$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa File: cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json) Hash identifier: 6SW2yB7FflUXJBLsCo0AWLFzGoT9pTigdOt0mXnxL54= Subject key identifier: 0D:58:6E:7F:0C:8E:E0:D4:BE:68:7E:91:F4:FC:9A:D9:97:4F:BE:0D Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285847A30BEFE1149AC8604404EF80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 3756 IP address blocks: 199.109.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:ef:e1:14:9a:c8:60:44:04:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=0a29f7bd-7d1b-4053-ae81-40f658a1527e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5d:b0:d9:92:95:79:a2:3b:d8:66:6f:c6:13: 65:55:c3:1d:ec:f8:7c:27:cf:a9:47:b8:a8:42:ec: 73:ad:d4:7d:51:ef:5b:43:94:85:0c:6a:7f:7e:dd: 29:23:c1:79:52:ee:7f:e7:45:2b:7c:95:0f:af:8b: d2:ac:2f:7b:8e:96:d3:4f:b5:ab:36:e3:8e:5a:9c: 7f:45:43:48:44:f5:05:bd:4d:7e:57:f0:48:3b:8e: 9e:0c:f5:1b:5c:7f:d2:3c:99:b5:33:b8:e8:f2:c6: 32:96:83:04:a9:53:a3:3d:8c:cf:6b:52:78:ae:47: c7:4f:13:ad:50:98:98:db:0c:cb:b4:20:6d:4a:89: ef:98:ac:1e:13:65:e0:45:11:de:36:12:71:49:e7: 77:01:95:25:41:d8:5c:3f:9f:2d:d7:d8:d2:01:0b: 26:2b:7f:b5:34:b6:16:b6:77:53:56:c2:e0:a6:14: f2:ac:b2:c9:7a:66:91:e6:e2:73:b6:82:7b:61:36: ed:c5:f2:59:fa:1d:b9:41:7d:58:e5:2d:da:93:84: ad:7a:45:03:b3:25:b4:05:a6:7e:b2:af:82:52:ef: 34:fa:cc:8a:87:4c:35:4a:4e:6e:2a:83:66:78:7d: 9c:6c:38:ea:2d:fe:8a:da:e6:24:b2:a0:cf:75:1f: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:6E:7F:0C:8E:E0:D4:BE:68:7E:91:F4:FC:9A:D9:97:4F:BE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:25:e9:46:cc:94:18:f2:b7:d9:bb:df:ed:d3:9e:ef:4d:e4: 2d:d0:5d:bc:60:00:d4:37:67:c4:f2:83:3e:a2:75:3d:31:9e: 6b:35:b9:50:e1:67:a2:7f:88:5e:e9:de:20:38:8c:2e:03:4b: 9b:f3:ab:d0:d4:a9:6f:a6:86:b7:d3:96:04:d3:63:3a:c5:ff: 1f:bc:5c:68:49:19:02:6d:59:cd:f1:0b:0f:47:91:e4:ef:87: 1d:fa:ee:7e:b1:45:14:27:ad:31:a4:6f:1d:76:fe:d6:70:4f: 47:4e:7a:94:60:d7:74:d9:23:3b:0c:55:41:c7:47:0f:a3:82: b1:4d:b7:60:09:20:7b:bd:a9:7b:8f:49:5f:6f:c9:8b:42:82: 5f:9f:75:c2:87:cf:6e:0e:87:da:72:34:f5:f4:bc:45:fa:e1: ec:f2:92:68:1d:49:27:e4:21:19:ec:51:bd:79:cf:59:2b:6c: 7b:d0:f6:83:b7:ac:a8:1a:11:8b:71:71:d4:04:29:b2:32:5d: e7:9b:5b:a5:23:d3:1e:d4:b0:91:9a:45:72:63:05:36:a2:e4: 67:ed:b2:fd:1f:eb:a4:90:a4:c1:2c:18:7c:ba:a3:8f:88:c3: 55:b0:5c:02:b7:c1:ab:46:48:10:31:3c:07:f3:a9:61:9b:1f: dc:02:37:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC+/hFJrIYEQE74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk MGEyOWY3YmQtN2QxYi00MDUzLWFlODEtNDBmNjU4YTE1MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh12w2ZKVeaI72GZvxhNlVcMd7Ph8J8+pR7io QuxzrdR9Ue9bQ5SFDGp/ft0pI8F5Uu5/50UrfJUPr4vSrC97jpbTT7WrNuOOWpx/ RUNIRPUFvU1+V/BIO46eDPUbXH/SPJm1M7jo8sYyloMEqVOjPYzPa1J4rkfHTxOt UJiY2wzLtCBtSonvmKweE2XgRRHeNhJxSed3AZUlQdhcP58t19jSAQsmK3+1NLYW tndTVsLgphTyrLLJemaR5uJztoJ7YTbtxfJZ+h25QX1Y5S3ak4StekUDsyW0BaZ+ sq+CUu80+syKh0w1Sk5uKoNmeH2cbDjqLf6K2uYksqDPdR8iQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1Ybn8MjuDUvmh+kfT8mtmXT74NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2Q2ZjY0MGQtNjEyNi0z NTMyLTgyYjUtZDkxMmNhMzQ4NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwl6UbMlBjyt9m73+3Tnu9N5C3QXbxgANQ3Z8Tygz6idT0xnms1uVDh Z6J/iF7p3iA4jC4DS5vzq9DUqW+mhrfTlgTTYzrF/x+8XGhJGQJtWc3xCw9HkeTv hx367n6xRRQnrTGkbx12/tZwT0dOepRg13TZIzsMVUHHRw+jgrFNt2AJIHu9qXuP SV9vyYtCgl+fdcKHz24Oh9pyNPX0vEX64ezykmgdSSfkIRnsUb15z1krbHvQ9oO3 rKgaEYtxcdQEKbIyXeebW6Uj0x7UsJGaRXJjBTai5Gftsv0f66SQpMEsGHy6o4+I w1WwXAK3watGSBAxPAfzqWGbH9wCN+8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:40 2024 by rpki-client on console-ams.rpki-client.org