$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: wpKzzHwyWKdgl6mPziNzKk2pzIWqGoqzOis1hLSvH0Q= Subject key identifier: 76:53:7B:0D:03:A5:0A:B5:A6:57:DF:40:ED:AB:F5:30:39:FE:A0:7F Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F432858476C9DB0AFB536DC7E93145080 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b0:af:b5:36:dc:7e:93:14:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=9f11615f-d9a3-4f0c-bcb1-289323ab71eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:3f:4c:3c:e7:51:47:36:26:01:13:08:8d: 66:58:74:47:4e:02:9c:9c:48:ab:46:6b:d3:f7:7d: da:e5:4f:05:b4:71:63:e7:0f:22:ab:2e:ee:5e:44: 5c:2f:ab:0d:74:c4:0e:b5:27:2c:16:98:8a:a7:ba: 7e:d3:54:88:93:2c:43:96:a9:82:66:45:b8:2a:58: b5:1c:6b:a5:5a:f3:6d:ce:ab:3b:7d:b5:cd:ce:a3: 9f:dc:14:9e:a4:dd:db:34:81:32:4c:4f:1e:d3:02: 96:5d:18:05:77:0e:49:0d:8f:17:a9:9a:3a:15:98: 51:1c:3b:74:ec:f2:11:56:42:6a:20:19:57:ab:dc: 88:bb:39:88:0d:06:32:6f:7b:f3:26:a7:02:6a:1e: bd:0f:f0:72:fc:11:03:43:0d:ad:a6:68:0b:7e:3a: 01:89:c6:97:58:f8:a4:4d:14:1b:c6:26:0e:ca:f8: 40:cb:b5:ec:e0:36:d0:06:0d:f2:0f:59:25:89:da: 52:f1:98:6c:e0:27:74:3f:42:1d:4c:96:87:da:bd: d4:36:1a:36:4c:2e:df:1d:a0:1d:11:c3:43:d6:b1: f3:4b:f0:1f:f8:40:d3:3e:c5:bf:1a:ef:7d:55:c1: fa:ac:34:af:b5:04:5d:41:17:f4:db:e5:32:24:0b: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:7B:0D:03:A5:0A:B5:A6:57:DF:40:ED:AB:F5:30:39:FE:A0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:24:cf:0f:c9:5b:eb:8a:b6:06:20:0d:c8:05:39:61:5a:a1: 99:70:b3:68:6f:c5:a7:05:fa:a1:a0:bf:9d:ca:b2:6c:4d:1a: da:61:da:f4:30:d5:79:c8:3f:69:52:2a:52:77:98:ee:2b:bd: 6a:03:27:e2:c8:1a:61:92:01:8d:75:4f:b7:6f:cf:83:5b:c8: ca:6a:0d:9b:38:61:a9:aa:96:be:f4:52:22:74:d8:d3:5f:d2: dc:6b:bd:fe:ea:9f:b3:33:42:53:de:b9:08:05:4b:b5:e7:4e: 06:e7:27:e9:08:0b:b2:98:cf:f2:1f:c2:71:b6:2d:b6:65:94: 73:b2:d9:f5:73:bd:30:dc:9a:4a:c4:44:17:f7:e0:e8:86:1f: b5:07:8d:0e:47:d4:fc:e9:c9:26:b1:bc:85:e9:4d:82:8f:47: 42:f9:14:6a:e9:1e:13:74:cf:f2:91:51:b2:ca:d2:56:9c:fc: a8:46:36:1b:e5:a4:e9:a1:7b:8b:f6:14:ea:38:b9:51:c0:88: 75:f9:fc:39:0c:5b:61:46:bb:c8:01:3d:81:5a:f8:65:20:e6: 97:6a:a1:c0:b3:8f:ed:6c:7b:95:f5:3e:c8:d9:bb:0a:27:63: f8:7f:8b:fb:8c:ff:cc:de:be:a9:5e:42:41:d0:5c:41:bf:e3: ce:cc:d0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbCvtTbcfpMUUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWYxMTYxNWYtZDlhMy00ZjBjLWJjYjEtMjg5MzIzYWI3MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihE/TDznUUc2JgETCI1mWHRHTgKcnEirRmvT 933a5U8FtHFj5w8iqy7uXkRcL6sNdMQOtScsFpiKp7p+01SIkyxDlqmCZkW4Kli1 HGulWvNtzqs7fbXNzqOf3BSepN3bNIEyTE8e0wKWXRgFdw5JDY8XqZo6FZhRHDt0 7PIRVkJqIBlXq9yIuzmIDQYyb3vzJqcCah69D/By/BEDQw2tpmgLfjoBicaXWPik TRQbxiYOyvhAy7Xs4DbQBg3yD1klidpS8Zhs4Cd0P0IdTJaH2r3UNho2TC7fHaAd EcND1rHzS/Af+EDTPsW/Gu99VcH6rDSvtQRdQRf02+UyJAsi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZTew0DpQq1plffQO2r9TA5/qB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADskzw/JW+uKtgYgDcgFOWFaoZlws2hvxacF+qGgv53KsmxNGtph2vQw 1XnIP2lSKlJ3mO4rvWoDJ+LIGmGSAY11T7dvz4NbyMpqDZs4Yamqlr70UiJ02NNf 0txrvf7qn7MzQlPeuQgFS7XnTgbnJ+kIC7KYz/IfwnG2LbZllHOy2fVzvTDcmkrE RBf34OiGH7UHjQ5H1PzpySaxvIXpTYKPR0L5FGrpHhN0z/KRUbLK0lac/KhGNhvl pOmhe4v2FOo4uVHAiHX5/DkMW2FGu8gBPYFa+GUg5pdqocCzj+1se5X1PsjZuwon Y/h/i/uM/8zevqleQkHQXEG/487M0F0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org