$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa File: fd19fa80-d37b-34fb-b500-b3be510154b7.roa (raw, json) Hash identifier: NI3pxlj/at/SPFcPr3wGwwXjL7Y8UbZpNRWEGMPLyT0= Subject key identifier: 59:A7:75:10:94:79:CE:2E:6D:BA:41:47:F4:8E:A1:1E:07:5F:84:9A Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285847B9617A3C466E9EBAE350F6A0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 125 IP address blocks: 199.64.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:7a:3c:46:6e:9e:ba:e3:50:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=584dfffd-74d0-4cb9-be13-27314568a8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:63:fb:67:a2:6c:5f:c1:b8:a9:9e:7d:12: af:46:cb:b8:66:3d:98:d8:b0:39:10:c7:88:0e:a3: 6e:18:30:73:d8:bf:1b:9e:2f:ec:a9:97:82:5d:0e: 91:48:cb:5f:d1:77:7c:ac:af:b8:af:c1:58:40:c2: 5e:39:27:90:71:5f:79:0c:b4:76:8a:f4:42:2f:f3: ca:8f:ae:a9:f2:78:65:e8:0e:cc:a8:fe:19:16:0a: 95:f8:95:87:67:54:ca:b4:e8:8e:bd:2f:8c:19:15: d5:46:1a:31:58:66:7c:6b:d8:98:19:8e:33:16:93: 3f:ba:9b:fe:d5:85:50:54:d3:ce:74:8b:42:42:fa: cd:8c:49:4e:59:b2:c8:1e:17:59:1e:50:e6:a4:99: 06:26:64:b5:9f:e6:73:08:de:4f:6d:72:8b:f1:b8: 46:f7:12:e3:6b:b2:35:20:b9:e4:09:1b:eb:d7:d0: 39:13:47:51:b9:23:63:41:d2:99:24:ef:7d:0d:7a: c9:4a:ce:d2:a1:3e:fe:92:a8:2d:96:0a:c6:98:47: d1:82:5d:36:52:d2:cc:c5:c1:cb:f7:4a:6b:9d:80: 2c:d4:1f:e8:39:01:d0:3d:83:bc:39:42:70:ae:87: 33:1d:dc:aa:ce:a0:8c:eb:84:8d:8f:ea:13:5a:75: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:75:10:94:79:CE:2E:6D:BA:41:47:F4:8E:A1:1E:07:5F:84:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:84:45:b6:37:b6:d7:54:e7:3f:f0:70:29:b0:c1:4a:eb:e6: f4:d2:6c:6e:78:28:cd:44:67:c4:53:31:ca:72:1d:1b:76:8d: 79:f5:e2:f3:99:4f:aa:c4:7c:6e:06:49:a3:13:ae:27:d1:e1: 99:b8:ca:af:9f:e7:24:5f:f9:ac:51:28:1b:2d:86:3d:a2:b6: e9:0b:f1:f4:14:e9:25:d0:6a:62:a0:9f:4c:07:a4:49:65:46: 6e:2a:97:cb:f3:8e:1d:9e:4a:46:24:20:a6:2b:9f:d7:1f:f1: 72:93:12:ea:09:04:65:cc:1b:de:ab:2e:b4:71:d8:3b:7d:08: ab:f4:55:09:68:99:0b:58:ac:1b:85:94:6e:be:86:e6:4d:a5: 3e:a0:44:1e:a3:9e:71:c2:62:cc:c3:4b:14:7f:28:60:81:b5: d1:bd:4b:dd:88:5d:51:05:ac:8f:c6:c5:2e:94:b2:93:6e:f9: f2:88:44:7b:58:1f:2f:b2:f4:79:8d:06:49:31:59:39:5d:a0: 1c:ea:61:0a:58:b4:7f:6c:8a:21:88:c5:a4:15:07:a9:2c:14: 23:0d:b5:72:bf:32:56:da:10:45:f1:e3:14:40:80:8f:c1:f5: e5:58:91:bc:f8:75:d5:6d:5f:3d:37:0e:6c:de:d2:81:a4:2b: 0c:51:29:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXo8Rm6euuNQ9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NTg0ZGZmZmQtNzRkMC00Y2I5LWJlMTMtMjczMTQ1NjhhOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuBj+2eibF/BuKmefRKvRsu4Zj2Y2LA5EMeI DqNuGDBz2L8bni/sqZeCXQ6RSMtf0Xd8rK+4r8FYQMJeOSeQcV95DLR2ivRCL/PK j66p8nhl6A7MqP4ZFgqV+JWHZ1TKtOiOvS+MGRXVRhoxWGZ8a9iYGY4zFpM/upv+ 1YVQVNPOdItCQvrNjElOWbLIHhdZHlDmpJkGJmS1n+ZzCN5PbXKL8bhG9xLja7I1 ILnkCRvr19A5E0dRuSNjQdKZJO99DXrJSs7SoT7+kqgtlgrGmEfRgl02UtLMxcHL 90prnYAs1B/oOQHQPYO8OUJwroczHdyqzqCM64SNj+oTWnWEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmndRCUec4ubbpBR/SOoR4HX4SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZmQxOWZhODAtZDM3Yi0z NGZiLWI1MDAtYjNiZTUxMDE1NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6ERbY3ttdU5z/wcCmwwUrr5vTSbG54KM1EZ8RTMcpyHRt2jXn14vOZ T6rEfG4GSaMTrifR4Zm4yq+f5yRf+axRKBsthj2itukL8fQU6SXQamKgn0wHpEll Rm4ql8vzjh2eSkYkIKYrn9cf8XKTEuoJBGXMG96rLrRx2Dt9CKv0VQlomQtYrBuF lG6+huZNpT6gRB6jnnHCYszDSxR/KGCBtdG9S92IXVEFrI/GxS6UspNu+fKIRHtY Hy+y9HmNBkkxWTldoBzqYQpYtH9siiGIxaQVB6ksFCMNtXK/MlbaEEXx4xRAgI/B 9eVYkbz4ddVtXz03Dmze0oGkKwxRKek= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org