$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json) Hash identifier: klf03ltgnMbAOOEUIUaE2G+OUpmjZ5r9kh7ELHm0AVQ= Subject key identifier: 6F:2C:B4:39:2F:D5:D7:A8:BB:CB:91:1D:A9:FC:1F:AD:07:C3:84:73 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA6CC867D2A47A25C8700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 199.91.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a6:cc:86:7d:2a:47:a2:5c:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=44ca704e-5b7d-4b36-90e8-3b814015c18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:85:ff:e5:3c:a7:f1:b4:a0:2a:7d:51:1c: 3a:5c:50:9b:cc:9d:51:33:75:b5:e6:44:82:4f:27: 90:5e:06:d7:08:85:eb:94:ab:52:5a:12:a9:1e:97: 71:2c:c3:87:d4:3a:1c:72:c1:01:92:5b:05:20:4b: 10:ff:38:75:d7:f2:5f:93:f7:57:86:f3:9b:bd:11: 85:20:ca:79:0d:1c:22:56:99:85:0e:54:ca:a9:52: 17:50:e1:5b:1c:dd:a6:b9:8e:11:f8:be:1d:15:74: 37:3f:6a:bb:66:ed:e2:12:4c:04:3d:a5:0a:d0:4a: 3f:e7:f8:7f:e8:d8:48:d4:c5:db:35:86:e9:a3:40: 25:98:aa:21:7f:48:2e:78:fa:69:4e:f6:5e:54:21: ec:ab:84:b9:6c:9e:c7:37:8a:db:be:00:09:e7:9f: 5d:75:70:6f:a8:33:aa:1a:c2:a6:f5:05:3f:73:c8: 47:8f:b5:26:e2:2b:cb:94:64:9a:d8:a9:08:ee:52: 29:ef:55:0e:8c:01:e7:6c:a6:2b:1b:96:7a:2e:40: 8b:e2:2c:73:a6:ad:95:12:65:04:34:92:bc:cc:32: f4:a0:58:0e:1a:a1:01:2d:bc:4f:63:5c:5a:d3:74: 82:5d:56:8f:51:47:0f:f9:b0:55:17:ce:5d:12:eb: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:B4:39:2F:D5:D7:A8:BB:CB:91:1D:A9:FC:1F:AD:07:C3:84:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:92:f7:ce:4f:79:5e:13:46:ab:54:92:ca:c1:f2:42:62:d7: 64:6b:1b:e0:dc:5e:49:6c:9a:2e:4e:d1:80:7c:05:16:fa:ed: 69:9d:0d:e6:a0:87:5a:af:29:85:b8:b7:e6:ca:8f:88:fb:5b: 64:46:0d:2d:94:2b:f0:18:a6:68:31:0d:35:2f:ad:b4:91:f4: 30:ed:75:fe:b9:cb:7c:18:7c:16:5b:3c:ad:24:a3:8e:cc:e6: dd:2b:c8:1e:ec:09:80:e3:4b:91:eb:db:ca:66:73:00:01:f3: ba:ff:d8:7f:90:c3:87:35:26:e9:82:ff:ba:81:9e:cb:26:b5: 44:a4:63:22:21:7e:8d:fb:6f:1d:58:a8:ec:f4:da:c0:00:f8: 32:fd:70:54:7e:17:0e:20:aa:6b:16:e5:dd:79:0f:d7:94:b1: 19:54:33:f2:d7:e0:e3:5a:70:e6:48:bf:b7:cd:ef:ca:fd:b6: 80:4a:bf:d4:de:5b:ac:7d:e2:c5:ef:15:f5:4c:de:72:e8:ad: ac:b0:d6:80:24:0e:c0:ee:3f:d9:77:af:75:1a:23:53:3f:e5: 49:82:75:3c:49:fc:0e:df:35:9e:7c:38:68:f0:4e:30:ed:96: 1f:6c:ae:4f:04:11:1c:2d:09:ab:70:06:a8:f6:58:eb:6e:d1: 02:0a:96:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6bMhn0qR6JchwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NDRjYTcwNGUtNWI3ZC00YjM2LTkwZTgtM2I4MTQwMTVjMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eGF/+U8p/G0oCp9URw6XFCbzJ1RM3W15kSC TyeQXgbXCIXrlKtSWhKpHpdxLMOH1DoccsEBklsFIEsQ/zh11/Jfk/dXhvObvRGF IMp5DRwiVpmFDlTKqVIXUOFbHN2muY4R+L4dFXQ3P2q7Zu3iEkwEPaUK0Eo/5/h/ 6NhI1MXbNYbpo0AlmKohf0guePppTvZeVCHsq4S5bJ7HN4rbvgAJ559ddXBvqDOq GsKm9QU/c8hHj7Um4ivLlGSa2KkI7lIp71UOjAHnbKYrG5Z6LkCL4ixzpq2VEmUE NJK8zDL0oFgOGqEBLbxPY1xa03SCXVaPUUcP+bBVF85dEuuA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8stDkv1deou8uRHan8H60Hw4RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGS985PeV4TRqtUksrB8kJi12RrG+DcXklsmi5O0YB8BRb67WmdDeag h1qvKYW4t+bKj4j7W2RGDS2UK/AYpmgxDTUvrbSR9DDtdf65y3wYfBZbPK0ko47M 5t0ryB7sCYDjS5Hr28pmcwAB87r/2H+Qw4c1JumC/7qBnssmtUSkYyIhfo37bx1Y qOz02sAA+DL9cFR+Fw4gqmsW5d15D9eUsRlUM/LX4ONacOZIv7fN78r9toBKv9Te W6x94sXvFfVM3nLorayw1oAkDsDuP9l3r3UaI1M/5UmCdTxJ/A7fNZ58OGjwTjDt lh9srk8EERwtCatwBqj2WOtu0QIKlj8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org