$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa File: df896777-0cda-39a9-97db-ae2acb4b9785.roa (raw, json) Hash identifier: 1+dZrYSuRQuPO0A6DNr+9CnT0vdmzFT6+qfU8j5AalI= Subject key identifier: 33:38:FA:8E:4A:F1:F5:C0:47:28:E7:C7:9A:DD:73:8C:4F:38:3A:04 Certificate issuer: /CN=4dfb879f-7966-496a-b35e-d766981846ee Certificate serial: 010D0C9F43285847B10164FA86B5A9F55AFC1A80 Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 271 IP address blocks: 199.60.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:64:fa:86:b5:a9:f5:5a:fc:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=56571d9f-0be0-41be-8da0-6cdbaaf93176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:8e:60:9a:62:4a:b0:af:21:36:4f:c7:03: a5:c4:e5:86:72:77:ac:32:b3:e9:0a:5a:87:41:9f: 8c:ae:0b:09:0e:c5:14:85:c9:e7:3f:b0:be:c2:02: e1:23:30:7b:c1:c3:25:45:35:46:96:74:0c:9d:5d: 6e:fd:85:b2:b4:bb:4d:6b:7c:73:1d:73:da:a2:fb: 70:b6:39:71:14:0f:62:05:c3:ef:12:33:f2:85:9b: 4c:f3:e7:30:75:72:28:be:51:36:46:ad:d3:4f:7c: 0c:ee:5a:65:ed:e9:c1:b9:99:68:c5:65:3c:7d:ba: 11:3c:55:67:bb:58:23:91:43:ac:4e:31:10:b9:a2: 34:fd:de:c3:4b:b8:a3:d9:fc:b5:0f:e4:b3:74:f3: 6e:6a:53:f9:c0:9b:89:50:59:d6:be:3a:ed:1f:da: 52:5c:9b:93:02:94:f8:3b:c5:b3:20:c9:8c:24:94: 8d:f1:db:ef:7f:b1:5b:05:59:38:4d:a7:ae:19:97: 03:91:e0:80:c7:c1:10:a5:cc:cf:c9:0b:6b:1d:16: 7d:3f:80:5e:7e:f3:9f:2a:84:67:86:9d:6c:97:1a: 16:2b:49:63:fa:57:d1:7b:50:06:38:b7:dd:08:2f: 78:43:61:9f:e1:e9:41:d9:fb:69:d4:ea:d3:e4:55: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:FA:8E:4A:F1:F5:C0:47:28:E7:C7:9A:DD:73:8C:4F:38:3A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/df896777-0cda-39a9-97db-ae2acb4b9785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl X509v3 Authority Key Identifier: keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer sbgp-ipAddrBlock: critical IPv4: 199.60.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:62:f8:2c:ee:7c:13:3f:6d:74:1e:73:a5:35:ef:29:8e:da: 3f:50:b9:88:a3:d4:88:34:e2:8d:e0:7f:da:6b:23:a0:31:14: a2:f9:74:23:56:19:4b:eb:65:56:de:f9:8d:cf:b1:cf:d9:04: 8c:0d:e5:ea:0c:b0:b3:9c:2c:73:40:43:ae:56:55:92:7c:c8: b3:83:9b:0e:40:bd:ff:32:0f:fb:b7:71:f4:6a:f8:c3:3a:b3: a4:a9:ee:c7:aa:69:a7:43:33:eb:2e:b2:bd:c9:f4:07:f0:b7: 93:02:73:1d:a3:a7:2b:a8:65:ca:8b:07:2b:d8:83:d6:1e:c6: 64:af:b8:ce:43:ac:1d:4e:c7:9e:f5:60:cb:40:13:52:62:53: 67:52:44:8d:aa:e4:85:34:00:92:f7:f1:b2:d4:bd:85:3f:e3: 35:66:51:35:08:96:77:5a:c8:e0:0c:8d:ae:4f:73:00:3e:19: 77:a4:31:4d:ff:9d:cb:b5:5d:11:bc:a9:8f:6e:0d:63:55:a0: 88:a4:15:44:3d:d3:2b:5e:bb:bd:2b:0b:dd:db:2e:2d:7f:23: a8:73:47:e9:0b:57:c8:3d:26:c9:c7:08:49:df:74:72:93:80: 53:12:b8:0f:65:af:60:fc:a3:6c:5a:16:79:a4:6c:0e:ee:89: 45:63:ad:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWT6hrWp9Vr8GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0 NmVlMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NTY1NzFkOWYtMGJlMC00MWJlLThkYTAtNmNkYmFhZjkzMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjiOYJpiSrCvITZPxwOlxOWGcnesMrPpClqH QZ+MrgsJDsUUhcnnP7C+wgLhIzB7wcMlRTVGlnQMnV1u/YWytLtNa3xzHXPaovtw tjlxFA9iBcPvEjPyhZtM8+cwdXIovlE2Rq3TT3wM7lpl7enBuZloxWU8fboRPFVn u1gjkUOsTjEQuaI0/d7DS7ij2fy1D+SzdPNualP5wJuJUFnWvjrtH9pSXJuTApT4 O8WzIMmMJJSN8dvvf7FbBVk4TaeuGZcDkeCAx8EQpczPyQtrHRZ9P4BefvOfKoRn hp1slxoWK0lj+lfRe1AGOLfdCC94Q2Gf4elB2ftp1OrT5FWPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM4+o5K8fXARyjnx5rdc4xPODoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZi ODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvZGY4OTY3NzctMGNkYS0z OWE5LTk3ZGItYWUyYWNiNGI5Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGRmYjg3OWYtNzk2Ni00OTZhLWIz NWUtZDc2Njk4MTg0NmVlLzRkZmI4NzlmLTc5NjYtNDk2YS1iMzVlLWQ3NjY5ODE4 NDZlZS5jcmwwHwYDVR0jBBgwFoAUR6CJkWx/R1P7uCj/Q02WxQ8CpR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2 OTgxODQ2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzx3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFi+CzufBM/bXQec6U17ymO2j9QuYij1Ig04o3gf9prI6AxFKL5dCNW GUvrZVbe+Y3Psc/ZBIwN5eoMsLOcLHNAQ65WVZJ8yLODmw5Avf8yD/u3cfRq+MM6 s6Sp7seqaadDM+susr3J9Afwt5MCcx2jpyuoZcqLByvYg9YexmSvuM5DrB1Ox571 YMtAE1JiU2dSRI2q5IU0AJL38bLUvYU/4zVmUTUIlndayOAMja5PcwA+GXekMU3/ ncu1XRG8qY9uDWNVoIikFUQ90yteu70rC93bLi1/I6hzR+kLV8g9JsnHCEnfdHKT gFMSuA9lr2D8o2xaFnmkbA7uiUVjrbo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org