$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa File: fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa (raw, json) Hash identifier: 2X6BtkrLtawUtNUxlwdFD+c0DLtFHkTmvEmyYJ2fmCM= Subject key identifier: BE:F0:23:51:14:5E:A7:C5:99:78:14:15:56:C9:21:ED:36:93:80:E9 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F432858474789FD3485BC05FDADD2AE00 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa Signing time: Fri 20 Sep 2024 18:20:22 +0000 ROA not before: Fri 20 Sep 2024 18:20:22 +0000 ROA not after: Thu 19 Dec 2024 19:20:22 +0000 asID: 53991 IP address blocks: 199.193.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:47:89:fd:34:85:bc:05:fd:ad:d2:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Sep 20 18:20:22 2024 GMT Not After : Dec 19 19:20:22 2024 GMT Subject: CN=61fbd9f5-ea64-4bf7-b6bf-c00471edd8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:7d:f6:60:2d:d9:e0:7b:bb:7f:f1:67:bd: 44:fe:49:ba:fe:3c:fe:89:01:b6:18:0e:8b:8c:20: 0d:2a:b2:0f:dc:0a:db:cb:c9:df:de:2d:68:60:9e: 78:a4:0a:9f:3c:e2:81:46:0f:17:5d:a8:79:be:05: 97:51:70:b1:88:de:9f:a3:c8:0f:1a:f4:bd:fa:44: c0:af:ab:a6:6c:b0:02:be:19:04:57:24:8a:10:a6: a4:c5:d1:ad:be:86:63:3b:de:cc:e5:56:b0:a2:d1: 26:5b:f7:9a:f5:d0:a9:55:8c:eb:7d:08:e2:17:39: 6d:e3:81:d5:70:89:07:89:4d:60:89:56:a0:b2:c7: e4:24:69:53:36:01:8c:fd:e1:de:c7:b6:c1:1c:71: f6:6b:19:34:e0:57:0d:04:11:2a:bd:44:43:98:b0: 54:53:f6:34:2c:9d:b9:2d:37:20:cb:aa:dc:bb:f0: 4a:44:38:08:17:3a:41:94:04:a8:04:5e:2d:e4:4c: 7a:93:0d:b8:ed:da:9e:de:24:30:5f:1b:6a:13:b5: 45:3c:4e:f0:53:83:66:b3:fe:1f:ac:a8:93:53:21: 56:a8:51:c5:85:c8:24:a6:be:a0:64:31:03:d5:1f: b1:a1:25:c8:dc:4d:e7:d5:28:77:b5:ea:d3:34:03: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:23:51:14:5E:A7:C5:99:78:14:15:56:C9:21:ED:36:93:80:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/fbfe3379-e2a4-3ce5-9a26-f44308c89a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 199.193.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:ef:b2:a3:bd:84:4e:f7:2a:08:9b:2d:fd:d1:6e:c0:de: bd:c9:70:b9:0c:f0:14:b7:c2:8b:46:fa:d2:43:29:59:3d:68: 1f:3a:7d:66:fb:7e:d7:ca:6a:17:44:eb:e4:2f:e1:e6:1e:c5: c6:e4:e6:b5:d9:a9:07:02:fa:ef:0f:e2:7e:50:f1:b6:c5:7d: 11:5d:2c:6f:5f:34:60:0f:8e:8b:72:49:c3:1d:a0:e2:9b:60: 68:9a:ee:82:10:d0:d3:3e:18:d8:c1:fa:54:b7:d3:b9:a8:5b: 98:9b:ff:31:81:12:27:44:4f:7e:3e:10:c7:e5:d7:b6:76:84: d9:7e:53:a3:ef:7b:ff:c6:3e:49:a9:1b:cf:32:c0:69:05:31: fa:7e:7d:8e:c0:a0:47:6a:94:0e:b2:db:70:a1:20:88:9b:02: 6d:92:2d:93:51:0a:2b:ff:e0:a4:17:04:ab:9c:45:b4:a0:88: 1f:52:1d:4b:20:cf:ea:4c:c6:ff:d5:8e:14:4e:f3:e1:44:ce: b9:a8:10:d7:df:9d:9a:77:f0:9d:38:02:5d:16:ab:e8:1b:ca: 53:ea:02:a4:40:80:12:ae:d9:07:c5:2d:da:6d:d4:e3:2f:ea: 7d:02:ec:9e:18:45:aa:c8:f4:b3:bf:3c:17:de:dd:c5:a3:d3: d1:88:c9:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdHif00hbwF/a3SrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI0MDkyMDE4MjAyMloXDTI0MTIxOTE5MjAyMlowLzEtMCsGA1UEAxMk NjFmYmQ5ZjUtZWE2NC00YmY3LWI2YmYtYzAwNDcxZWRkOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwh99mAt2eB7u3/xZ71E/km6/jz+iQG2GA6L jCANKrIP3Arby8nf3i1oYJ54pAqfPOKBRg8XXah5vgWXUXCxiN6fo8gPGvS9+kTA r6umbLACvhkEVySKEKakxdGtvoZjO97M5VawotEmW/ea9dCpVYzrfQjiFzlt44HV cIkHiU1giVagssfkJGlTNgGM/eHex7bBHHH2axk04FcNBBEqvURDmLBUU/Y0LJ25 LTcgy6rcu/BKRDgIFzpBlASoBF4t5Ex6kw247dqe3iQwXxtqE7VFPE7wU4Nms/4f rKiTUyFWqFHFhcgkpr6gZDED1R+xoSXI3E3n1Sh3terTNANCkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7wI1EUXqfFmXgUFVbJIe02k4DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvZmJmZTMzNzktZTJhNC0z Y2U1LTlhMjYtZjQ0MzA4Yzg5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJ77KjvYRO9yoImy390W7A3r3JcLkM8BS3wotG+tJDKVk9aB86fWb7 ftfKahdE6+Qv4eYexcbk5rXZqQcC+u8P4n5Q8bbFfRFdLG9fNGAPjotyScMdoOKb YGia7oIQ0NM+GNjB+lS307moW5ib/zGBEidET34+EMfl17Z2hNl+U6Pve//GPkmp G88ywGkFMfp+fY7AoEdqlA6y23ChIIibAm2SLZNRCiv/4KQXBKucRbSgiB9SHUsg z+pMxv/VjhRO8+FEzrmoENffnZp38J04Al0Wq+gbylPqAqRAgBKu2QfFLdpt1OMv 6n0C7J4YRarI9LO/PBfe3cWj09GIydY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:30 2024 by rpki-client on console-fra.rpki-client.org