqlm3Obi1jMr4rJgrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvuSWTloGA94/UvNykYBNX41D9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvM2Y3YzJjYzEtZTJjNC0z NTQ2LWI2ZDMtY2JmYjQ0MjhlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3vwlBZZIF8d0f0eVCMt16h84Q3RdoOb3pgk0NMOty8R25ZbeflBb0A BzEUApsfoARSAPW6Od/jjEyfGMgBhhsr8RW7ICNxR6fcZLI8cb0xA8vGNYwJAf63 ayRxZ51Tr2yLa2uDMShzutM6TsVc5QzkDOpXd2aS+IoWO/eyWYZ9bRkVfUrsutTJ V5mTXxyNp1Olg3844cyMYUIUtkQ1W9gzsiM++P6v2E89NJ69M+qw2W4CmG2CU++M 5TDGHajd/WuiasCvT1711CsRxje+XsWSwPSieR6FqJ6bChap+N681csA2o/P7Gpz 9vlOAaGAfORAbcnQtNP4C841lgAkIyM= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org