$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65fb92b0-6334-3026-8a39-bb37fa487439.roa File: 65fb92b0-6334-3026-8a39-bb37fa487439.roa (raw, json) Hash identifier: XhK7mwbbI5KjwneJMoJgCKj7rsRJzJcVcv1RSSI6NJo= Subject key identifier: 21:07:F6:29:5E:C8:9E:2D:C5:B2:27:87:BB:AB:66:DA:A4:73:0C:1C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858472B6ADEDC8840FE12DA79D480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65fb92b0-6334-3026-8a39-bb37fa487439.roa Signing time: Tue 10 Sep 2024 16:35:02 +0000 ROA not before: Tue 10 Sep 2024 16:35:02 +0000 ROA not after: Mon 09 Dec 2024 17:35:02 +0000 asID: 3356 IP address blocks: 199.228.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:6a:de:dc:88:40:fe:12:da:79:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 10 16:35:02 2024 GMT Not After : Dec 9 17:35:02 2024 GMT Subject: CN=e753ccd4-5021-4add-a13a-dc66a2ae5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:66:a9:b6:81:dc:d3:9e:a1:1f:80:b7:6c: 1f:f1:56:ee:df:4b:7b:e4:aa:93:1b:b4:49:2c:7b: dd:41:f1:53:fe:03:ea:6f:41:c4:57:cb:f6:92:f0: 4c:62:a5:e9:49:f3:17:36:fa:d2:36:e8:13:df:d7: 30:d1:da:c5:be:e9:41:1c:59:65:69:be:44:69:bc: f5:81:8d:54:57:d2:32:90:54:02:6e:6c:2c:af:3b: f0:99:f2:42:aa:30:99:e6:bc:1a:68:5f:c3:24:ee: a5:f2:05:5f:48:c8:f6:c2:c7:9b:e6:44:ef:69:58: 4d:d7:93:e2:04:54:5e:52:67:9f:ca:a2:90:46:89: e5:0e:0c:5c:30:84:e8:b1:3a:3c:b6:5f:f5:79:2c: 77:9e:ab:88:f6:b1:6d:da:68:86:47:ae:04:fe:0a: 03:32:12:4d:1c:1d:27:11:1b:f7:bb:50:d1:a1:45: d3:cc:ba:94:3c:42:f4:1e:8a:8b:cc:1a:66:ae:5a: 5f:fa:62:39:19:89:d0:f6:65:37:e0:63:ee:de:e1: bd:c1:12:31:9f:2d:67:1f:d2:71:ad:75:d2:da:b0: 7c:f5:47:e0:88:a3:57:bb:e6:99:b0:c1:1e:2b:ab: ed:84:2f:7d:26:74:e4:27:65:16:47:93:48:6d:53: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:F6:29:5E:C8:9E:2D:C5:B2:27:87:BB:AB:66:DA:A4:73:0C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65fb92b0-6334-3026-8a39-bb37fa487439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 199.228.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:65:84:a5:8c:96:ba:12:e1:03:3f:c2:61:e2:b0:e1:69:41: ab:9a:32:48:f1:2f:58:6e:5b:18:1e:5a:73:ab:89:49:91:db: c2:e6:e5:6f:30:fb:db:16:ac:9c:40:6f:e2:ba:db:a5:3c:33: b5:eb:8d:23:76:3e:b9:70:04:e8:97:b0:52:63:bd:b9:8c:12: 9a:43:5e:d2:c7:39:17:f1:59:62:19:66:cb:cc:21:d0:6b:d7: 44:40:98:f4:16:89:c0:7b:b4:a7:f3:5a:99:39:70:f4:49:98: d7:5d:9b:8c:d9:79:2b:cf:9e:3a:a6:14:4d:e3:d6:4a:7d:42: 83:33:20:9d:61:72:db:0e:92:f6:fc:c3:17:f7:ac:34:e5:8f: a0:22:74:87:52:7b:d5:2c:e3:58:96:bb:4b:d9:0f:f5:40:ba: 3e:ab:47:70:81:8c:29:68:25:66:6a:72:af:15:b7:88:bd:04: 1d:76:7d:bd:a7:13:25:1b:c1:e5:3a:ed:27:a1:ca:c9:e0:c3: 9b:7f:1e:c3:00:73:99:1a:a7:77:cb:35:e8:aa:d9:87:7d:ae: 10:6b:63:00:da:fd:01:5f:17:69:2d:17:0d:c0:5c:d8:fe:e5: 45:6e:38:f8:34:d7:8b:de:d8:cc:97:b9:49:05:43:c9:76:1e: 22:09:60:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrat7ciED+Etp51IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDkxMDE2MzUwMloXDTI0MTIwOTE3MzUwMlowLzEtMCsGA1UEAxMk ZTc1M2NjZDQtNTAyMS00YWRkLWExM2EtZGM2NmEyYWU1MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrVmqbaB3NOeoR+At2wf8Vbu30t75KqTG7RJ LHvdQfFT/gPqb0HEV8v2kvBMYqXpSfMXNvrSNugT39cw0drFvulBHFllab5Eabz1 gY1UV9IykFQCbmwsrzvwmfJCqjCZ5rwaaF/DJO6l8gVfSMj2wseb5kTvaVhN15Pi BFReUmefyqKQRonlDgxcMITosTo8tl/1eSx3nquI9rFt2miGR64E/goDMhJNHB0n ERv3u1DRoUXTzLqUPEL0HoqLzBpmrlpf+mI5GYnQ9mU34GPu3uG9wRIxny1nH9Jx rXXS2rB89UfgiKNXu+aZsMEeK6vthC99JnTkJ2UWR5NIbVNSEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEH9ileyJ4txbInh7urZtqkcwwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjVmYjkyYjAtNjMzNC0z MDI2LThhMzktYmIzN2ZhNDg3NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtlhKWMlroS4QM/wmHisOFpQauaMkjxL1huWxgeWnOriUmR28Lm5W8w +9sWrJxAb+K626U8M7XrjSN2PrlwBOiXsFJjvbmMEppDXtLHORfxWWIZZsvMIdBr 10RAmPQWicB7tKfzWpk5cPRJmNddm4zZeSvPnjqmFE3j1kp9QoMzIJ1hctsOkvb8 wxf3rDTlj6AidIdSe9Us41iWu0vZD/VAuj6rR3CBjCloJWZqcq8Vt4i9BB12fb2n EyUbweU67Sehysngw5t/HsMAc5kap3fLNeiq2Yd9rhBrYwDa/QFfF2ktFw3AXNj+ 5UVuOPg014ve2MyXuUkFQ8l2HiIJYMY= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:34 2024 by rpki-client on console-ams.rpki-client.org