$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa File: 2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa (raw, json) Hash identifier: JB7TDr2bSifDxpk06r1i9FUyC4jFSzLd47A484S6VQU= Subject key identifier: B8:2F:4A:41:62:03:4B:9B:63:6D:DD:AF:93:55:17:D5:39:30:05:D0 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F432858479DF1FB096E8F7097FF27F200 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa Signing time: Mon 21 Oct 2024 17:09:25 +0000 ROA not before: Mon 21 Oct 2024 17:09:25 +0000 ROA not after: Sun 19 Jan 2025 18:09:25 +0000 asID: 396026 IP address blocks: 199.230.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Dec 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:f1:fb:09:6e:8f:70:97:ff:27:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Oct 21 17:09:25 2024 GMT Not After : Jan 19 18:09:25 2025 GMT Subject: CN=ff97b379-dc63-44d5-aa60-e03440fac756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:dc:af:8d:f4:91:71:28:d5:5d:47:af:9b: c9:be:36:37:33:7f:74:21:25:1f:9b:21:b3:97:69: 38:e4:91:87:3b:69:60:46:cd:5d:a0:e3:31:99:05: 11:8d:00:4c:88:be:d5:3b:8d:d8:49:33:9c:9d:4f: 15:7c:61:eb:f1:11:4f:58:6c:b6:8a:a6:6d:61:b7: 66:fa:b7:1f:4b:01:25:aa:41:c4:d9:a5:21:06:b4: e6:2d:fb:5b:d0:66:50:5f:8b:09:a1:38:83:c3:8e: f2:d3:2a:f8:7e:e9:75:2b:0a:90:cc:1e:64:2f:e6: 79:aa:07:f9:f6:42:b1:49:14:e1:70:a1:26:4f:b8: ec:03:14:32:79:e3:5b:19:78:96:62:46:92:cc:f4: 8c:20:6b:e4:ba:51:af:b8:50:82:fb:ed:f3:6e:df: 6a:90:c0:46:ad:18:cb:b6:9c:53:04:44:6f:02:ab: de:df:1b:b6:dc:be:57:48:ed:c3:00:00:e9:6f:09: ac:db:d7:ca:0f:e6:ab:bd:6e:30:98:18:c2:a9:b4: 38:13:45:d0:19:5a:e2:61:67:dd:34:1e:01:4b:21: 63:59:10:99:11:25:73:ae:31:2b:a1:fc:95:3b:82: 38:05:32:d5:16:e4:98:13:ee:6f:83:38:fb:3f:dc: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:4A:41:62:03:4B:9B:63:6D:DD:AF:93:55:17:D5:39:30:05:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.230.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:37:60:86:4e:32:88:7f:15:19:c8:ce:6c:1d:65:41:e3:9e: e3:28:2f:0f:eb:9e:b9:d2:af:73:d3:b3:dd:6c:29:06:76:fb: 49:bb:1a:d6:f2:f8:7c:0c:f4:c5:d3:7c:21:e0:a0:e9:b1:a2: 18:06:15:79:98:1f:9e:17:b3:d3:23:93:9c:49:cc:71:03:c0: ec:19:33:fb:31:c6:51:86:15:84:f5:c5:c7:9c:50:61:8a:e1: 42:1c:14:fc:af:57:46:08:1f:5d:82:03:0e:9a:e5:ce:49:ec: 11:e6:09:1b:32:72:11:e4:c3:e4:e2:69:1b:76:6f:b9:18:8f: 02:36:70:2f:fb:00:9c:4f:83:ce:a7:17:78:f6:ed:15:f5:51: 1f:52:d7:db:45:82:94:c5:27:68:c1:11:a2:6c:9a:42:40:dc: 02:19:de:89:a5:81:72:38:44:a7:82:5b:8d:37:36:2f:4a:51: f9:2c:16:0d:4c:f4:3e:3c:d4:8f:94:ff:bc:07:fe:17:73:4c: a7:ca:56:e2:6e:3b:e0:92:af:f6:c6:35:01:e7:8d:62:e6:ca: 53:b5:e0:b0:98:4b:d4:c6:25:e3:b3:ee:0d:59:8c:0e:e6:ea: 9f:04:10:3f:17:2a:66:69:19:2e:11:d9:3c:24:76:bf:a7:ac: fa:22:41:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEed8fsJbo9wl/8n8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI0MTAyMTE3MDkyNVoXDTI1MDExOTE4MDkyNVowLzEtMCsGA1UEAxMk ZmY5N2IzNzktZGM2My00NGQ1LWFhNjAtZTAzNDQwZmFjNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm/cr430kXEo1V1Hr5vJvjY3M390ISUfmyGz l2k45JGHO2lgRs1doOMxmQURjQBMiL7VO43YSTOcnU8VfGHr8RFPWGy2iqZtYbdm +rcfSwElqkHE2aUhBrTmLftb0GZQX4sJoTiDw47y0yr4ful1KwqQzB5kL+Z5qgf5 9kKxSRThcKEmT7jsAxQyeeNbGXiWYkaSzPSMIGvkulGvuFCC++3zbt9qkMBGrRjL tpxTBERvAqve3xu23L5XSO3DAADpbwms29fKD+arvW4wmBjCqbQ4E0XQGVriYWfd NB4BSyFjWRCZESVzrjErofyVO4I4BTLVFuSYE+5vgzj7P9wrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgvSkFiA0ubY23dr5NVF9U5MAXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmQ4ZTE0YmYtMTIzYS0z NTNmLWJjMWQtN2YwZjcwODcyMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI3YIZOMoh/FRnIzmwdZUHjnuMoLw/rnrnSr3PTs91sKQZ2+0m7Gtby +HwM9MXTfCHgoOmxohgGFXmYH54Xs9Mjk5xJzHEDwOwZM/sxxlGGFYT1xcecUGGK 4UIcFPyvV0YIH12CAw6a5c5J7BHmCRsychHkw+TiaRt2b7kYjwI2cC/7AJxPg86n F3j27RX1UR9S19tFgpTFJ2jBEaJsmkJA3AIZ3omlgXI4RKeCW403Ni9KUfksFg1M 9D481I+U/7wH/hdzTKfKVuJuO+CSr/bGNQHnjWLmylO14LCYS9TGJeOz7g1ZjA7m 6p8EED8XKmZpGS4R2Twkdr+nrPoiQSw= -----END CERTIFICATE-----Generated at Thu Dec 12 16:33:41 2024 by rpki-client on console-fra.rpki-client.org