$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: KNYK52OzxKVa1v7HdC/ThrrNcwOZBjH7NVWM0eZ7NZ4= Subject key identifier: 25:17:74:3B:24:1D:13:A6:D2:EF:62:78:AB:C5:A8:44:29:FE:41:0D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA1D3AF1473D2C638DD00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a1:d3:af:14:73:d2:c6:38:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=b85a2072-d1a6-44c7-8304-bdc7e535772e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:2b:03:9d:7c:4e:74:da:6b:f3:c0:99:c1: d2:92:99:2d:5f:49:51:83:15:c1:82:97:08:3c:ad: 33:79:cb:17:b7:d1:8f:ca:83:bf:81:c2:3b:bd:ff: f5:34:08:8f:7c:fe:80:65:0e:e7:ea:f8:02:88:c4: b2:a9:c3:58:ba:f8:79:94:34:c9:86:33:8b:4e:ee: 6e:20:85:a3:0f:2f:4a:fa:dd:d0:13:0b:1e:69:f9: 95:d1:06:78:44:2b:8d:65:6a:79:3f:88:4d:4b:84: 26:da:c1:04:b6:14:4c:d3:44:1d:7f:f7:67:6d:c5: 56:10:ec:94:a0:4b:13:35:5b:de:38:fb:8d:97:2a: 19:f5:c0:0a:d1:a6:c3:87:a1:cc:0a:44:9b:f1:12: 21:b4:e1:2c:ec:6f:bc:b8:33:1c:8b:ff:71:04:47: f9:2d:39:be:54:f3:d0:a1:ce:58:8b:36:e6:45:e8: 51:f4:b9:6e:69:76:14:a2:6d:65:24:e0:60:b5:c7: be:11:c1:46:db:2d:5a:83:56:0a:f5:38:1c:fb:17: 9e:49:1f:9d:1d:1a:9e:8b:e2:77:00:6f:74:01:c9: 02:35:24:95:2e:30:c0:32:a0:a7:2c:2a:1a:1b:1c: 06:7a:91:ea:b4:13:cc:ef:f0:1b:2f:58:a0:d7:bd: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:74:3B:24:1D:13:A6:D2:EF:62:78:AB:C5:A8:44:29:FE:41:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:42:f3:d7:93:8f:a2:74:65:44:7f:2b:56:6c:ee:e7:35:09: 9a:0f:ab:3e:d1:14:f4:07:8d:16:7a:e9:d6:6b:50:c2:c5:62: 80:62:ce:a0:ae:99:c0:9b:6b:27:fe:9e:0b:ce:14:fb:ff:25: 84:6c:ae:f7:f5:97:8c:3d:a9:5f:d9:6c:8f:b4:06:59:67:10: e4:55:b1:92:dc:66:21:3b:d8:46:9d:5b:65:0c:6e:44:39:e1: aa:df:d3:19:ef:00:64:08:3a:86:7a:77:b2:b9:a5:46:a2:08: 29:b6:ac:ba:a5:3e:66:de:88:bc:60:28:64:e3:f8:83:13:3e: bf:0c:1c:d4:4f:45:47:88:84:9d:91:4f:b2:44:4c:b2:e1:94: cb:23:87:2d:c6:ff:fc:99:db:2b:18:ce:d5:b6:8a:13:97:86: 0b:85:31:4f:a3:e6:1d:48:a7:e8:3c:1c:c1:d2:57:cb:0f:77: 71:89:d0:fe:5e:0a:7a:ed:70:ca:80:2d:71:5f:02:91:03:16: 4c:46:98:db:bd:94:0e:eb:04:75:70:74:95:be:66:d3:0e:53: 11:e8:27:36:4b:cc:41:17:c5:db:d1:18:a5:d0:11:a8:3f:3e: 40:99:41:be:f8:0d:a7:be:5d:66:c7:df:a6:dd:6c:98:73:0f: 5d:53:8d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6HTrxRz0sY43QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Yjg1YTIwNzItZDFhNi00NGM3LTgzMDQtYmRjN2U1MzU3NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeQrA518TnTaa/PAmcHSkpktX0lRgxXBgpcI PK0zecsXt9GPyoO/gcI7vf/1NAiPfP6AZQ7n6vgCiMSyqcNYuvh5lDTJhjOLTu5u IIWjDy9K+t3QEwseafmV0QZ4RCuNZWp5P4hNS4Qm2sEEthRM00Qdf/dnbcVWEOyU oEsTNVveOPuNlyoZ9cAK0abDh6HMCkSb8RIhtOEs7G+8uDMci/9xBEf5LTm+VPPQ oc5YizbmRehR9LluaXYUom1lJOBgtce+EcFG2y1ag1YK9Tgc+xeeSR+dHRqei+J3 AG90AckCNSSVLjDAMqCnLCoaGxwGepHqtBPM7/AbL1ig170tywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUXdDskHROm0u9ieKvFqEQp/kENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBC89eTj6J0ZUR/K1Zs7uc1CZoPqz7RFPQHjRZ66dZrUMLFYoBizqCu mcCbayf+ngvOFPv/JYRsrvf1l4w9qV/ZbI+0BllnEORVsZLcZiE72EadW2UMbkQ5 4arf0xnvAGQIOoZ6d7K5pUaiCCm2rLqlPmbeiLxgKGTj+IMTPr8MHNRPRUeIhJ2R T7JETLLhlMsjhy3G//yZ2ysYztW2ihOXhguFMU+j5h1Ip+g8HMHSV8sPd3GJ0P5e CnrtcMqALXFfApEDFkxGmNu9lA7rBHVwdJW+ZtMOUxHoJzZLzEEXxdvRGKXQEag/ PkCZQb74Dae+XWbH36bdbJhzD11Tja0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org