$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json) Hash identifier: kwaBfqxmyqmR56M82qjTb8M3r3qyGYZWwMGDDjAt1Tw= Subject key identifier: 2C:1D:6F:05:5B:5D:3D:4A:77:23:E6:39:EB:0D:12:8A:01:06:5C:AB Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA19F990839657D17DF20 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 199.91.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a1:9f:99:08:39:65:7d:17:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=5973f32c-8f54-40f8-a36e-de39092706a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:df:c1:3b:80:4a:6d:36:39:62:2a:6e:98: a4:27:8e:73:a7:24:2d:7a:d9:c3:fa:92:37:29:5b: a1:63:db:21:95:ec:8d:02:a8:9e:e1:a1:c7:9f:39: 01:2c:7f:84:d6:5e:39:13:82:62:59:03:23:2d:09: 57:88:49:12:c8:ac:bc:c4:8e:73:3f:67:d5:f2:49: da:1a:cf:c7:42:cf:9d:11:3a:e2:1c:e9:1b:7d:82: aa:fe:78:37:02:f9:f5:7f:5b:23:34:09:41:4c:17: d1:33:34:04:b8:f8:fd:f0:69:42:9a:e1:fa:6c:aa: 5e:94:ff:ad:64:28:bc:c2:f6:35:4b:c7:c4:7f:2e: df:46:64:52:c1:28:b4:17:2a:84:47:ec:18:3d:3e: 6f:3d:e4:a0:a8:28:0b:c1:7f:f7:d9:7c:81:6e:83: e6:53:27:dd:21:d5:45:c4:3d:16:e9:d4:d7:fb:5d: b0:3a:28:07:0c:2c:4f:d5:22:cb:ad:63:2d:71:a7: f8:e5:02:be:98:dc:13:50:ce:a3:ce:c5:e1:3b:cc: a1:4d:38:db:3f:e6:ba:ed:a6:ef:3a:fb:fc:dd:ee: 03:83:04:c2:2a:61:17:2a:7d:03:2f:20:e9:c7:6d: d6:c8:f9:f1:58:d4:38:61:b5:45:b4:33:c5:35:d7: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:6F:05:5B:5D:3D:4A:77:23:E6:39:EB:0D:12:8A:01:06:5C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:01:6a:2a:73:37:03:a8:27:0b:16:5f:32:e5:20:61:7d:3f: f0:be:bc:d7:5f:c4:1d:7b:dd:fa:d3:25:2f:fa:a1:bb:85:69: a6:d5:35:33:5d:f0:71:c8:e1:5b:54:22:c9:e1:45:a0:d0:d0: 02:4b:60:a8:e1:5a:f3:4b:dd:c5:c9:de:65:c7:d5:da:78:e1: a0:85:9b:46:82:15:eb:cf:97:15:b6:eb:0f:af:58:f1:57:1d: f7:19:b2:6a:11:e4:9e:79:44:c4:f3:57:a0:6e:d8:9e:cf:20: 3d:3c:15:71:77:f2:40:20:73:7e:53:c7:8b:4d:63:be:e1:f6: 78:37:1d:a4:12:2a:84:3e:b5:61:42:c3:ad:c6:c7:ca:8d:b4: 83:6e:69:a3:20:3f:2a:a3:bf:58:f8:fc:4f:60:3d:a5:1e:74: 27:e3:ae:f7:21:d4:d8:b0:0f:fc:95:5c:a5:21:e9:05:a8:a0: 22:91:dd:56:79:72:df:73:1d:96:19:81:47:5f:bd:86:dd:f2: 05:ed:44:c3:8c:58:61:46:75:d3:6a:36:1b:af:b9:e9:09:bc: 63:a3:70:fb:71:ea:67:c5:af:15:3c:ff:1e:1e:d0:bc:57:6f: b0:69:c2:fd:00:d4:f4:1e:f7:9a:88:bd:06:a9:72:d8:20:8e: 3d:5e:2e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6GfmQg5ZX0X3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NTk3M2YzMmMtOGY1NC00MGY4LWEzNmUtZGUzOTA5MjcwNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqLfwTuASm02OWIqbpikJ45zpyQtetnD+pI3 KVuhY9shleyNAqie4aHHnzkBLH+E1l45E4JiWQMjLQlXiEkSyKy8xI5zP2fV8kna Gs/HQs+dETriHOkbfYKq/ng3Avn1f1sjNAlBTBfRMzQEuPj98GlCmuH6bKpelP+t ZCi8wvY1S8fEfy7fRmRSwSi0FyqER+wYPT5vPeSgqCgLwX/32XyBboPmUyfdIdVF xD0W6dTX+12wOigHDCxP1SLLrWMtcaf45QK+mNwTUM6jzsXhO8yhTTjbP+a67abv Ovv83e4DgwTCKmEXKn0DLyDpx23WyPnxWNQ4YbVFtDPFNdfyJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdbwVbXT1KdyPmOesNEooBBlyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIBaipzNwOoJwsWXzLlIGF9P/C+vNdfxB173frTJS/6obuFaabVNTNd 8HHI4VtUIsnhRaDQ0AJLYKjhWvNL3cXJ3mXH1dp44aCFm0aCFevPlxW26w+vWPFX HfcZsmoR5J55RMTzV6Bu2J7PID08FXF38kAgc35Tx4tNY77h9ng3HaQSKoQ+tWFC w63Gx8qNtINuaaMgPyqjv1j4/E9gPaUedCfjrvch1NiwD/yVXKUh6QWooCKR3VZ5 ct9zHZYZgUdfvYbd8gXtRMOMWGFGddNqNhuvuekJvGOjcPtx6mfFrxU8/x4e0LxX b7Bpwv0A1PQe95qIvQapctggjj1eLmU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org