$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json) Hash identifier: RqIsstmjfLR3au5y7ZV4/uOzbxtR8oY9d8+xwqvgqGA= Subject key identifier: 80:2F:0C:49:07:89:AB:37:8A:8D:5D:14:4B:79:65:33:D1:EC:99:76 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584754E0D11DBF1535936E17DEA0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 32181 IP address blocks: 199.168.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:d1:1d:bf:15:35:93:6e:17:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=fe47bbd4-ae15-4ceb-946d-4df0864740dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:cb:86:af:78:12:6a:9b:74:24:92:b5:cc: ef:40:d2:da:c6:50:e2:7e:23:b7:45:fe:31:ff:d9: 68:68:ab:5e:f9:4e:52:11:b1:71:88:cb:d4:ce:e5: da:72:df:63:bc:6a:89:2a:d9:db:b3:eb:a5:bb:fb: 91:fd:e5:34:a1:17:87:05:79:b2:d7:3d:9d:eb:ac: 24:32:03:a7:c3:83:fe:00:be:43:13:54:70:2c:cf: 4c:0f:cf:fe:3b:7f:45:50:3d:23:c0:c1:e8:a1:df: 00:0c:20:89:ca:a5:4f:71:4c:d0:a9:1c:b7:04:6f: 50:83:0e:17:1a:96:3f:9e:69:aa:15:0d:16:12:af: 56:29:74:6a:8c:e5:20:64:3e:e4:c6:67:99:12:5e: a7:59:db:96:1c:44:9b:20:a4:8e:36:ee:4a:ed:bc: 07:80:ce:6b:70:93:b2:c4:bc:bd:17:5c:7b:2a:16: 77:af:7d:cd:d6:d7:c0:f4:d2:bb:14:bb:fc:b7:f9: a2:85:99:62:f2:59:aa:dd:df:1e:ec:6b:d4:17:30: cb:d3:4b:3b:0e:39:b5:b5:be:90:18:7d:67:02:f4: 9e:1a:12:78:4e:4b:0a:25:ae:38:5f:05:5e:a4:5f: 6e:6e:2a:dd:e2:f9:a0:57:75:fa:56:bc:61:bc:b6: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:0C:49:07:89:AB:37:8A:8D:5D:14:4B:79:65:33:D1:EC:99:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 199.168.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0a:ef:4f:6d:6e:40:20:43:b6:21:ca:f0:e1:42:0e:7a:4b: a6:b0:81:45:bc:44:4d:da:f7:c8:61:5d:86:77:c8:4e:73:7d: 4e:be:13:45:08:b3:86:db:14:f5:c7:d9:2d:70:ab:2f:c7:9d: b9:55:8b:c8:9d:e8:f1:2d:2e:d2:67:50:76:b0:26:2a:6c:30: 2e:c5:e9:6a:f1:37:ed:ec:15:d7:9a:ac:d1:62:31:f8:2a:95: 9f:b2:41:57:a5:f7:9a:08:47:b0:ec:47:50:65:f2:e4:d4:6a: ce:93:c6:04:d8:ce:8f:f7:93:76:b4:cc:a4:7f:d1:73:ad:67: 63:8f:34:9f:60:0f:6c:a9:34:ce:b9:75:58:a1:01:54:f5:1d: 20:88:fd:2e:8d:1c:e7:ed:9d:5a:5b:46:c5:77:f9:b4:57:eb: 78:6d:27:ff:50:73:0a:92:ab:a5:ce:c2:3f:61:10:8c:1a:f8: 72:d4:59:52:0e:1f:d0:cc:9e:80:5f:8b:8d:86:72:ed:b4:a4: 6b:5a:1d:db:63:84:5b:46:9f:5a:36:32:f7:e4:80:89:bf:66: 8e:30:35:f8:0f:44:f1:d0:a3:82:85:58:c6:8f:c8:03:05:a8: dc:e4:1d:11:da:2b:10:12:23:0b:59:66:a2:0a:d3:32:86:c5: 5e:46:7b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4NEdvxU1k24X3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmU0N2JiZDQtYWUxNS00Y2ViLTk0NmQtNGRmMDg2NDc0MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrPLhq94EmqbdCSStczvQNLaxlDifiO3Rf4x /9loaKte+U5SEbFxiMvUzuXact9jvGqJKtnbs+ulu/uR/eU0oReHBXmy1z2d66wk MgOnw4P+AL5DE1RwLM9MD8/+O39FUD0jwMHood8ADCCJyqVPcUzQqRy3BG9Qgw4X GpY/nmmqFQ0WEq9WKXRqjOUgZD7kxmeZEl6nWduWHESbIKSONu5K7bwHgM5rcJOy xLy9F1x7KhZ3r33N1tfA9NK7FLv8t/mihZli8lmq3d8e7GvUFzDL00s7Djm1tb6Q GH1nAvSeGhJ4TksKJa44XwVepF9ubird4vmgV3X6VrxhvLa7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAvDEkHias3io1dFEt5ZTPR7Jl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgK709tbkAgQ7YhyvDhQg56S6awgUW8RE3a98hhXYZ3yE5zfU6+E0UI s4bbFPXH2S1wqy/HnblVi8id6PEtLtJnUHawJipsMC7F6WrxN+3sFdearNFiMfgq lZ+yQVel95oIR7DsR1Bl8uTUas6TxgTYzo/3k3a0zKR/0XOtZ2OPNJ9gD2ypNM65 dVihAVT1HSCI/S6NHOftnVpbRsV3+bRX63htJ/9QcwqSq6XOwj9hEIwa+HLUWVIO H9DMnoBfi42Gcu20pGtaHdtjhFtGn1o2MvfkgIm/Zo4wNfgPRPHQo4KFWMaPyAMF qNzkHRHaKxASIwtZZqIK0zKGxV5Ge8E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:53 2024 by rpki-client on console-fra.rpki-client.org