$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa File: 1d49dd31-0c53-33da-9567-96af68c51aa9.roa (raw, json) Hash identifier: QJSLh9yOtsi9P5IWJPnUAr4JVjNXvObuEWr2T0DQ7Tc= Subject key identifier: BD:E1:5E:36:32:DC:F6:82:A8:2F:23:F1:4B:B9:F5:80:7E:B7:BA:5C Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285847D6CF3F6DD95A6591C98FB5EC Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 125 IP address blocks: 199.64.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:3f:6d:d9:5a:65:91:c9:8f:b5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=22afbaf6-5303-466d-b6f9-41eab44fb93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:2d:ae:04:a0:48:9b:25:29:ea:5c:55:1b: b7:a3:ad:0e:c5:39:ac:32:6a:d5:12:2a:fb:c2:4c: 47:81:3f:8c:23:ed:4d:d8:57:0e:57:b8:13:4a:f4: 86:43:e4:c7:b1:90:52:b6:37:2a:11:eb:c8:aa:77: 8b:d0:8d:10:62:6a:1c:07:87:d4:76:fc:13:dc:53: 66:4a:9f:f8:2a:eb:b0:83:ed:47:ac:4a:65:c2:4a: 77:39:d1:42:bf:84:9e:b9:0d:85:ed:8d:92:7e:1f: 2e:53:f6:c1:8a:61:82:8b:f6:11:ca:fd:b0:13:aa: a8:37:e9:4b:8c:07:77:40:7b:9b:a0:1f:10:a5:8a: c4:43:16:ef:49:11:b3:e1:e0:b4:05:12:5f:e0:b6: 80:0b:ff:31:81:7d:22:e8:e4:61:88:89:c2:01:34: 2b:46:bf:55:54:28:b4:28:8d:28:0a:59:66:eb:1a: 13:b8:62:d3:cf:eb:6e:f8:22:57:bc:d4:c6:16:b5: 83:1c:a6:2c:3a:e0:7f:52:75:09:4d:2d:08:9b:2c: cc:3c:73:ca:50:9b:76:29:4e:81:4b:7c:2f:92:01: 52:02:64:f4:4e:0d:d1:9c:e2:63:33:11:75:c8:da: 5d:09:93:99:5d:74:d5:01:d0:89:8b:8e:30:8a:15: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:5E:36:32:DC:F6:82:A8:2F:23:F1:4B:B9:F5:80:7E:B7:BA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/1d49dd31-0c53-33da-9567-96af68c51aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:df:80:ae:55:fa:73:e8:6f:29:03:f5:a9:16:83:fe:78:80: f3:b9:96:d6:af:de:19:8b:28:b5:0f:de:03:60:66:60:99:5d: e8:49:0e:7c:43:ce:62:a4:3f:42:9b:83:e7:37:e4:14:6d:e4: 3e:70:54:89:a5:c5:9f:26:bf:43:c1:c4:79:53:15:4e:f5:c3: af:19:75:03:7c:b9:e1:66:0e:ef:23:0f:84:3c:f4:06:f0:90: e2:ba:1a:06:04:74:7b:27:21:f7:93:34:68:e5:79:fb:41:bf: a6:ac:10:9d:c9:c4:b0:b5:42:25:4a:71:ea:e7:05:8c:e7:1a: b8:2b:aa:3e:8b:62:46:e9:a1:2c:48:1a:15:d1:e8:8a:ba:25: 9d:98:ce:97:5b:41:a1:e5:8f:44:b4:6e:a6:63:ec:84:18:2c: e6:6a:7e:e7:0a:8d:33:fb:b3:d2:e6:b9:fe:51:7b:9d:1f:5d: 00:f5:df:d3:8d:3e:5e:93:57:7e:33:f5:61:76:2a:f6:a7:91: a9:67:a6:12:6e:0c:ba:34:ac:fe:1c:4c:3b:4f:12:92:b4:3c: e3:3e:d7:c2:4e:1a:f2:cb:7b:c4:42:b0:96:89:ac:b2:0c:b9: 6c:0a:c4:91:87:14:06:35:bc:d9:f3:f9:b8:7d:2a:31:4f:5d: 7c:32:91:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWzz9t2VplkcmPtewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MjJhZmJhZjYtNTMwMy00NjZkLWI2ZjktNDFlYWI0NGZiOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+UtrgSgSJslKepcVRu3o60OxTmsMmrVEir7 wkxHgT+MI+1N2FcOV7gTSvSGQ+THsZBStjcqEevIqneL0I0QYmocB4fUdvwT3FNm Sp/4Kuuwg+1HrEplwkp3OdFCv4SeuQ2F7Y2Sfh8uU/bBimGCi/YRyv2wE6qoN+lL jAd3QHuboB8QpYrEQxbvSRGz4eC0BRJf4LaAC/8xgX0i6ORhiInCATQrRr9VVCi0 KI0oCllm6xoTuGLTz+tu+CJXvNTGFrWDHKYsOuB/UnUJTS0ImyzMPHPKUJt2KU6B S3wvkgFSAmT0Tg3RnOJjMxF1yNpdCZOZXXTVAdCJi44wihWycQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3hXjYy3PaCqC8j8Uu59YB+t7pcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMWQ0OWRkMzEtMGM1My0z M2RhLTk1NjctOTZhZjY4YzUxYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0DiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXfgK5V+nPobykD9akWg/54gPO5ltav3hmLKLUP3gNgZmCZXehJDnxD zmKkP0Kbg+c35BRt5D5wVImlxZ8mv0PBxHlTFU71w68ZdQN8ueFmDu8jD4Q89Abw kOK6GgYEdHsnIfeTNGjleftBv6asEJ3JxLC1QiVKcernBYznGrgrqj6LYkbpoSxI GhXR6Iq6JZ2YzpdbQaHlj0S0bqZj7IQYLOZqfucKjTP7s9Lmuf5Re50fXQD139ON Pl6TV34z9WF2KvankalnphJuDLo0rP4cTDtPEpK0POM+18JOGvLLe8RCsJaJrLIM uWwKxJGHFAY1vNnz+bh9KjFPXXwykaA= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org