$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa File: e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa (raw, json) Hash identifier: iZXvr43/79/vIEeLaf3i527mjEEDR+ywFRDiAs3gjUY= Subject key identifier: 7E:24:4A:C7:8B:C3:7E:67:A5:E5:D3:15:00:16:38:C5:F1:F8:BE:B5 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285847A5D6A10C31D1C08DCF54AE1C Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 5719 IP address blocks: 199.109.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a1:0c:31:d1:c0:8d:cf:54:ae:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=fbf7c2d3-5dd6-4c96-b43d-c4a0ed706d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:c1:80:a5:67:8c:46:56:ea:3e:0e:42:b2: 43:66:60:60:cb:d7:96:5d:cc:26:23:e4:39:2f:bb: 5a:6d:cb:6a:a2:39:e9:b3:c8:88:76:37:ea:14:ab: 05:16:e9:40:d8:74:29:ca:c4:e5:b2:ac:34:b7:0b: 50:9e:8c:1d:7f:44:e8:68:e8:7f:74:fb:3b:40:33: 19:f2:29:da:e5:8d:1d:5a:70:5e:36:77:b5:3b:f0: 2d:6d:9a:f5:63:d2:b7:00:37:4b:e1:1c:78:5b:83: c1:54:0b:f5:e1:48:3a:2f:49:9b:fb:b5:e0:46:57: 18:d3:8d:34:fc:9a:35:1c:f5:d1:30:37:aa:2d:67: 61:43:ca:c0:4c:50:9d:e9:06:9c:70:dd:cc:fd:81: b2:62:68:dd:3d:2d:72:8a:4e:c6:17:3b:5f:e4:ac: 01:11:63:e9:2e:ac:8f:b7:51:17:08:77:9b:52:29: 74:22:c6:16:1d:79:fa:21:be:98:fc:3b:b8:cf:4c: 76:88:ee:12:6c:ee:cf:b1:46:7f:83:fd:58:11:30: 08:e0:11:8b:e2:e7:dd:a1:ca:c9:32:6c:a2:94:0e: 15:c6:61:af:72:d0:34:ff:91:ec:47:d0:94:ff:13: 44:80:9e:70:89:3e:26:9a:9a:08:97:dd:f9:47:d0: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:4A:C7:8B:C3:7E:67:A5:E5:D3:15:00:16:38:C5:F1:F8:BE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:24:76:3a:1e:38:00:64:09:c0:31:dd:79:16:fa:df:1c:16: ac:dd:8f:ff:08:22:f9:35:1b:e0:7a:d7:d7:36:57:d9:86:53: bb:5e:f0:e4:37:c2:da:22:74:b4:e2:90:0f:46:b9:f7:f7:5a: e6:1a:b3:eb:2d:0e:17:0d:7b:be:30:84:06:dc:3a:73:b5:c7: 6a:b0:5c:fe:6d:36:ab:55:d2:da:cd:10:79:56:e7:6c:ca:53: 52:3d:bc:63:e0:83:cb:24:86:e7:91:e6:c9:2d:08:a4:2a:94: 25:8b:3e:58:56:a2:90:5a:57:c5:e1:70:62:08:6c:cc:b6:a5: 21:f4:e9:31:ae:b1:41:81:24:d7:f3:1f:3b:a5:58:0a:f5:55: 73:70:87:72:9c:0e:9b:fb:85:45:bc:eb:ac:1d:51:6e:f1:06: c2:55:3c:02:ad:84:1d:4e:e2:cc:fe:55:32:ac:6d:aa:2e:a0: fd:d0:2d:a3:da:a8:73:72:06:ef:39:90:6c:da:64:6c:c6:f7: 81:83:cf:8d:d4:67:ac:00:bb:50:0a:cb:aa:8b:3b:43:72:51: 92:f5:30:76:53:f1:4f:83:5e:3a:12:b7:57:80:5d:ee:9a:73: ec:cc:bb:77:eb:7d:15:31:6d:91:3f:28:0d:d2:14:28:b3:68: b9:18:b3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qEMMdHAjc9UrhwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZmJmN2MyZDMtNWRkNi00Yzk2LWI0M2QtYzRhMGVkNzA2ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWrBgKVnjEZW6j4OQrJDZmBgy9eWXcwmI+Q5 L7tabctqojnps8iIdjfqFKsFFulA2HQpysTlsqw0twtQnowdf0ToaOh/dPs7QDMZ 8ina5Y0dWnBeNne1O/AtbZr1Y9K3ADdL4Rx4W4PBVAv14Ug6L0mb+7XgRlcY0400 /Jo1HPXRMDeqLWdhQ8rATFCd6QaccN3M/YGyYmjdPS1yik7GFztf5KwBEWPpLqyP t1EXCHebUil0IsYWHXn6Ib6Y/Du4z0x2iO4SbO7PsUZ/g/1YETAI4BGL4ufdocrJ MmyilA4VxmGvctA0/5HsR9CU/xNEgJ5wiT4mmpoIl935R9Dd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4kSseLw35npeXTFQAWOMXx+L61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZTg1YzgxZjctYWRjYS0z NjdkLTk2ZDUtZDVlMmIwNzBmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIkdjoeOABkCcAx3XkW+t8cFqzdj/8IIvk1G+B619c2V9mGU7te8OQ3 wtoidLTikA9Guff3WuYas+stDhcNe74whAbcOnO1x2qwXP5tNqtV0trNEHlW52zK U1I9vGPgg8skhueR5sktCKQqlCWLPlhWopBaV8XhcGIIbMy2pSH06TGusUGBJNfz HzulWAr1VXNwh3KcDpv7hUW866wdUW7xBsJVPAKthB1O4sz+VTKsbaouoP3QLaPa qHNyBu85kGzaZGzG94GDz43UZ6wAu1AKy6qLO0NyUZL1MHZT8U+DXjoSt1eAXe6a c+zMu3frfRUxbZE/KA3SFCizaLkYs3c= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:58 2024 by rpki-client on console-fra.rpki-client.org