$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa File: 2333bb4d-aed0-3541-ac64-280756dc7070.roa (raw, json) Hash identifier: GzSRUZrDfwxZkuBQct3TkLphdhigZHrAJnITVoAtTpA= Subject key identifier: ED:91:C0:2F:E9:00:6D:91:AD:72:7E:42:20:DB:00:D3:51:B1:79:1D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CAE7A94DBD3DEAFFFF7C5B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa Signing time: Wed 06 Nov 2024 19:40:00 +0000 ROA not before: Wed 06 Nov 2024 19:40:00 +0000 ROA not after: Tue 04 Feb 2025 19:40:00 +0000 asID: 203 IP address blocks: 199.228.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:e7:a9:4d:bd:3d:ea:ff:ff:7c:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 19:40:00 2024 GMT Not After : Feb 4 19:40:00 2025 GMT Subject: CN=7587590a-ff22-4b82-bb63-ad137774a250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:db:30:cd:13:de:dc:f5:77:41:24:cd:a9: d3:ac:24:37:19:a3:db:ce:ea:4d:21:1b:a4:ec:70: bc:1d:b0:aa:fb:7b:db:61:0e:67:ac:e0:7a:b1:b3: b3:dc:42:9a:e0:6c:fa:8c:48:51:68:7e:b9:c9:03: 24:bd:59:52:59:57:16:a6:69:9b:9d:dd:2a:9a:24: 28:53:e5:43:5a:cb:e2:5d:b8:7c:7c:1d:b1:53:6e: eb:6f:27:83:bf:94:ef:84:84:bc:ec:6f:1c:d5:02: 81:87:0e:51:9b:fd:88:d4:3c:fb:65:75:dd:f8:b2: 30:bf:9d:a7:58:9a:69:03:68:13:d1:d8:40:02:9a: a1:e7:ba:1c:4a:48:47:71:ba:f5:90:a9:66:15:c0: e5:2d:04:9f:e9:ee:dd:34:fa:eb:00:40:51:57:31: 38:9d:b5:96:6b:8b:d4:a4:c1:9e:de:68:82:44:74: c1:1e:59:5b:c7:24:76:2d:64:21:a9:1c:54:0c:2c: 27:36:86:7a:14:4c:46:03:7e:85:ee:70:26:42:76: 05:08:43:03:7d:44:83:e1:43:4c:29:2a:4b:22:d3: f9:57:ff:57:3c:7a:42:27:32:d2:26:26:1b:93:59: 79:7c:92:b9:cb:7d:01:eb:0e:cb:a7:79:8c:1a:ac: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:91:C0:2F:E9:00:6D:91:AD:72:7E:42:20:DB:00:D3:51:B1:79:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2333bb4d-aed0-3541-ac64-280756dc7070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b0:a2:4a:e3:2c:6b:e9:a8:cb:c0:36:8b:ae:27:33:42:e3: a0:d3:37:93:b3:21:cb:a7:dd:5a:56:1b:be:96:88:fe:02:39: 9e:bb:78:5c:0c:6e:b4:13:64:44:8e:6c:b9:db:33:b3:29:32: a0:4c:6c:48:a6:ca:04:f9:a7:40:78:ce:6e:60:3c:53:97:ad: 6f:75:47:ee:88:2e:69:35:3d:39:97:82:48:72:f9:7e:38:48: da:a9:4c:2e:b4:af:71:d2:43:df:22:91:0d:be:59:95:8e:92: 93:8f:78:2f:91:70:f2:2e:77:3d:64:2e:22:7a:b8:80:67:92: 15:5a:81:bc:39:62:4f:57:b5:56:94:a3:e4:53:d3:e9:76:dd: 1a:97:13:bd:46:44:da:b5:e4:89:b0:05:bd:b9:57:bd:69:9b: 3e:a9:59:5d:09:6f:c7:66:28:5d:0a:d4:e4:5f:f1:e4:90:52: 89:00:3c:d8:ce:e1:47:ba:18:ea:e5:55:32:90:86:70:da:7d: 8f:b1:42:17:e7:2e:d1:d4:9b:21:63:eb:0b:9a:5d:05:75:d0: 56:43:04:67:e1:00:d3:14:60:f2:8a:98:b5:5b:19:4c:e5:41: 30:95:89:76:03:81:d1:33:e0:cd:4c:f0:d5:7d:88:3e:ff:e8: 28:69:1b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfK56lNvT3q//98W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE5NDAwMFoXDTI1MDIwNDE5NDAwMFowLzEtMCsGA1UEAxMk NzU4NzU5MGEtZmYyMi00YjgyLWJiNjMtYWQxMzc3NzRhMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/LbMM0T3tz1d0EkzanTrCQ3GaPbzupNIRuk 7HC8HbCq+3vbYQ5nrOB6sbOz3EKa4Gz6jEhRaH65yQMkvVlSWVcWpmmbnd0qmiQo U+VDWsviXbh8fB2xU27rbyeDv5TvhIS87G8c1QKBhw5Rm/2I1Dz7ZXXd+LIwv52n WJppA2gT0dhAApqh57ocSkhHcbr1kKlmFcDlLQSf6e7dNPrrAEBRVzE4nbWWa4vU pMGe3miCRHTBHllbxyR2LWQhqRxUDCwnNoZ6FExGA36F7nAmQnYFCEMDfUSD4UNM KSpLItP5V/9XPHpCJzLSJiYbk1l5fJK5y30B6w7Lp3mMGqxU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2RwC/pAG2RrXJ+QiDbANNRsXkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjMzM2JiNGQtYWVkMC0z NTQxLWFjNjQtMjgwNzU2ZGM3MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+Q9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6wokrjLGvpqMvANouuJzNC46DTN5OzIcun3VpWG76WiP4COZ67eFwM brQTZESObLnbM7MpMqBMbEimygT5p0B4zm5gPFOXrW91R+6ILmk1PTmXgkhy+X44 SNqpTC60r3HSQ98ikQ2+WZWOkpOPeC+RcPIudz1kLiJ6uIBnkhVagbw5Yk9XtVaU o+RT0+l23RqXE71GRNq15ImwBb25V71pmz6pWV0Jb8dmKF0K1ORf8eSQUokAPNjO 4Ue6GOrlVTKQhnDafY+xQhfnLtHUmyFj6wuaXQV10FZDBGfhANMUYPKKmLVbGUzl QTCViXYDgdEz4M1M8NV9iD7/6ChpG0E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:43 2024 by rpki-client on console-ams.rpki-client.org