$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: RmdiZ8hqHoCLZ7RZQAF05w1MZ/JnWrUni/SobT0Bx1k= Subject key identifier: F6:9A:13:BC:23:EF:CA:28:6C:58:3C:C5:80:22:F3:B3:CB:BC:EB:86 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285847600B8C34CBADBD4F14065380 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:8c:34:cb:ad:bd:4f:14:06:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=a2d11120-4bff-4fb5-9d43-610e428f81f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:f9:5a:3c:4b:8b:fe:7c:00:4f:82:30:1a: cd:07:99:49:87:fc:a1:0e:37:a1:a2:2d:a8:ec:40: 3b:30:cb:89:30:9f:02:43:3a:47:93:ae:27:9e:c9: 20:71:5d:aa:fd:64:01:63:f7:c5:70:89:3f:c2:87: 99:a8:67:c3:e6:d3:65:b0:f8:d8:3b:0d:59:98:91: 38:a9:3e:9a:9b:ee:1c:2b:d7:a3:9c:4d:51:26:82: 5b:28:cf:33:94:fd:41:e5:4b:cf:87:8c:59:ea:42: 4c:f5:dc:1f:bd:92:78:07:3a:71:01:24:23:8e:e7: 52:f0:87:99:9d:20:d8:66:18:54:16:5e:19:22:43: ed:c7:c8:3c:60:51:c8:3d:de:56:51:29:a1:54:27: 64:26:be:a5:90:94:99:8c:83:6e:07:b6:41:4c:ff: 47:7a:67:3a:b7:8a:cf:18:e4:67:c7:6d:79:70:36: 26:e5:2c:c8:69:51:cf:96:5f:22:56:46:e8:ca:7e: cd:0a:c8:16:d0:04:40:58:b1:4d:19:7c:4d:c7:58: fb:19:9c:e9:0e:1b:d5:7c:6e:fb:91:b9:73:39:d2: 2a:aa:6e:77:81:4f:b4:dd:ad:4d:bc:d6:1c:01:59: 19:37:f6:7e:e5:cb:e1:43:69:0c:34:06:fd:c2:d9: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:13:BC:23:EF:CA:28:6C:58:3C:C5:80:22:F3:B3:CB:BC:EB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1d:33:ec:70:f6:41:0f:39:b0:56:aa:f3:e2:09:39:38:8d: 27:54:28:33:83:67:bb:40:25:bc:73:6b:8c:af:29:95:b8:40: c0:06:29:52:a9:dd:20:86:a3:b5:d6:11:17:27:b9:f2:a2:45: 15:e6:34:eb:69:51:41:82:b9:b2:21:57:11:58:a6:65:0d:66: 37:3b:6d:cf:2f:48:65:c3:5f:85:45:89:bf:7d:ce:44:48:b2: 59:78:12:f8:50:86:1e:d3:4b:6c:6f:c3:45:99:1a:35:fc:27: f3:09:88:df:a9:83:54:51:f9:98:0a:73:9f:9b:80:cf:87:8b: ec:71:f9:69:53:b4:23:17:00:6c:24:8b:c3:92:c4:2d:54:59: 33:15:29:d0:ce:d3:74:b8:f7:c0:42:f6:49:41:c0:fc:c2:42: 8f:08:87:03:a8:d1:c0:d9:3f:66:ee:5d:46:0c:ce:25:f8:d9: 1c:c2:24:c0:67:40:d0:8b:8f:9c:3d:79:16:a0:0e:25:94:ec: 46:4f:d7:79:c9:e2:70:f0:c7:10:53:a5:6f:e7:47:32:a1:65: 8e:ec:9b:88:6c:1b:d6:db:da:9d:fe:8a:3f:b5:25:69:17:fa: c5:5f:c6:ca:ec:cc:b4:73:e7:ec:63:16:c4:73:e4:1d:0f:f0: 30:6a:7e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4w0y629TxQGU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTJkMTExMjAtNGJmZi00ZmI1LTlkNDMtNjEwZTQyOGY4MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjD5WjxLi/58AE+CMBrNB5lJh/yhDjehoi2o 7EA7MMuJMJ8CQzpHk64nnskgcV2q/WQBY/fFcIk/woeZqGfD5tNlsPjYOw1ZmJE4 qT6am+4cK9ejnE1RJoJbKM8zlP1B5UvPh4xZ6kJM9dwfvZJ4BzpxASQjjudS8IeZ nSDYZhhUFl4ZIkPtx8g8YFHIPd5WUSmhVCdkJr6lkJSZjINuB7ZBTP9Hemc6t4rP GORnx215cDYm5SzIaVHPll8iVkboyn7NCsgW0ARAWLFNGXxNx1j7GZzpDhvVfG77 kblzOdIqqm53gU+03a1NvNYcAVkZN/Z+5cvhQ2kMNAb9wtnVCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaaE7wj78oobFg8xYAi87PLvOuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwdM+xw9kEPObBWqvPiCTk4jSdUKDODZ7tAJbxza4yvKZW4QMAGKVKp 3SCGo7XWERcnufKiRRXmNOtpUUGCubIhVxFYpmUNZjc7bc8vSGXDX4VFib99zkRI sll4EvhQhh7TS2xvw0WZGjX8J/MJiN+pg1RR+ZgKc5+bgM+Hi+xx+WlTtCMXAGwk i8OSxC1UWTMVKdDO03S498BC9klBwPzCQo8IhwOo0cDZP2buXUYMziX42RzCJMBn QNCLj5w9eRagDiWU7EZP13nJ4nDwxxBTpW/nRzKhZY7sm4hsG9bb2p3+ij+1JWkX +sVfxsrszLRz5+xjFsRz5B0P8DBqfvQ= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org