$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa File: 564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa (raw, json) Hash identifier: hdVrGRKyU3E3NvMNOlP31HeP+NTN9QxqLkvfu5+Wf80= Subject key identifier: 06:7A:6B:28:17:5C:68:8F:E5:C5:B2:F6:AF:95:79:9D:72:9E:CC:86 Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F43285847AE36C31F507B755EE464D600 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 132369 IP address blocks: 199.101.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:c3:1f:50:7b:75:5e:e4:64:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=1c573d28-f8af-490c-adc7-b4f06d7ffb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:29:a7:ed:9f:c7:52:53:c5:65:0f:6e:d0: 73:92:b4:24:76:e9:73:87:99:36:a7:ab:af:e7:d9: 56:09:72:35:76:13:05:db:ed:d1:67:f0:d7:72:30: 48:63:a1:82:97:40:32:f1:c8:d1:cd:4f:de:c2:50: 6d:b5:d8:43:43:e1:10:cd:d6:e9:ad:b2:af:e2:fa: 40:ad:a2:1c:98:90:e7:4c:6e:b2:26:c0:b1:3e:e2: a0:56:82:a9:75:0c:8b:d7:be:a5:6e:76:69:89:09: e1:12:5c:fe:20:36:9d:d2:58:d0:2d:a1:a2:e9:f3: e7:41:ef:6d:07:85:42:7d:d8:ae:fa:78:29:a0:ea: 24:c4:7d:36:16:5c:cd:d4:dc:40:05:f0:dd:ef:df: e8:c3:8b:34:bc:2e:8e:09:17:17:4a:9a:14:84:7f: 82:c4:f2:02:77:ed:65:62:7d:94:2d:47:1a:72:40: cc:be:24:13:70:29:71:37:de:c4:3d:3f:08:81:c7: f2:c7:2c:d0:5b:47:83:49:50:81:8b:1b:7f:89:66: 42:67:9d:a6:ea:9f:4f:4f:dc:f9:d4:bf:fd:3e:5b: 1c:53:05:e3:60:9a:30:d8:a9:6d:da:cf:0f:05:d2: 07:c4:dd:90:16:55:70:14:6e:ee:a5:45:b3:5b:b3: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:6B:28:17:5C:68:8F:E5:C5:B2:F6:AF:95:79:9D:72:9E:CC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv4: 199.101.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ca:bc:14:2d:fc:f2:27:01:e8:39:13:cf:78:2d:ca:62:55: a6:ea:cf:a5:8a:63:ec:5c:20:02:69:f1:31:c2:19:f6:aa:95: 02:64:e6:a7:f9:7b:85:62:9e:31:2e:0c:57:61:6e:9c:23:db: cc:db:d2:1c:83:bd:12:76:9b:28:17:4b:53:35:d5:a8:5f:d6: 98:6e:86:4d:e6:7c:0e:bb:e2:d0:1c:81:69:57:23:76:e7:53: dd:6e:54:39:08:60:92:12:53:06:5e:01:c9:8e:7b:1b:5e:c9: 2c:fe:41:a9:c0:4e:14:ff:7e:c9:c5:39:f1:a0:a4:e0:e6:e0: 50:7b:25:cc:66:de:f5:44:9b:97:f8:df:c8:c3:9f:c7:87:70: 1f:b8:7b:d4:2d:b2:ab:44:a4:d7:2e:71:9d:10:92:b8:2a:94: f8:32:53:e0:c2:f1:aa:2f:01:e3:ed:ff:c2:f7:07:44:6f:dd: 65:ea:95:b6:5c:ef:8b:35:1e:46:fb:2b:58:56:0b:87:3c:fa: 95:32:2a:10:52:10:93:00:f8:ee:4f:89:36:2e:41:38:98:5a: 30:17:cf:da:fc:52:14:83:a9:f9:7a:e4:bc:34:fd:aa:74:e9: 04:13:90:62:fc:fc:29:d2:e1:94:c0:bc:91:63:58:49:11:e1: bf:ac:a8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNsMfUHt1XuRk1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MWM1NzNkMjgtZjhhZi00OTBjLWFkYzctYjRmMDZkN2ZmYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWMpp+2fx1JTxWUPbtBzkrQkdulzh5k2p6uv 59lWCXI1dhMF2+3RZ/DXcjBIY6GCl0Ay8cjRzU/ewlBttdhDQ+EQzdbprbKv4vpA raIcmJDnTG6yJsCxPuKgVoKpdQyL176lbnZpiQnhElz+IDad0ljQLaGi6fPnQe9t B4VCfdiu+ngpoOokxH02FlzN1NxABfDd79/ow4s0vC6OCRcXSpoUhH+CxPICd+1l Yn2ULUcackDMviQTcClxN97EPT8IgcfyxyzQW0eDSVCBixt/iWZCZ52m6p9PT9z5 1L/9PlscUwXjYJow2Klt2s8PBdIHxN2QFlVwFG7upUWzW7N45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ6aygXXGiP5cWy9q+VeZ1ynsyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvNTY0ZGFiMzQtMzJjNy0z ZDJhLTg5YTItMGYzZTk3MGVlMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbKvBQt/PInAeg5E894LcpiVabqz6WKY+xcIAJp8THCGfaqlQJk5qf5 e4VinjEuDFdhbpwj28zb0hyDvRJ2mygXS1M11ahf1phuhk3mfA674tAcgWlXI3bn U91uVDkIYJISUwZeAcmOexteySz+QanAThT/fsnFOfGgpODm4FB7Jcxm3vVEm5f4 38jDn8eHcB+4e9QtsqtEpNcucZ0QkrgqlPgyU+DC8aovAePt/8L3B0Rv3WXqlbZc 74s1Hkb7K1hWC4c8+pUyKhBSEJMA+O5PiTYuQTiYWjAXz9r8UhSDqfl65Lw0/ap0 6QQTkGL8/CnS4ZTAvJFjWEkR4b+sqEk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:22 2024 by rpki-client on console-ams.rpki-client.org