$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa File: 012bce04-c29f-38f8-9f97-3ab6b1af1180.roa (raw, json) Hash identifier: HGRfSCZtMQLaMoi3ZQbyCo2Yvb5FFNVg315/N6e8Gg0= Subject key identifier: C0:05:D3:D5:D0:E4:4B:07:E7:1A:C2:93:62:95:9B:69:77:56:8B:80 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847E78F5CD3138F5D0980E88640 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 22885 IP address blocks: 199.0.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:5c:d3:13:8f:5d:09:80:e8:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=97dccec7-2db8-44a3-a264-cfc4d107a333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:29:8d:ba:5b:8a:78:f6:6b:e2:3e:74:28: 35:ba:93:ec:1d:71:a2:97:6c:2b:ce:73:cb:33:23: 13:e2:1c:09:73:d4:a4:88:f7:67:c9:9b:a2:ac:48: cb:ea:58:37:fc:f2:62:81:07:05:3b:2a:2e:98:47: 39:8b:03:f9:f2:1e:99:62:ca:a9:97:58:55:62:08: e9:0f:93:3b:b1:80:36:47:e2:5c:5b:2d:08:d2:4e: c8:44:ff:92:13:d5:0f:29:b8:c3:21:96:c1:88:7a: e1:24:01:35:8f:83:51:4f:80:fb:ef:15:63:98:da: 1f:01:02:7a:a0:7e:7b:3c:99:e3:23:aa:ee:1b:8f: 42:f1:3e:2e:5e:e8:d2:66:48:9b:d5:ec:69:b3:7d: fd:2b:db:18:55:a4:16:49:1f:5b:f6:76:ac:85:55: e3:f1:7a:71:d4:ea:58:3c:aa:c4:65:b1:05:fc:69: 91:aa:03:42:d5:21:7e:cb:5b:e2:1c:bb:69:27:ee: bc:6c:67:95:a2:2c:e0:fc:d1:ac:48:62:e5:2b:d2: d4:a7:98:63:6c:fc:5e:f9:a8:17:64:09:a8:ec:e9: 13:e9:45:94:89:3a:7e:9c:19:4f:e3:a2:4b:fe:14: 0a:8b:b9:02:b8:bd:a4:c7:f3:84:a3:51:40:52:c6: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:D3:D5:D0:E4:4B:07:E7:1A:C2:93:62:95:9B:69:77:56:8B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5d:06:ff:20:e9:6b:ef:7f:f1:97:13:17:4e:7d:8c:f4:89: 2b:3f:29:db:2e:ca:f1:c6:ff:d9:73:f0:82:58:c7:32:a5:2d: f5:76:5a:40:2b:40:61:a4:e7:b2:17:9f:1e:0b:8f:0b:bd:97: 28:5a:d8:6b:a1:9d:6c:9b:31:43:c3:82:f7:85:fd:58:1d:94: ca:14:ce:57:3e:d1:5f:d8:83:d2:4d:26:28:c0:4a:42:d9:ce: 9e:3d:1d:e6:0f:93:12:47:08:69:1c:51:17:df:d9:af:ed:b5: 9e:a0:be:6f:5a:a6:0f:64:cd:57:3c:2a:dd:b6:e8:f2:95:2e: a4:c5:09:13:a4:26:42:36:a6:b9:9e:23:8a:20:cd:2d:75:88: 37:60:ce:8e:53:79:07:b0:5d:e5:94:26:0e:e3:18:7e:cd:5e: d9:33:7b:95:e3:94:f6:b6:41:6c:7d:2a:2d:b6:96:a1:c5:4e: fc:01:ff:24:4b:9d:3f:fd:78:f2:aa:64:05:c5:43:fe:5c:2b: c4:d0:01:3f:0e:08:72:53:c8:fd:9a:13:ac:99:df:df:42:55: 91:7b:a1:00:34:4d:43:dc:eb:53:4c:c4:8b:58:34:f7:72:b3: dd:83:b9:af:76:d3:6e:6f:72:14:a9:26:69:77:f5:b0:91:f0: f2:ce:2a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1zTE49dCYDohkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk OTdkY2NlYzctMmRiOC00NGEzLWEyNjQtY2ZjNGQxMDdhMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUpjbpbinj2a+I+dCg1upPsHXGil2wrznPL MyMT4hwJc9SkiPdnyZuirEjL6lg3/PJigQcFOyoumEc5iwP58h6ZYsqpl1hVYgjp D5M7sYA2R+JcWy0I0k7IRP+SE9UPKbjDIZbBiHrhJAE1j4NRT4D77xVjmNofAQJ6 oH57PJnjI6ruG49C8T4uXujSZkib1exps339K9sYVaQWSR9b9nashVXj8Xpx1OpY PKrEZbEF/GmRqgNC1SF+y1viHLtpJ+68bGeVoizg/NGsSGLlK9LUp5hjbPxe+agX ZAmo7OkT6UWUiTp+nBlP46JL/hQKi7kCuL2kx/OEo1FAUsYgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAF09XQ5EsH5xrCk2KVm2l3VouAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDEyYmNlMDQtYzI5Zi0z OGY4LTlmOTctM2FiNmIxYWYxMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9dBv8g6Wvvf/GXExdOfYz0iSs/KdsuyvHG/9lz8IJYxzKlLfV2WkAr QGGk57IXnx4Ljwu9lyha2GuhnWybMUPDgveF/VgdlMoUzlc+0V/Yg9JNJijASkLZ zp49HeYPkxJHCGkcURff2a/ttZ6gvm9apg9kzVc8Kt226PKVLqTFCROkJkI2prme I4ogzS11iDdgzo5TeQewXeWUJg7jGH7NXtkze5XjlPa2QWx9Ki22lqHFTvwB/yRL nT/9ePKqZAXFQ/5cK8TQAT8OCHJTyP2aE6yZ399CVZF7oQA0TUPc61NMxItYNPdy s92Dua92025vchSpJml39bCR8PLOKjM= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org