$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa File: 2340e8a8-1dd4-36c3-827c-cb73821dd396.roa (raw, json) Hash identifier: 3gQDB/59cCr5HwlGVNCu6NRK/Gpc92/jdhj9uvVwtDs= Subject key identifier: C7:86:2E:29:45:F9:EE:03:E5:B5:9C:ED:EA:45:13:9F:54:D8:F6:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649CCF22CE5C2A0DF4B200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 99.199.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9c:cf:22:ce:5c:2a:0d:f4:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=517587f0-b7ac-4a6c-92aa-5f6b1410855e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:af:2b:83:b9:8d:4b:4c:69:92:bc:1e:3a: 22:f5:3f:cd:a0:32:a8:fd:45:bb:33:c6:73:f2:7f: af:ff:37:36:fd:93:12:9d:34:7e:fc:cc:7a:e5:69: 9a:b6:8c:02:b5:cb:c4:b8:02:5d:bc:9b:3d:d6:1e: 1f:bd:f9:9f:db:e4:05:d2:b3:aa:c3:ae:98:d4:de: 25:aa:7e:08:82:cf:96:ca:f7:52:c2:f4:95:0c:d9: a6:0b:6b:c4:d1:53:16:32:4b:d5:0b:41:65:0f:b7: 17:d5:da:6e:80:83:7a:a2:4c:05:4d:34:97:9b:6f: b9:b2:8c:49:79:c1:c2:24:12:1d:aa:af:a2:b2:2d: 79:fa:e1:5a:b7:47:09:b4:1d:53:23:1e:d1:5b:c1: 9a:26:b8:db:58:9d:e3:7c:50:17:8d:21:b3:d3:3f: 1d:a4:9b:2c:50:d5:c5:d1:ee:df:6f:d7:a7:0f:3f: ad:23:c0:91:a0:65:90:ed:6f:87:af:cb:db:89:fa: e2:46:cd:64:f8:43:d8:69:9e:40:d5:a4:f0:43:62: e3:dc:62:62:12:f6:5e:6f:e8:89:f6:82:cf:4d:68: 17:37:3d:1f:09:af:d5:e8:85:aa:80:93:17:58:f5: 01:bc:23:ec:8d:89:40:e0:2e:0d:ab:cd:2f:52:0c: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:86:2E:29:45:F9:EE:03:E5:B5:9C:ED:EA:45:13:9F:54:D8:F6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:18:44:22:53:95:ab:bf:a0:8f:7b:da:86:39:a6:e8:ef:16: 7d:5c:b3:70:78:dc:34:24:d1:5f:68:99:29:19:1d:da:29:73: 99:26:1f:fd:84:f8:45:44:9a:65:ed:6f:e1:e2:f2:31:a5:d1: 0e:03:e1:be:48:38:9f:0d:d5:86:17:f7:9a:af:44:ca:1c:36: 37:5b:fa:7a:51:d3:d4:8b:f6:f3:1b:3b:be:81:94:6f:c6:96: eb:89:72:43:ae:a1:be:1f:19:46:3a:0c:55:87:ed:1f:e8:c1: 78:45:e1:76:8d:ce:1c:df:43:d3:d1:bc:8f:61:b6:b2:7f:4d: 9b:0b:13:1f:2d:da:ec:06:d7:aa:50:5d:aa:b2:31:40:30:97: 49:6e:b2:59:f2:50:69:ff:69:21:b2:92:91:38:04:85:8e:ef: 78:22:60:e9:3d:ee:68:79:52:fb:e3:c4:17:8e:ed:4c:f0:68: 4d:2c:59:31:2d:89:49:35:7f:b2:b6:8c:33:30:e5:a8:9d:e5: 5c:2b:b5:55:3f:8a:26:9e:1e:37:76:58:04:55:4f:ff:53:28: 6c:65:68:0a:ec:04:28:e6:1b:08:b9:eb:5d:e4:ca:45:0d:58: 90:0a:e2:49:2c:51:80:27:22:f4:15:3c:ee:f7:c1:94:83:4f: 8e:ca:44:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZJzPIs5cKg30sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NTE3NTg3ZjAtYjdhYy00YTZjLTkyYWEtNWY2YjE0MTA4NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7ivK4O5jUtMaZK8Hjoi9T/NoDKo/UW7M8Zz 8n+v/zc2/ZMSnTR+/Mx65WmatowCtcvEuAJdvJs91h4fvfmf2+QF0rOqw66Y1N4l qn4Igs+WyvdSwvSVDNmmC2vE0VMWMkvVC0FlD7cX1dpugIN6okwFTTSXm2+5soxJ ecHCJBIdqq+isi15+uFat0cJtB1TIx7RW8GaJrjbWJ3jfFAXjSGz0z8dpJssUNXF 0e7fb9enDz+tI8CRoGWQ7W+Hr8vbifriRs1k+EPYaZ5A1aTwQ2Lj3GJiEvZeb+iJ 9oLPTWgXNz0fCa/V6IWqgJMXWPUBvCPsjYlA4C4Nq80vUgxb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeGLilF+e4D5bWc7epFE59U2PaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0MGU4YTgtMWRkNC0z NmMzLTgyN2MtY2I3MzgyMWRkMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY8cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsYRCJTlau/oI972oY5pujvFn1cs3B43DQk0V9omSkZHdopc5kmH/2E +EVEmmXtb+Hi8jGl0Q4D4b5IOJ8N1YYX95qvRMocNjdb+npR09SL9vMbO76BlG/G luuJckOuob4fGUY6DFWH7R/owXhF4XaNzhzfQ9PRvI9htrJ/TZsLEx8t2uwG16pQ XaqyMUAwl0luslnyUGn/aSGykpE4BIWO73giYOk97mh5UvvjxBeO7UzwaE0sWTEt iUk1f7K2jDMw5aid5VwrtVU/iiaeHjd2WARVT/9TKGxlaArsBCjmGwi5613kykUN WJAK4kksUYAnIvQVPO73wZSDT47KRMk= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:32 2024 by rpki-client on console-ams.rpki-client.org