$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa File: c683473a-1972-3ef3-bd9d-67878b86a477.roa (raw, json) Hash identifier: yCMSM0fKNc6mu9dCsuJiKfntvTfgUPgOB4Sqh8HW8go= Subject key identifier: 4E:72:52:00:C2:D4:E1:9A:BC:0E:E9:09:DA:D7:EA:42:97:C5:D1:E6 Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F432858489075F88DD68963C682F34680 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 14445 IP address blocks: 199.127.152.0/24 maxlen: 24 199.127.153.0/24 maxlen: 24 199.127.154.0/24 maxlen: 24 199.127.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jan 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f8:8d:d6:89:63:c6:82:f3:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=fc7eaa99-eed6-451d-9345-b65a5c08b90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:71:c2:2e:06:91:e9:1c:95:a6:fb:49:7d: 9e:bc:df:85:fa:10:47:1e:4b:ae:ff:1a:da:91:a0: e5:ae:1e:c2:d9:e6:49:73:16:00:b3:e8:b5:6d:89: 3f:8a:3a:b4:ce:b4:26:3b:23:12:f2:73:e2:ba:55: 8c:cd:98:f8:c5:d8:44:8c:c2:51:82:8c:06:b8:0e: b2:31:9d:1a:44:0b:47:37:64:47:75:be:9a:74:5c: 87:89:37:4d:43:e8:14:43:eb:dd:da:45:b9:d4:36: 6d:3f:e6:fa:e0:9d:48:bf:5c:88:24:41:1f:66:34: 39:ed:3c:08:ba:2f:54:76:44:a5:95:c2:c5:82:83: fc:5d:3a:43:f6:ed:35:c7:aa:e8:0a:64:8d:11:e3: 1a:73:a8:30:44:78:3f:8a:d0:0e:d7:b2:9f:e5:e5: 81:87:98:b7:c3:2a:e1:6f:73:4d:1e:2a:1f:c3:3a: 7c:34:d0:d5:e4:b6:35:85:47:89:38:3b:6d:37:86: f7:7a:9f:89:cb:0e:ba:8f:16:f5:0b:87:36:9b:c4: 20:7b:f4:23:9a:d9:09:5a:07:31:4c:42:7f:c2:d2: ce:b1:2e:c1:45:93:01:7e:57:b4:46:4b:fe:76:d9: 91:2a:6a:da:05:80:99:7d:1c:1c:06:79:dd:c0:e3: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:52:00:C2:D4:E1:9A:BC:0E:E9:09:DA:D7:EA:42:97:C5:D1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 199.127.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7f:9e:9a:ae:a3:14:a1:22:d8:7b:32:ca:f3:77:55:2b:db: 07:e4:c6:13:b9:a1:50:09:d1:fd:c2:0a:29:60:ff:65:09:87: 40:83:a6:9d:69:93:94:52:6f:4f:47:ab:ea:fc:ea:fe:11:fb: d3:22:b8:2f:64:10:0f:99:5b:01:4c:2f:57:9b:c5:2c:a0:67: 4b:16:b3:47:a4:35:17:d6:b7:7b:0b:0e:99:83:3a:21:a9:5d: 59:a7:56:0d:86:db:74:9c:89:fa:4e:85:b2:12:80:cb:77:40: 4e:5c:e0:25:26:eb:0a:3c:29:59:a3:56:fc:9b:ce:77:aa:04: a7:0b:bf:32:ca:b1:17:8e:63:45:f4:96:e4:05:51:f6:90:20: cd:dd:87:e4:db:91:68:34:41:7b:d4:52:e1:d7:fb:8d:49:9b: f3:3c:03:58:1b:64:8a:b6:e2:6e:ef:6a:23:54:c8:29:d0:e2: 38:81:65:a2:44:6b:8f:f7:8e:a0:1c:56:e7:e3:ca:3f:f4:66: 15:5b:a0:eb:13:45:07:36:07:9d:3e:07:21:3a:56:a0:fa:1c: f4:4f:f8:f6:8b:79:0a:47:db:2e:a7:3f:5d:3e:ae:73:9b:92: 1f:0c:55:2e:dc:84:98:e8:36:a0:e9:af:3f:08:71:4e:1f:76: 36:3f:2d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfiN1oljxoLzRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZmM3ZWFhOTktZWVkNi00NTFkLTkzNDUtYjY1YTVjMDhiOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNxwi4Gkekclab7SX2evN+F+hBHHkuu/xra kaDlrh7C2eZJcxYAs+i1bYk/ijq0zrQmOyMS8nPiulWMzZj4xdhEjMJRgowGuA6y MZ0aRAtHN2RHdb6adFyHiTdNQ+gUQ+vd2kW51DZtP+b64J1Iv1yIJEEfZjQ57TwI ui9UdkSllcLFgoP8XTpD9u01x6roCmSNEeMac6gwRHg/itAO17Kf5eWBh5i3wyrh b3NNHiofwzp8NNDV5LY1hUeJODttN4b3ep+Jyw66jxb1C4c2m8Qge/QjmtkJWgcx TEJ/wtLOsS7BRZMBfle0Rkv+dtmRKmraBYCZfRwcBnndwONCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5yUgDC1OGavA7pCdrX6kKXxdHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvYzY4MzQ3M2EtMTk3Mi0z ZWYzLWJkOWQtNjc4NzhiODZhNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl/npquoxShIth7Msrzd1Ur2wfkxhO5oVAJ0f3CCilg/2UJh0CDpp1p k5RSb09Hq+r86v4R+9MiuC9kEA+ZWwFML1ebxSygZ0sWs0ekNRfWt3sLDpmDOiGp XVmnVg2G23ScifpOhbISgMt3QE5c4CUm6wo8KVmjVvybzneqBKcLvzLKsReOY0X0 luQFUfaQIM3dh+TbkWg0QXvUUuHX+41Jm/M8A1gbZIq24m7vaiNUyCnQ4jiBZaJE a4/3jqAcVufjyj/0ZhVboOsTRQc2B50+ByE6VqD6HPRP+PaLeQpH2y6nP10+rnOb kh8MVS7chJjoNqDprz8IcU4fdjY/LZU= -----END CERTIFICATE-----Generated at Wed Jan 22 06:35:43 2025 by rpki-client on console-ams.rpki-client.org