$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa File: 8c609069-4384-3695-9ac5-2533f2d92953.roa (raw, json) Hash identifier: OEau+sivlsQJt7vwx0fIYnAINF7BkOOU2cWBmWsVdt8= Subject key identifier: CE:D1:DE:69:A3:6C:C3:0A:B5:9C:6B:57:DB:E5:15:70:7E:CD:A3:9E Certificate issuer: /CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Certificate serial: 010D0C9F432858479D76BCCDE908863417E75080 Authority key identifier: 9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 46523 IP address blocks: 199.38.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:bc:cd:e9:08:86:34:17:e7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=cbcdb4f9-0287-4f08-b3e2-d46fedb1cb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:01:83:54:0c:e5:2a:1a:23:6c:85:0c:9e: ba:0f:e8:b3:9f:96:4e:fb:fa:08:01:b8:02:bd:a2: 1a:17:68:75:90:e2:f0:b0:81:51:6e:b3:82:9d:df: e4:aa:33:c2:cc:8e:4d:34:63:e3:1d:06:97:8c:a8: d8:e3:8a:7d:f0:82:27:06:29:14:26:13:48:d2:af: 3b:2c:b0:8f:eb:54:d5:72:cd:63:fc:d2:c7:04:94: c0:ed:0d:90:f1:f6:63:a4:1e:c4:75:c8:d1:96:c8: 1d:11:2e:7c:7d:62:cc:58:70:27:60:e3:2c:ff:67: c6:fd:79:c1:52:c8:28:42:8c:34:59:97:cd:7f:8e: 5e:58:b2:96:7e:e4:f1:7b:f8:78:94:b2:96:50:e5: ac:da:58:cd:5f:20:a8:0e:37:31:e5:62:23:d6:dd: 90:0d:27:80:42:24:c7:bf:96:81:67:b3:8c:d4:bb: 85:0d:2e:36:6b:dd:47:00:21:88:5b:cf:1d:23:12: 0b:e7:e3:56:3d:ad:d8:fe:a5:c0:14:cc:4f:0d:ce: af:e9:4b:97:10:7e:11:1c:fb:cf:34:6d:fd:b2:9a: 39:06:e6:23:08:93:ba:3e:e6:36:70:a9:b2:b4:ae: d2:45:f7:fe:7d:18:5d:6a:22:fd:69:6a:21:69:b8: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:DE:69:A3:6C:C3:0A:B5:9C:6B:57:DB:E5:15:70:7E:CD:A3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl X509v3 Authority Key Identifier: keyid:9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a6:4d:ba:17:8d:36:47:ca:aa:a9:ea:f9:d7:88:6b:af:19: de:b7:62:ed:83:09:28:24:a9:ea:7f:36:82:9b:34:81:72:3b: b6:23:a2:dc:fa:48:06:86:7d:25:69:80:53:c2:01:b5:26:3b: 75:86:8e:93:9a:66:19:5d:9a:e9:66:8c:9b:e9:4a:04:ed:08: dd:20:89:a2:c6:a9:cb:a8:d9:c6:9a:75:33:da:27:bf:9a:43: 95:dd:b9:b7:3d:4a:24:70:16:94:b3:7e:29:07:43:23:9a:12: cf:a7:99:44:85:ff:d6:a3:6d:2b:35:2c:64:34:73:a2:20:e4: 25:1d:74:d0:42:13:13:c0:48:47:48:dc:15:ba:ec:0b:ba:fe: 49:97:b8:40:2c:09:16:de:0f:b7:83:02:3f:99:1e:04:1b:ff: 75:12:ca:ec:7f:57:fc:7e:b8:08:b2:5c:ce:b7:1c:6e:0b:53: 36:60:e5:86:27:85:5f:2d:84:7a:8e:cc:70:d5:82:02:6c:91: d9:d3:fe:77:17:1a:6a:9a:2c:91:75:77:7d:80:06:b7:3a:9f: 5d:b9:05:b2:21:06:04:98:6a:0a:9c:37:da:f4:42:d2:1e:36: 21:1e:7a:56:87:a0:34:53:f1:f0:f8:bd:88:00:65:21:19:21: 82:a8:f1:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrzN6QiGNBfnUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhZjdjMmItNTQ0Zi00NjM5LWE2YWQtNGIwYmFjOTI2 YWI4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2JjZGI0ZjktMDI4Ny00ZjA4LWIzZTItZDQ2ZmVkYjFjYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotwBg1QM5SoaI2yFDJ66D+izn5ZO+/oIAbgC vaIaF2h1kOLwsIFRbrOCnd/kqjPCzI5NNGPjHQaXjKjY44p98IInBikUJhNI0q87 LLCP61TVcs1j/NLHBJTA7Q2Q8fZjpB7EdcjRlsgdES58fWLMWHAnYOMs/2fG/XnB UsgoQow0WZfNf45eWLKWfuTxe/h4lLKWUOWs2ljNXyCoDjcx5WIj1t2QDSeAQiTH v5aBZ7OM1LuFDS42a91HACGIW88dIxIL5+NWPa3Y/qXAFMxPDc6v6UuXEH4RHPvP NG39spo5BuYjCJO6PuY2cKmytK7SRff+fRhdaiL9aWohabhedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7R3mmjbMMKtZxrV9vlFXB+zaOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFm N2MyYi01NDRmLTQ2MzktYTZhZC00YjBiYWM5MjZhYjgvOGM2MDkwNjktNDM4NC0z Njk1LTlhYzUtMjUzM2YyZDkyOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2VhZjdjMmItNTQ0Zi00NjM5LWE2 YWQtNGIwYmFjOTI2YWI4L2NlYWY3YzJiLTU0NGYtNDYzOS1hNmFkLTRiMGJhYzky NmFiOC5jcmwwHwYDVR0jBBgwFoAUnzDP6hvHVKhRXeOZauFQ8yUbmcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFmN2MyYi01NDRmLTQ2MzktYTZhZC00YjBi YWM5MjZhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGmTboXjTZHyqqp6vnXiGuvGd63Yu2DCSgkqep/NoKbNIFyO7Yjotz6 SAaGfSVpgFPCAbUmO3WGjpOaZhldmulmjJvpSgTtCN0giaLGqcuo2caadTPaJ7+a Q5Xdubc9SiRwFpSzfikHQyOaEs+nmUSF/9ajbSs1LGQ0c6Ig5CUddNBCExPASEdI 3BW67Au6/kmXuEAsCRbeD7eDAj+ZHgQb/3USyux/V/x+uAiyXM63HG4LUzZg5YYn hV8thHqOzHDVggJskdnT/ncXGmqaLJF1d32ABrc6n125BbIhBgSYagqcN9r0QtIe NiEeelaHoDRT8fD4vYgAZSEZIYKo8dQ= -----END CERTIFICATE-----Generated at Sun Nov 24 18:39:50 2024 by rpki-client on console-fra.rpki-client.org