$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa File: d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa (raw, json) Hash identifier: qkxLLuejUNUFHX9NK/eVVv/CDenI3gz7liuagLj0BWg= Subject key identifier: BD:47:6C:52:5A:A1:61:F5:97:08:A5:B0:AC:42:7B:36:C7:B6:A1:DA Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285847213B0E9871D3B084697A4B80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 3630 IP address blocks: 199.109.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:0e:98:71:d3:b0:84:69:7a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=4fd8d64c-a150-4943-8b01-84df8212b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:4d:0e:6f:f7:0c:cb:a5:cc:91:b8:3f:16: 50:33:50:a4:5b:52:cd:90:7c:92:44:da:fc:7d:23: de:cc:e7:4c:7d:17:61:2a:e8:3b:db:9e:be:75:4a: 89:06:80:9e:ae:22:32:eb:7d:2e:60:36:be:4e:68: 53:5a:6f:df:0d:a2:99:9b:a8:13:26:18:2f:9d:af: 7d:ba:6d:80:bd:fe:1b:bf:dd:f8:1e:87:bd:74:e9: 9a:bc:08:13:e5:d7:ca:2d:22:97:71:2b:05:65:24: fd:5c:6c:c7:3f:aa:fb:f3:e3:2a:0f:47:49:a4:b9: 80:ed:7d:4a:76:43:4f:cb:d6:45:e4:b9:69:64:59: ef:09:88:d3:42:18:ae:12:ad:6c:1a:65:bb:e0:92: 3d:e0:fb:40:29:9c:be:1e:f7:88:d4:72:43:ad:e6: b8:64:af:2e:4d:80:a0:68:e7:69:2a:9d:51:c7:fb: dd:b9:c0:b1:97:71:53:9c:4f:c6:7e:64:e2:08:55: 76:b6:a6:92:36:32:e4:c1:31:43:0d:8b:4d:16:f9: aa:50:97:ae:36:d1:f3:81:e8:5d:18:0f:8d:74:d0: d4:bc:11:4a:b0:c5:5a:ef:e1:dc:29:7c:fe:e3:ad: de:11:73:30:3b:be:b3:73:46:05:40:f7:3f:b9:37: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:6C:52:5A:A1:61:F5:97:08:A5:B0:AC:42:7B:36:C7:B6:A1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ed:16:8c:12:bf:af:3b:ad:8a:cb:f3:62:05:57:ce:d2:80: 73:e1:dd:74:8c:61:86:29:80:21:e4:ee:bc:65:cf:ce:e5:a6: 17:59:60:e8:65:40:9f:4e:11:4d:24:3a:05:07:b1:01:0b:c7: 12:00:32:41:d1:b9:9d:77:80:d7:af:89:8f:fa:22:f6:a8:5a: ad:5e:59:5d:7a:fd:c9:25:1e:55:68:88:8d:9e:e3:38:ab:a3: 23:f4:e5:ff:24:c9:f1:a8:42:1c:5b:68:e2:3b:c4:da:20:ac: df:07:d3:a4:0e:f4:9e:6a:19:a8:51:9d:54:45:aa:6e:e5:3f: 5f:8b:80:d1:67:a9:99:db:bf:70:b5:1a:e1:bb:84:22:07:1e: 66:de:b8:dc:a9:74:e4:15:aa:9c:31:5a:1e:d5:7d:c3:cd:2c: 10:35:00:91:7c:b3:6e:fc:8e:6b:27:7b:8a:74:51:a3:2b:f4: d3:5c:09:29:11:15:19:14:dc:6e:14:3f:03:a4:21:5c:93:7b: 12:03:ce:b9:c0:25:5d:3f:d4:98:35:c6:6c:28:c3:1b:7f:96: 03:e9:fa:a9:72:46:f5:ef:74:ab:73:27:9b:56:2d:88:84:e2: 2d:8f:66:9c:14:84:e5:32:e5:dc:04:b8:a4:44:3e:e1:bf:12: 47:76:7e:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOw6YcdOwhGl6S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk NGZkOGQ2NGMtYTE1MC00OTQzLThiMDEtODRkZjgyMTJiNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ZNDm/3DMulzJG4PxZQM1CkW1LNkHySRNr8 fSPezOdMfRdhKug7256+dUqJBoCeriIy630uYDa+TmhTWm/fDaKZm6gTJhgvna99 um2Avf4bv934Hoe9dOmavAgT5dfKLSKXcSsFZST9XGzHP6r78+MqD0dJpLmA7X1K dkNPy9ZF5LlpZFnvCYjTQhiuEq1sGmW74JI94PtAKZy+HveI1HJDrea4ZK8uTYCg aOdpKp1Rx/vducCxl3FTnE/GfmTiCFV2tqaSNjLkwTFDDYtNFvmqUJeuNtHzgehd GA+NdNDUvBFKsMVa7+HcKXz+463eEXMwO76zc0YFQPc/uTfiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1HbFJaoWH1lwilsKxCezbHtqHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZDk2ZWQwZjEtZjBjYy0z MjQzLTkxZGEtNjVhNTIwNTFlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx204MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAntFowSv687rYrL82IFV87SgHPh3XSMYYYpgCHk7rxlz87lphdZYOhl QJ9OEU0kOgUHsQELxxIAMkHRuZ13gNeviY/6IvaoWq1eWV16/cklHlVoiI2e4zir oyP05f8kyfGoQhxbaOI7xNogrN8H06QO9J5qGahRnVRFqm7lP1+LgNFnqZnbv3C1 GuG7hCIHHmbeuNypdOQVqpwxWh7VfcPNLBA1AJF8s278jmsne4p0UaMr9NNcCSkR FRkU3G4UPwOkIVyTexIDzrnAJV0/1Jg1xmwowxt/lgPp+qlyRvXvdKtzJ5tWLYiE 4i2PZpwUhOUy5dwEuKREPuG/Ekd2frQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:58 2024 by rpki-client on console-fra.rpki-client.org