$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: koek8UuiTHkdNRu18eUjFiZAFjC90IhVTvGk+5pXYGg= Subject key identifier: 12:7F:88:31:A3:51:E3:B8:39:05:1D:84:8C:D8:5A:C1:26:57:CD:CB Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F432858473FF091D425636DDF97CC6B20 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:91:d4:25:63:6d:df:97:cc:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=6135c987-8ebd-4e04-9d78-6be2b20c834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:60:a0:47:46:7d:f8:09:d4:c3:cc:07:a1: 68:25:cf:69:04:c9:63:10:05:49:6d:70:a8:d5:fe: 27:33:08:1b:91:fb:c7:2a:54:13:c3:6a:4c:b2:5a: cc:0a:9e:ee:51:66:94:cd:bb:8b:16:e6:33:38:71: 35:7a:80:d3:2a:82:63:19:83:f1:09:c1:23:bc:9a: 0a:68:f4:39:51:75:7a:34:99:ce:d6:0e:00:95:a2: 75:ce:e8:c8:f4:f0:9c:6a:02:eb:00:52:b8:5f:21: b1:67:4c:a0:46:8d:85:8d:d1:9f:01:57:38:45:79: 05:df:af:c1:44:54:76:37:b5:8d:89:3d:39:41:71: 9d:57:7c:0d:49:44:61:39:29:f1:be:17:7a:7e:a3: 63:b5:70:bb:94:65:fa:ea:2c:7d:69:6e:20:86:49: 3a:a9:d0:7f:b3:dd:66:89:a5:15:64:1f:eb:32:21: 56:f1:2d:62:32:7d:fa:be:f5:b8:53:f3:e5:03:c6: 0b:33:06:24:50:d1:29:92:c7:b2:b1:3f:9e:6b:86: 1d:b4:ae:41:3a:cc:7b:05:02:37:cd:0f:bc:f5:5e: ad:1b:19:3d:55:a6:b3:ae:20:c8:79:8e:32:3b:26: b6:1e:77:94:99:92:be:d1:10:fd:c3:31:eb:28:11: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7F:88:31:A3:51:E3:B8:39:05:1D:84:8C:D8:5A:C1:26:57:CD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a7:e3:e7:91:9c:42:59:82:97:aa:d8:85:90:4d:51:29:07: 20:41:97:f5:77:e2:73:e9:0f:59:b0:ff:8a:74:87:1e:8f:73: bc:e7:95:0e:1c:af:2e:09:43:ae:ff:63:40:b8:0e:47:9a:18: 58:97:80:5a:19:29:a4:ab:2d:7c:c0:a8:b3:26:9c:da:78:04: 05:c0:4d:a4:40:ec:61:fe:30:2d:bc:b5:6a:27:92:f8:cc:fc: d5:04:75:a1:93:66:fb:15:b6:ed:3f:d2:72:d2:c8:ee:01:66: 04:4a:de:40:c4:4b:68:ca:d9:36:8f:8d:2e:f5:ec:a1:91:f1: 9d:b7:59:18:57:63:35:9b:e4:fc:f8:22:73:7b:43:b0:35:8c: e5:1f:ad:85:90:7b:17:0b:0a:fd:bc:81:1f:7c:11:83:c8:d8: 5f:2a:0b:94:96:68:e2:01:4d:a1:8c:f1:fa:e8:00:a9:50:2c: 74:18:1b:1c:d3:c3:a3:f3:e0:82:0e:bf:39:ee:91:62:ac:76: fa:39:45:7b:68:b7:a3:76:bf:29:15:0d:a8:3e:d8:b8:83:87: 16:97:c1:30:6e:a8:af:48:aa:3d:25:68:5a:67:75:5d:38:30: a1:b5:f7:a7:4e:bf:30:71:7e:bb:4e:17:17:db:36:d0:26:4a: 88:25:1e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8JHUJWNt35fMayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NjEzNWM5ODctOGViZC00ZTA0LTlkNzgtNmJlMmIyMGM4MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK5goEdGffgJ1MPMB6FoJc9pBMljEAVJbXCo 1f4nMwgbkfvHKlQTw2pMslrMCp7uUWaUzbuLFuYzOHE1eoDTKoJjGYPxCcEjvJoK aPQ5UXV6NJnO1g4AlaJ1zujI9PCcagLrAFK4XyGxZ0ygRo2FjdGfAVc4RXkF36/B RFR2N7WNiT05QXGdV3wNSURhOSnxvhd6fqNjtXC7lGX66ix9aW4ghkk6qdB/s91m iaUVZB/rMiFW8S1iMn36vvW4U/PlA8YLMwYkUNEpkseysT+ea4YdtK5BOsx7BQI3 zQ+89V6tGxk9VaazriDIeY4yOya2HneUmZK+0RD9wzHrKBFYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ/iDGjUeO4OQUdhIzYWsEmV83LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOn4+eRnEJZgpeq2IWQTVEpByBBl/V34nPpD1mw/4p0hx6Pc7znlQ4c ry4JQ67/Y0C4DkeaGFiXgFoZKaSrLXzAqLMmnNp4BAXATaRA7GH+MC28tWonkvjM /NUEdaGTZvsVtu0/0nLSyO4BZgRK3kDES2jK2TaPjS717KGR8Z23WRhXYzWb5Pz4 InN7Q7A1jOUfrYWQexcLCv28gR98EYPI2F8qC5SWaOIBTaGM8froAKlQLHQYGxzT w6Pz4IIOvznukWKsdvo5RXtot6N2vykVDag+2LiDhxaXwTBuqK9Iqj0laFpndV04 MKG196dOvzBxfrtOFxfbNtAmSoglHv0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org