$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json) Hash identifier: YYi740P662aQyR1UalD+iXAjc26Loq1SEX08zL2zTXc= Subject key identifier: 1F:54:7D:5D:26:E3:1A:D3:AF:BF:2B:66:5C:B6:06:41:64:B0:BF:97 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F432858472C65DD92504AB1F3650B4AA0 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 9009 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:dd:92:50:4a:b1:f3:65:0b:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=32e0c8e6-c29e-4833-aeda-09457612bd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:a9:8b:55:e6:27:6f:eb:5d:b1:84:62:3a: e1:a4:3a:cf:bf:cd:09:64:60:df:5f:7e:43:2e:5c: 0a:70:cf:96:82:c6:02:f1:f1:7a:44:64:a1:f7:bc: 9f:c7:b6:83:a9:a8:29:c1:93:ef:ad:0e:2a:44:aa: a3:87:66:66:a6:25:c6:5f:ed:cd:f7:df:88:91:95: b5:c3:91:5c:33:4e:b0:87:61:fa:8d:7d:1e:f4:51: c0:e3:fb:21:a7:7e:1e:b9:be:cd:c9:cf:a7:07:6f: 69:b7:98:2f:87:2d:6b:af:b4:05:be:ae:37:10:8a: cf:3e:5e:52:c5:7c:f6:10:19:eb:35:c2:61:d0:99: 4b:68:39:51:ee:7a:eb:38:d9:db:e4:97:d0:bb:8a: 1d:ee:c1:c8:c2:f8:42:67:33:74:ad:f8:e4:7e:92: 87:35:a9:1b:9b:f8:3d:ba:c0:43:b5:e9:e3:4b:30: da:cc:fb:91:17:1f:93:ce:4e:ab:68:c8:31:d5:6f: 39:7c:26:f6:ed:04:ee:8d:a6:51:c1:2d:69:b9:5f: 5a:54:74:4e:35:16:7a:c9:8a:e9:ef:37:2d:ad:c2: d4:e0:0b:29:0c:8e:f8:bd:39:c9:2e:27:f9:ad:15: 1b:26:86:c0:cd:45:7e:ac:93:75:a7:57:f3:21:b4: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:7D:5D:26:E3:1A:D3:AF:BF:2B:66:5C:B6:06:41:64:B0:BF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:30:9f:28:87:3e:64:b4:32:39:54:35:7d:71:8e:e0:29:45: c9:f1:73:df:43:a5:cd:98:8a:f8:be:bc:3b:a3:06:11:b6:32: f3:8b:c9:c6:56:db:6d:af:16:45:8c:d3:26:f7:d9:38:81:37: 48:b5:79:37:a9:63:9b:09:84:c8:64:61:a5:54:63:d5:33:9b: 5f:00:80:51:25:fc:fd:a8:7a:f9:ab:b3:03:ed:0c:5e:ff:1a: c4:40:b9:0a:73:5b:44:26:15:81:29:6d:4e:c8:a3:3f:db:5d: 9d:20:a1:b8:4f:93:0e:18:0f:63:fd:d6:f2:86:4e:96:52:33: a6:8d:9b:79:b5:51:82:4e:c9:3b:c0:5a:86:97:80:ec:de:77: de:c4:1b:5a:db:c5:e0:e3:a2:1d:ed:87:93:02:f3:39:9a:d8: 66:e4:6f:ef:08:fd:f9:9c:3c:71:7d:28:31:51:61:9f:83:a1: d0:c7:2e:4d:4e:15:eb:f6:a2:12:3f:bc:6f:d9:a2:7d:61:b5: e9:cd:a9:ff:e4:95:08:40:5a:75:12:18:84:8a:45:7e:cc:31: 77:80:ee:ed:3c:8b:b3:f0:90:6a:c1:f6:fc:3b:f0:d2:e9:27: 15:a7:a8:ac:c6:00:4a:93:03:f9:be:37:7d:d8:be:12:80:25: 7a:7c:82:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZd2SUEqx82ULSqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MzJlMGM4ZTYtYzI5ZS00ODMzLWFlZGEtMDk0NTc2MTJiZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdOpi1XmJ2/rXbGEYjrhpDrPv80JZGDfX35D LlwKcM+WgsYC8fF6RGSh97yfx7aDqagpwZPvrQ4qRKqjh2ZmpiXGX+3N99+IkZW1 w5FcM06wh2H6jX0e9FHA4/shp34eub7Nyc+nB29pt5gvhy1rr7QFvq43EIrPPl5S xXz2EBnrNcJh0JlLaDlR7nrrONnb5JfQu4od7sHIwvhCZzN0rfjkfpKHNakbm/g9 usBDtenjSzDazPuRFx+Tzk6raMgx1W85fCb27QTujaZRwS1puV9aVHRONRZ6yYrp 7zctrcLU4AspDI74vTnJLif5rRUbJobAzUV+rJN1p1fzIbSUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9UfV0m4xrTr78rZly2BkFksL+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIwnyiHPmS0MjlUNX1xjuApRcnxc99Dpc2Yivi+vDujBhG2MvOLycZW 222vFkWM0yb32TiBN0i1eTepY5sJhMhkYaVUY9Uzm18AgFEl/P2oevmrswPtDF7/ GsRAuQpzW0QmFYEpbU7Ioz/bXZ0gobhPkw4YD2P91vKGTpZSM6aNm3m1UYJOyTvA WoaXgOzed97EG1rbxeDjoh3th5MC8zma2Gbkb+8I/fmcPHF9KDFRYZ+DodDHLk1O Fev2ohI/vG/Zon1htenNqf/klQhAWnUSGISKRX7MMXeA7u08i7PwkGrB9vw78NLp JxWnqKzGAEqTA/m+N33YvhKAJXp8gps= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:09 2024 by rpki-client on console-ams.rpki-client.org