$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa File: 68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json) Hash identifier: L03J6bMc9RWUn/vLQ8wQgY86+vpV48VBsMovnyFMTfA= Subject key identifier: 77:4F:E8:4A:4E:5A:24:52:2E:50:21:11:7E:E5:93:6B:D5:D9:57:43 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285847A73BE3E92BE5623EA78C6260 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 34774 IP address blocks: 199.64.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e3:e9:2b:e5:62:3e:a7:8c:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=7b8afed9-1751-48ab-8077-48ac63942429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:d1:b4:59:90:55:41:4d:61:74:af:b1:06: dd:79:da:3f:32:f4:78:b1:d1:9a:fa:0b:f4:e7:ef: 53:e4:b7:1b:62:cf:58:34:6b:cf:33:17:5d:66:ea: 84:4a:e0:4d:f5:e9:c3:fa:1b:5e:b9:69:ba:91:d9: 01:6d:25:84:d1:43:34:9b:2d:a7:f2:d3:e2:bd:6c: c2:bb:d1:c0:ce:a6:77:fa:26:38:32:53:7a:02:b9: a6:e7:72:e5:32:38:bf:69:e4:ab:8e:5e:e3:d5:63: a8:32:90:db:ed:07:7e:8b:55:d4:02:7f:13:ad:41: 0a:39:00:27:d6:c0:f5:b3:0b:1a:c0:49:b5:88:58: a2:e6:e9:2d:fe:50:64:97:82:e7:96:b2:a5:c8:1b: 35:97:91:c5:79:53:dc:69:55:6c:74:49:d8:cf:42: 0f:41:27:ca:aa:c8:55:bf:37:8f:04:7d:7c:79:fe: 76:3a:0a:84:18:f6:83:de:53:ce:66:e0:91:b5:09: 63:45:59:70:ad:41:97:53:55:eb:47:12:d5:02:98: f7:25:21:04:8c:9b:7e:d6:e7:18:6a:39:02:ef:a2: f9:4f:40:6d:58:30:fa:70:a6:b4:50:78:54:5a:4c: 84:a4:e7:08:73:0e:a8:fd:17:88:3e:d5:8f:a3:23: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:E8:4A:4E:5A:24:52:2E:50:21:11:7E:E5:93:6B:D5:D9:57:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1c:9a:62:99:ef:0d:85:83:73:61:be:72:90:73:c6:6a:ec: a9:19:ee:e9:2d:74:a7:60:fc:8a:1e:9a:12:0b:2c:22:73:f5: 90:ba:e0:b9:88:cc:25:26:fa:f5:67:67:39:71:f4:32:85:58: ba:e0:d3:10:da:45:80:0f:1e:98:de:a5:37:58:0d:ba:ad:b1: cd:02:71:1b:bb:1f:85:af:f3:24:5c:78:3c:f2:49:a1:1a:64: 66:cb:d8:81:5f:c6:72:c2:bd:9c:a9:c8:7e:5d:2f:9b:91:1a: f6:c9:d4:a3:e1:f1:a4:3c:0e:6f:c1:18:82:36:4f:1a:eb:19: ff:5a:14:46:7d:84:45:0d:fd:d3:79:e0:49:5f:a0:0b:00:a9: 22:49:6f:dd:ce:79:bf:5c:62:c0:b9:97:9e:a2:5e:d2:f3:2f: e7:99:2d:d9:4c:ab:6e:a3:54:d6:e7:dd:64:97:96:7a:f2:43: 11:72:c3:c5:27:13:3f:58:a1:5a:aa:6f:17:81:6e:23:14:92: 41:cb:e1:a7:20:96:85:c9:fa:d1:8a:12:e9:a6:07:d8:27:fb: 06:51:42:c6:28:90:9c:16:92:ef:7f:9a:fa:92:ad:99:1e:d2: 38:56:ed:ff:c9:5b:b1:6d:9b:ef:d7:84:82:45:12:9f:e0:b2: 04:37:f4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+PpK+ViPqeMYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk N2I4YWZlZDktMTc1MS00OGFiLTgwNzctNDhhYzYzOTQyNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsjRtFmQVUFNYXSvsQbdedo/MvR4sdGa+gv0 5+9T5LcbYs9YNGvPMxddZuqESuBN9enD+hteuWm6kdkBbSWE0UM0my2n8tPivWzC u9HAzqZ3+iY4MlN6Armm53LlMji/aeSrjl7j1WOoMpDb7Qd+i1XUAn8TrUEKOQAn 1sD1swsawEm1iFii5ukt/lBkl4LnlrKlyBs1l5HFeVPcaVVsdEnYz0IPQSfKqshV vzePBH18ef52OgqEGPaD3lPOZuCRtQljRVlwrUGXU1XrRxLVApj3JSEEjJt+1ucY ajkC76L5T0BtWDD6cKa0UHhUWkyEpOcIcw6o/ReIPtWPoyOwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdP6EpOWiRSLlAhEX7lk2vV2VdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8cmmKZ7w2Fg3NhvnKQc8Zq7KkZ7uktdKdg/IoemhILLCJz9ZC64LmI zCUm+vVnZzlx9DKFWLrg0xDaRYAPHpjepTdYDbqtsc0CcRu7H4Wv8yRceDzySaEa ZGbL2IFfxnLCvZypyH5dL5uRGvbJ1KPh8aQ8Dm/BGII2TxrrGf9aFEZ9hEUN/dN5 4ElfoAsAqSJJb93Oeb9cYsC5l56iXtLzL+eZLdlMq26jVNbn3WSXlnryQxFyw8Un Ez9YoVqqbxeBbiMUkkHL4acgloXJ+tGKEummB9gn+wZRQsYokJwWku9/mvqSrZke 0jhW7f/JW7Ftm+/XhIJFEp/gsgQ39Cw= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org