$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa File: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (raw, json) Hash identifier: sc2AJz/D4VJ+vebmMvCiHlzL8U9sFo2EYrJ8AZg5D/8= Subject key identifier: 8F:F6:09:B0:E9:9E:0E:D8:1A:1F:78:1F:9D:89:69:A3:68:71:90:84 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584769D0D328348F11C0B6BEC800 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 53542 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d3:28:34:8f:11:c0:b6:be:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=144fbc97-addb-4371-a879-ea4c83e93307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:67:24:2f:53:0d:e5:b9:2a:14:cd:05:d7: 57:9e:6c:2a:10:60:c6:6e:9e:28:3c:f9:0e:f4:b5: 8a:bd:23:15:4e:9a:77:ea:78:66:d7:b8:1c:2c:e6: b1:e3:47:40:b2:36:e3:13:c7:e6:11:24:d2:4b:14: 45:6f:fe:4f:71:4f:5b:cb:79:0d:ee:b4:84:95:fd: e7:c3:36:13:97:53:ea:ad:60:b3:ed:43:3b:3e:9b: 4f:ba:f5:59:a1:88:79:c0:7d:57:f0:28:40:91:64: fb:7b:07:8b:20:e2:53:08:da:a0:4f:81:ec:1b:46: 6e:00:d6:67:85:08:89:27:c5:34:2d:dc:42:fa:30: 5a:ed:a7:4a:43:d8:7f:25:07:c8:c7:26:c4:4b:2e: 96:eb:c8:dd:44:c9:81:d4:9e:bc:8c:a3:ee:4f:56: 32:5b:18:b3:16:90:a9:94:2e:6a:23:d5:1d:f7:14: 9f:4d:91:0d:cc:61:ef:09:77:b8:d9:12:da:f4:00: 96:b4:95:65:db:9b:82:58:fd:74:b7:b2:aa:b1:62: d6:3c:ea:94:38:b0:c5:3a:61:4a:96:72:2c:92:94: 69:92:a6:7e:ba:9a:d0:96:6a:61:a7:cb:1c:24:d3: 1a:84:02:8e:fd:72:95:9f:d5:73:4c:61:9e:8d:8e: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:09:B0:E9:9E:0E:D8:1A:1F:78:1F:9D:89:69:A3:68:71:90:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:84:0e:e4:a7:1b:0a:cb:99:7f:ac:9e:38:79:be:b2:bc:ed: 4d:f8:55:c0:5c:b7:2c:95:ea:d9:9e:44:97:ea:f0:08:a1:17: a8:42:aa:86:c1:6a:e8:d5:ec:2a:77:6e:48:eb:12:15:04:ea: 39:a9:3a:e9:0c:44:6a:18:a4:ee:04:59:53:df:7a:38:6c:74: de:a0:aa:02:81:60:fe:07:06:4a:80:85:fd:92:1d:3e:87:71: 2a:c2:93:4d:29:b8:6c:fb:41:02:22:9e:81:34:95:fc:82:49: 25:c5:71:b3:86:a1:b3:c8:d6:a0:9b:4a:83:69:94:df:29:52: ac:0b:15:ff:d7:ea:9a:32:da:84:9d:e7:b8:0e:6a:82:85:88: 61:0e:71:2d:e6:04:11:8d:fc:4b:38:b6:6e:9f:9a:e4:05:a4: 7b:63:3e:de:c6:45:b3:e7:2c:ca:76:57:38:28:60:24:95:c1: 43:9e:16:d5:10:17:de:8a:ba:d6:e5:9f:01:ef:e2:77:df:c8: 19:e2:59:d5:ec:39:81:bf:73:84:18:e6:1c:03:e1:3e:22:0d: 73:e5:4f:f6:83:8d:32:4e:00:8d:2c:57:33:98:01:cc:10:62: cd:0a:c8:cd:56:f7:a5:43:63:26:54:44:f0:46:7e:bd:7c:c4: e0:57:32:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0NMoNI8RwLa+yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk MTQ0ZmJjOTctYWRkYi00MzcxLWE4NzktZWE0YzgzZTkzMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxnJC9TDeW5KhTNBddXnmwqEGDGbp4oPPkO 9LWKvSMVTpp36nhm17gcLOax40dAsjbjE8fmESTSSxRFb/5PcU9by3kN7rSElf3n wzYTl1PqrWCz7UM7PptPuvVZoYh5wH1X8ChAkWT7eweLIOJTCNqgT4HsG0ZuANZn hQiJJ8U0LdxC+jBa7adKQ9h/JQfIxybESy6W68jdRMmB1J68jKPuT1YyWxizFpCp lC5qI9Ud9xSfTZENzGHvCXe42RLa9ACWtJVl25uCWP10t7KqsWLWPOqUOLDFOmFK lnIskpRpkqZ+uprQlmphp8scJNMahAKO/XKVn9VzTGGejY4jLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/2CbDpng7YGh94H52JaaNocZCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTNhNTc5ZmEtYTlkZC0z MmEzLTliODUtZDE4NzVjZjFkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWEDuSnGwrLmX+snjh5vrK87U34VcBctyyV6tmeRJfq8AihF6hCqobB aujV7Cp3bkjrEhUE6jmpOukMRGoYpO4EWVPfejhsdN6gqgKBYP4HBkqAhf2SHT6H cSrCk00puGz7QQIinoE0lfyCSSXFcbOGobPI1qCbSoNplN8pUqwLFf/X6poy2oSd 57gOaoKFiGEOcS3mBBGN/Es4tm6fmuQFpHtjPt7GRbPnLMp2VzgoYCSVwUOeFtUQ F96KutblnwHv4nffyBniWdXsOYG/c4QY5hwD4T4iDXPlT/aDjTJOAI0sVzOYAcwQ Ys0KyM1W96VDYyZURPBGfr18xOBXMqU= -----END CERTIFICATE-----Generated at Mon Nov 25 16:00:49 2024 by rpki-client on console-fra.rpki-client.org