$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa File: e4e9881e-159c-3652-8e1f-db181f6e764b.roa (raw, json) Hash identifier: TiWkukzm6FoDgjpRI8BVEoKOyTd13ZigQ5312nTH2Oc= Subject key identifier: CB:48:64:7F:DD:2F:A2:B2:0C:6E:72:85:12:D4:99:DD:C5:87:B8:2D Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F4328584774FB8E6E65570432F26DC280 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 65224 IP address blocks: 199.212.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:8e:6e:65:57:04:32:f2:6d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=95e5d0a3-d8c8-430e-852b-0c48aa7a4bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:bb:8b:01:27:b5:87:57:af:f0:e7:a9:8f: 6a:5c:a5:11:63:ba:0f:82:07:25:2c:b9:16:40:6d: ea:26:3b:ff:72:29:e7:74:e7:2b:9e:1b:74:80:f4: 9a:32:fa:14:46:4c:7b:56:ec:b8:8b:76:7b:24:91: f4:39:c3:92:e1:85:c5:99:35:bf:53:0b:4b:7b:2f: 3b:36:f1:b8:86:9a:e1:d9:ed:fe:93:f0:6b:15:2e: ea:b1:aa:59:55:68:7c:20:3a:a4:0a:13:81:c3:55: 20:72:9a:23:be:13:fe:cf:62:00:4d:bb:03:fc:2a: 9a:d8:03:47:40:77:6d:91:34:6e:ab:a1:c8:b3:15: 31:f3:1e:99:78:6b:7e:28:2d:92:c1:af:55:fa:86: 7a:a0:61:14:87:c2:3e:d7:c1:26:41:1d:32:fc:1e: 6b:6e:d4:ee:28:3e:58:10:b5:79:89:6a:d8:8b:8c: 84:5c:a2:4b:62:c0:72:fe:30:99:52:6c:c8:ad:b5: 60:9a:e9:3d:98:07:a8:4a:c7:73:a8:e2:50:6a:b5: 94:15:3d:b2:36:ae:26:17:20:ce:70:ad:ca:89:a8: 5e:df:44:18:01:63:8b:66:33:f6:37:d6:ca:8d:0e: 92:f6:9d:92:12:3f:32:f1:d4:0b:c1:44:ea:56:c5: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:64:7F:DD:2F:A2:B2:0C:6E:72:85:12:D4:99:DD:C5:87:B8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:41:3a:04:92:9f:3a:92:62:3d:a9:89:7f:ba:1c:54:ad: 23:03:59:61:03:1e:07:cc:a2:52:d3:a1:dc:98:ad:ce:ba:20: fe:8c:35:32:e0:50:c1:c6:50:7a:92:d6:f1:68:46:85:d2:c8: ba:cf:e4:af:ad:b1:2e:f0:25:17:01:e7:82:6a:cd:93:bd:47: 31:e7:57:48:f7:8d:92:32:e3:7a:a0:fa:f2:8b:4a:25:89:0d: 57:0d:ab:e0:2e:4c:3b:fb:a0:e6:a9:91:b9:20:b8:8f:06:98: d1:36:e5:6c:ff:93:70:9f:e5:94:7b:af:d5:6c:02:15:2a:31: 8d:3e:43:e9:41:78:e9:7a:e0:03:34:bc:96:bb:bb:71:97:15: f6:d4:37:36:20:71:1c:b8:ae:17:9f:ed:88:c2:22:72:c4:35: 62:cd:4e:7c:63:4a:6e:0f:28:b6:15:5f:08:c6:fa:2b:66:b7: 00:f9:70:70:c7:45:7f:9a:1d:df:13:14:e4:f5:5a:fb:20:12: f6:2c:6e:53:6e:3a:9d:ab:55:37:5f:54:e3:ca:8e:a2:4a:94: e7:57:a3:21:9e:68:e5:57:83:1c:26:32:3e:45:45:7d:8e:5b: 45:0e:63:90:49:07:94:7d:8e:a9:74:ad:e0:f8:28:d1:af:92: 39:dd:a6:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+45uZVcEMvJtwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk OTVlNWQwYTMtZDhjOC00MzBlLTg1MmItMGM0OGFhN2E0YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQW7iwEntYdXr/DnqY9qXKURY7oPggclLLkW QG3qJjv/cinndOcrnht0gPSaMvoURkx7Vuy4i3Z7JJH0OcOS4YXFmTW/UwtLey87 NvG4hprh2e3+k/BrFS7qsapZVWh8IDqkChOBw1UgcpojvhP+z2IATbsD/Cqa2ANH QHdtkTRuq6HIsxUx8x6ZeGt+KC2Swa9V+oZ6oGEUh8I+18EmQR0y/B5rbtTuKD5Y ELV5iWrYi4yEXKJLYsBy/jCZUmzIrbVgmuk9mAeoSsdzqOJQarWUFT2yNq4mFyDO cK3Kiahe30QYAWOLZjP2N9bKjQ6S9p2SEj8y8dQLwUTqVsW0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtIZH/dL6KyDG5yhRLUmd3Fh7gtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvZTRlOTg4MWUtMTU5Yy0z NjUyLThlMWYtZGIxODFmNmU3NjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9T+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIHQToEkp86kmI9qYl/uhxUrSMDWWEDHgfMolLTodyYrc66IP6MNTLg UMHGUHqS1vFoRoXSyLrP5K+tsS7wJRcB54JqzZO9RzHnV0j3jZIy43qg+vKLSiWJ DVcNq+AuTDv7oOapkbkguI8GmNE25Wz/k3Cf5ZR7r9VsAhUqMY0+Q+lBeOl64AM0 vJa7u3GXFfbUNzYgcRy4rhef7YjCInLENWLNTnxjSm4PKLYVXwjG+itmtwD5cHDH RX+aHd8TFOT1WvsgEvYsblNuOp2rVTdfVOPKjqJKlOdXoyGeaOVXgxwmMj5FRX2O W0UOY5BJB5R9jql0reD4KNGvkjndpmI= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:04 2024 by rpki-client on console-ams.rpki-client.org