$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa File: b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa (raw, json) Hash identifier: JMxhKW9+UDdpxZUc8HHnO2mnU7o7Ulh90wbH6IOkiYo= Subject key identifier: 5F:D3:FD:C7:A5:6E:DE:44:78:D5:5C:0C:1B:C3:C4:76:FF:90:CC:E0 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F43285847478A4359A39E5BCF6BEBAD80 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa Signing time: Fri 20 Sep 2024 18:20:56 +0000 ROA not before: Fri 20 Sep 2024 18:20:56 +0000 ROA not after: Thu 19 Dec 2024 19:20:56 +0000 asID: 53991 IP address blocks: 199.83.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:47:8a:43:59:a3:9e:5b:cf:6b:eb:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Sep 20 18:20:56 2024 GMT Not After : Dec 19 19:20:56 2024 GMT Subject: CN=9d3cc75f-916d-42a8-933c-d3ff4109d94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:d0:13:b3:3a:02:81:c4:15:37:a1:42:e8: 77:fe:88:c7:83:a9:4e:fe:5f:d9:1e:6b:15:ee:0e: ae:0d:89:4b:00:2e:27:c8:c2:45:10:1d:6d:90:1c: 45:76:ec:44:b7:39:c7:01:7e:cd:94:64:2f:ad:d9: 35:1c:5a:86:fc:cf:93:95:b0:8a:fa:86:e7:b8:d4: dd:04:40:13:d3:ba:71:f7:06:f1:13:53:78:af:21: ab:ec:c5:16:fa:41:00:5a:5c:d7:96:fd:ce:16:c7: 17:a1:ec:d3:78:97:9e:94:fc:87:7d:bc:f5:81:23: 20:40:0b:ce:ca:e2:0a:5b:3c:10:24:2c:d8:e5:03: 14:f1:17:66:30:42:11:a6:57:80:3a:f7:2c:9c:c2: 57:cd:df:32:a5:d2:9d:f6:2a:8a:a8:35:9c:e7:33: 8b:08:1c:67:ac:b7:0a:fc:39:f7:ac:20:0b:c5:a6: 20:27:01:ec:6a:4b:51:ef:cb:5e:17:96:da:fc:4e: 3d:bb:81:1d:65:ce:2e:99:3d:10:8f:cb:b9:93:a2: 15:04:0c:35:05:3f:c1:bb:0a:01:81:60:29:72:32: 8a:ad:31:b2:41:a9:c2:aa:a0:e3:e8:5c:c7:58:e8: c6:a1:5d:50:5e:05:95:34:8d:21:c8:96:10:6d:27: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:FD:C7:A5:6E:DE:44:78:D5:5C:0C:1B:C3:C4:76:FF:90:CC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 199.83.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:81:c6:7d:43:70:9b:cd:fd:03:5d:8a:ac:f6:a1:db:fd:95: d6:b4:a6:16:ef:9c:d8:a3:61:fa:84:69:ce:94:32:7b:ad:3d: d5:49:71:f1:8f:d0:46:a1:e7:99:d8:3d:58:78:4e:a9:89:76: 9f:e4:14:7e:9b:42:0c:57:8c:2a:25:c3:5b:37:db:b3:a2:a6: aa:09:d6:ec:8f:cf:2d:2c:a8:ae:b8:e7:55:4f:71:9f:3e:9d: 70:b1:49:bb:b3:06:45:ae:5a:9e:29:44:77:37:bb:b5:55:f5: 26:ce:62:57:02:5c:17:86:18:c0:08:9f:9c:59:9a:b0:71:17: 68:85:51:6c:19:33:30:4f:d3:48:13:b4:55:df:f0:1c:30:52: a8:03:bc:f6:16:a7:d3:3e:09:57:65:32:c1:22:f1:22:aa:a9: a1:1b:aa:d7:e9:21:72:9c:f3:44:54:54:7d:b6:3c:14:65:fc: d3:d5:c0:3e:25:07:87:db:f0:da:74:87:ee:62:12:10:9e:b6: ae:ef:a9:ff:9c:fb:ec:8e:da:dd:62:ad:61:d8:0c:dc:6e:cc: 37:62:39:82:68:61:63:cf:95:1c:9c:8b:18:11:10:d1:5b:93: 1d:12:6b:f3:4a:a1:32:e4:1c:25:86:5c:82:91:f8:55:b6:cd: ec:b5:ca:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdHikNZo55bz2vrrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI0MDkyMDE4MjA1NloXDTI0MTIxOTE5MjA1NlowLzEtMCsGA1UEAxMk OWQzY2M3NWYtOTE2ZC00MmE4LTkzM2MtZDNmZjQxMDlkOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLQE7M6AoHEFTehQuh3/ojHg6lO/l/ZHmsV 7g6uDYlLAC4nyMJFEB1tkBxFduxEtznHAX7NlGQvrdk1HFqG/M+TlbCK+obnuNTd BEAT07px9wbxE1N4ryGr7MUW+kEAWlzXlv3OFscXoezTeJeelPyHfbz1gSMgQAvO yuIKWzwQJCzY5QMU8RdmMEIRpleAOvcsnMJXzd8ypdKd9iqKqDWc5zOLCBxnrLcK /Dn3rCALxaYgJwHsaktR78teF5ba/E49u4EdZc4umT0Qj8u5k6IVBAw1BT/BuwoB gWApcjKKrTGyQanCqqDj6FzHWOjGoV1QXgWVNI0hyJYQbSfsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/T/celbt5EeNVcDBvDxHb/kMzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjBmM2RkNjgtMzQxMi0z ZDU5LTlhYzQtZjUzOThmNDJiY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCBxn1DcJvN/QNdiqz2odv9lda0phbvnNijYfqEac6UMnutPdVJcfGP 0Eah55nYPVh4TqmJdp/kFH6bQgxXjColw1s327OipqoJ1uyPzy0sqK6451VPcZ8+ nXCxSbuzBkWuWp4pRHc3u7VV9SbOYlcCXBeGGMAIn5xZmrBxF2iFUWwZMzBP00gT tFXf8BwwUqgDvPYWp9M+CVdlMsEi8SKqqaEbqtfpIXKc80RUVH22PBRl/NPVwD4l B4fb8Np0h+5iEhCetq7vqf+c++yO2t1irWHYDNxuzDdiOYJoYWPPlRycixgRENFb kx0Sa/NKoTLkHCWGXIKR+FW2zey1ynU= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:24 2024 by rpki-client on console-fra.rpki-client.org