$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa File: 2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json) Hash identifier: 8EQZHcQoYm1fCCGyhBk2GESPyxCN3iaQqYKyVBAmU+o= Subject key identifier: AC:55:32:E8:9E:93:4C:19:8A:DE:AF:DB:17:24:75:23:30:17:BE:31 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F43285847BAC6AE8BEBFC5248508A43F0 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 396982 IP address blocks: 199.47.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:ae:8b:eb:fc:52:48:50:8a:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=b782e1f4-7d14-4776-9282-c3fbfc007a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f9:76:47:65:c5:b6:2f:88:72:e1:a3:44:cc: 2e:e0:f2:bd:d1:19:fe:29:e8:ad:77:db:5b:15:b6: bb:a9:ad:e7:b1:82:ec:fd:09:e2:b2:4f:1e:b1:de: c6:0b:c4:5b:35:9a:e5:01:c9:ad:c0:ad:e4:fc:43: ca:c1:9d:46:57:f6:91:45:5e:95:f2:07:28:5a:b7: 31:40:e6:ee:a8:db:df:2c:d5:bd:8f:72:90:5b:09: 1f:32:7d:1b:29:3d:b9:7b:27:88:e3:77:11:80:1d: ee:45:f1:4d:c4:07:1d:a0:9f:ab:46:52:58:a3:fb: 4e:aa:bd:bb:9f:bc:b5:3f:b7:45:36:5d:a3:4c:57: ae:35:8e:cb:a9:d2:b3:a7:e9:98:f2:a1:05:6e:be: a8:38:41:8f:90:81:18:21:16:31:f0:02:bb:ab:22: 2b:16:c2:cb:14:5c:29:04:d5:f8:d5:38:e6:68:3f: 1d:0b:2e:e6:a5:eb:39:fe:12:e9:13:2d:57:60:99: 12:ae:bd:8f:9a:04:cc:f1:e1:42:a0:4d:a7:67:20: 54:03:28:35:0c:39:60:ad:6b:d4:81:be:3d:67:7c: 39:78:b1:61:fd:32:52:bd:07:ca:f6:1a:2a:bb:64: 5b:2e:76:55:2e:7b:22:80:84:79:1c:42:0a:99:07: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:32:E8:9E:93:4C:19:8A:DE:AF:DB:17:24:75:23:30:17:BE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e2:ce:33:1a:f2:5c:4d:1c:ac:70:d5:67:60:56:16:a5:e5: 22:77:a6:41:63:36:07:31:ff:5d:c8:fc:6e:72:0f:c4:e0:3c: d2:40:3e:e9:33:20:62:6b:87:11:5e:17:a5:8a:30:e6:74:b0: ce:cb:bd:96:1f:b3:f4:48:05:3b:dd:80:d9:da:84:dd:cb:56: 82:18:ba:32:93:43:e6:1a:03:cd:e8:12:6b:07:df:4a:87:cc: c2:35:12:37:63:d8:9f:fb:a7:3a:41:85:4a:78:8e:44:c2:95: 39:54:23:be:5d:be:38:cc:b7:c5:76:8f:d5:61:a2:67:b8:38: cd:3b:a3:61:05:31:0a:08:53:93:0a:ca:74:8e:06:fb:fe:cf: 91:6d:cd:eb:fd:9c:09:ad:f3:85:d2:35:6d:23:06:42:d8:ee: 8b:8d:9d:c9:75:02:d8:c2:fa:e7:32:47:d9:78:fc:44:72:8f: 88:05:42:01:f9:57:37:51:b3:6e:ff:86:94:9b:24:8f:c4:7e: c2:27:83:24:2c:3e:d4:c6:0b:0c:63:33:96:9b:2c:d7:33:06: c3:b1:7f:43:27:10:f1:b5:ff:b5:25:00:fe:fc:24:c9:d5:94: 36:65:00:b6:cb:52:ec:69:3e:68:df:98:e1:7e:20:d3:1e:84: 8c:a6:06:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xq6L6/xSSFCKQ/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk Yjc4MmUxZjQtN2QxNC00Nzc2LTkyODItYzNmYmZjMDA3YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPl2R2XFti+IcuGjRMwu4PK90Rn+Keitd9tb Fba7qa3nsYLs/Qnisk8esd7GC8RbNZrlAcmtwK3k/EPKwZ1GV/aRRV6V8gcoWrcx QObuqNvfLNW9j3KQWwkfMn0bKT25eyeI43cRgB3uRfFNxAcdoJ+rRlJYo/tOqr27 n7y1P7dFNl2jTFeuNY7LqdKzp+mY8qEFbr6oOEGPkIEYIRYx8AK7qyIrFsLLFFwp BNX41TjmaD8dCy7mpes5/hLpEy1XYJkSrr2PmgTM8eFCoE2nZyBUAyg1DDlgrWvU gb49Z3w5eLFh/TJSvQfK9hoqu2RbLnZVLnsigIR5HEIKmQd0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxVMuiek0wZit6v2xckdSMwF74xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMmQ5ZDMzMjEtZGI5Zi0z MDZjLTkyMjgtYWUwNmJlNGRlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvizjMa8lxNHKxw1WdgVhal5SJ3pkFjNgcx/13I/G5yD8TgPNJAPukz IGJrhxFeF6WKMOZ0sM7LvZYfs/RIBTvdgNnahN3LVoIYujKTQ+YaA83oEmsH30qH zMI1Ejdj2J/7pzpBhUp4jkTClTlUI75dvjjMt8V2j9Vhome4OM07o2EFMQoIU5MK ynSOBvv+z5Ftzev9nAmt84XSNW0jBkLY7ouNncl1AtjC+ucyR9l4/ERyj4gFQgH5 VzdRs27/hpSbJI/EfsIngyQsPtTGCwxjM5abLNczBsOxf0MnEPG1/7UlAP78JMnV lDZlALbLUuxpPmjfmOF+INMehIymBno= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:23 2024 by rpki-client on console-ams.rpki-client.org