$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa File: ddf39dc7-a720-3335-9c78-530950b34ba7.roa (raw, json) Hash identifier: NMtqsws1kAjXD59oOvmYxX4EbxWtQd4wWvFoiZzbY40= Subject key identifier: 49:E6:7B:D3:6F:A5:5F:56:0A:35:34:F9:D5:2E:16:D5:D5:E3:77:A5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA17E01F92ABBC09F3340 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 199.91.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a1:7e:01:f9:2a:bb:c0:9f:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=d7afc229-0fa4-4522-af03-eed6a7d4c3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:e4:22:91:f8:e4:8f:aa:9b:48:fa:a8:4e: d6:e7:1f:83:90:2c:7e:b3:55:fb:a7:53:a1:54:0b: 6a:f0:ce:06:58:9d:bf:09:16:fa:a7:06:d4:c0:ff: 49:14:d5:33:5a:0b:25:32:67:8e:67:3c:67:ac:08: 14:a5:0d:78:e8:9b:8a:f0:bb:b1:11:39:33:9c:e0: 61:dd:1d:fc:ec:00:38:fa:5c:88:d8:2e:ab:d4:f5: 6f:68:eb:05:72:71:01:58:6a:9c:61:9e:26:fd:96: de:80:0b:f1:5e:f9:6e:d7:e9:f7:f5:25:d4:2f:26: 61:27:d7:74:7a:ed:f3:80:fe:00:41:ca:41:5e:d1: cb:cf:eb:23:14:98:08:f6:33:f4:8f:68:ed:b9:92: 76:10:58:95:6d:73:0f:94:71:98:a9:1e:24:ce:ee: de:71:ec:a5:df:f0:8b:f6:15:2a:b8:30:63:f3:51: 13:a4:69:d0:48:c6:95:bb:46:0a:9b:e8:e4:42:8f: fc:fa:e8:2f:b3:c9:bf:92:95:a0:5c:f8:07:69:c6: b1:b5:f8:ca:aa:f3:2a:93:7f:c4:78:f1:05:0a:48: ec:bb:59:8c:f3:d6:e8:6e:2f:0e:d3:b7:32:4c:e8: 9b:01:c4:a3:d2:a6:ba:59:bf:d9:3b:d6:7b:ec:3b: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E6:7B:D3:6F:A5:5F:56:0A:35:34:F9:D5:2E:16:D5:D5:E3:77:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ddf39dc7-a720-3335-9c78-530950b34ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ad:ae:b3:7c:30:e3:ee:7a:35:08:8e:6b:6f:4a:3a:c6:be: 07:62:f8:13:aa:58:5f:b7:79:02:3f:51:be:87:1d:dd:13:80: de:ce:48:a2:1f:ef:b2:b2:ee:b8:8b:19:4b:0f:12:0e:1b:a4: 0d:11:fe:18:e1:ab:7b:6f:39:c1:7c:4a:7a:17:b1:0f:0e:37: 70:7c:4a:eb:a8:b0:d3:7c:d2:9f:0f:69:44:81:c9:e1:df:6b: 0a:fb:23:43:f8:ee:f5:a0:e8:b5:59:52:96:96:3c:a7:e2:08: 5e:45:71:24:a9:98:07:7d:02:a2:35:2b:aa:83:2a:5d:27:f0: 70:dc:c4:85:c9:4b:21:1b:9c:95:9b:36:9f:f7:1b:bc:0f:8a: a6:da:92:01:5b:70:93:7f:3c:88:43:a2:2b:cb:bd:c6:82:c6: cb:65:fe:69:b1:7d:1f:cc:dd:e9:58:d1:91:7b:a4:ed:bc:be: 27:c6:4c:ca:f7:11:6c:55:27:65:be:a5:de:66:0d:27:6d:ec: 65:1e:fd:01:63:eb:7f:bf:ae:9e:a8:36:b7:27:db:ba:40:5f: 18:9d:64:27:10:0d:7a:d6:d5:02:a4:90:19:9f:e4:0b:ca:60: 9f:be:5a:be:54:b9:75:ef:e5:84:0f:11:96:52:db:bf:33:b7: 95:2c:fe:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6F+Afkqu8CfM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDdhZmMyMjktMGZhNC00NTIyLWFmMDMtZWVkNmE3ZDRjM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq/kIpH45I+qm0j6qE7W5x+DkCx+s1X7p1Oh VAtq8M4GWJ2/CRb6pwbUwP9JFNUzWgslMmeOZzxnrAgUpQ146JuK8LuxETkznOBh 3R387AA4+lyI2C6r1PVvaOsFcnEBWGqcYZ4m/ZbegAvxXvlu1+n39SXULyZhJ9d0 eu3zgP4AQcpBXtHLz+sjFJgI9jP0j2jtuZJ2EFiVbXMPlHGYqR4kzu7eceyl3/CL 9hUquDBj81ETpGnQSMaVu0YKm+jkQo/8+ugvs8m/kpWgXPgHacaxtfjKqvMqk3/E ePEFCkjsu1mM89bobi8O07cyTOibAcSj0qa6Wb/ZO9Z77Dus1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnme9NvpV9WCjU0+dUuFtXV43elMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZGRmMzlkYzctYTcyMC0z MzM1LTljNzgtNTMwOTUwYjM0YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWtrrN8MOPuejUIjmtvSjrGvgdi+BOqWF+3eQI/Ub6HHd0TgN7OSKIf 77Ky7riLGUsPEg4bpA0R/hjhq3tvOcF8SnoXsQ8ON3B8SuuosNN80p8PaUSByeHf awr7I0P47vWg6LVZUpaWPKfiCF5FcSSpmAd9AqI1K6qDKl0n8HDcxIXJSyEbnJWb Np/3G7wPiqbakgFbcJN/PIhDoivLvcaCxstl/mmxfR/M3elY0ZF7pO28vifGTMr3 EWxVJ2W+pd5mDSdt7GUe/QFj63+/rp6oNrcn27pAXxidZCcQDXrW1QKkkBmf5AvK YJ++Wr5UuXXv5YQPEZZS278zt5Us/io= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org