$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: ROzQ8M6LULgrvmR847ucJe3OwCf74dwIr2HgOFBDjls= Subject key identifier: B6:40:22:04:79:1A:1E:91:C7:E4:DD:B2:F5:0C:20:D3:CD:4F:8C:8D Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F43285847B5315233C94687D9D7D03F00 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:52:33:c9:46:87:d9:d7:d0:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=46c9d7ac-9733-45f0-8102-cc3337358cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:5a:cb:ca:80:7e:08:4d:a0:f3:5c:0b:4f: a9:b6:9c:83:75:50:e8:2f:d0:86:f8:4e:08:59:35: 9e:58:8e:62:1a:c6:f5:fe:b9:a8:43:70:d4:d4:6d: ce:85:24:7c:39:1e:69:3a:8f:4e:76:e6:53:ec:01: 10:2e:19:73:b4:99:1a:51:0e:f4:ec:55:c9:64:8c: f6:94:f4:c3:ba:c0:37:00:a7:a8:08:1d:61:07:59: 88:e6:b0:c1:7b:31:ff:dc:4b:ec:f8:0a:38:14:2e: 89:c0:f2:f2:36:6f:9f:aa:d8:eb:31:63:70:a0:41: d8:47:9c:30:97:2c:be:5d:5f:82:5f:2e:c7:d8:4f: 86:53:73:01:f9:7b:38:82:ed:72:0d:29:6c:fa:e2: ff:c8:bf:97:4f:40:23:a8:6f:26:26:19:db:05:fa: d3:ee:9b:41:10:ac:d6:ad:23:77:43:5c:f9:71:52: d3:2f:be:2f:d2:07:96:80:d9:99:5a:cc:ad:dc:58: e0:cc:50:e2:da:23:80:dd:5c:3b:80:36:dc:4c:90: ef:e9:07:c5:eb:dd:cb:f4:ae:8b:15:28:f8:3e:97: b2:90:5a:8a:1d:b2:17:f7:e2:c8:fe:4e:a3:e0:15: b1:e0:41:46:00:bb:2d:b0:f4:b8:f1:04:94:eb:e1: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:22:04:79:1A:1E:91:C7:E4:DD:B2:F5:0C:20:D3:CD:4F:8C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3c:b5:78:cc:30:2c:7c:d4:93:0c:e9:22:52:12:3e:e1:ed: 1e:d4:8f:7b:14:63:10:c5:79:55:d1:5d:fd:16:93:34:8d:d6: 71:93:33:a8:54:c9:e5:f1:f0:f9:75:8d:9c:e2:e0:0c:6d:47: 27:e9:4a:37:7e:47:a7:9e:24:5f:48:a6:4c:61:31:7d:7d:e5: 48:6a:5c:f2:16:d0:61:34:85:c9:02:f1:76:f1:c1:78:26:f7: 03:3f:e5:a4:56:76:17:1c:05:f8:bf:f3:7f:e0:c4:0e:fb:fd: e1:0e:4a:ad:8f:b2:e7:8d:14:85:1f:a2:30:bf:4f:36:72:d3: 5d:5b:a1:0f:0f:e9:c4:a4:b3:70:37:5b:6f:47:7d:03:60:d1: b2:8c:df:0f:fc:b7:ec:24:e3:97:2a:56:9a:d8:97:a8:93:c4: 45:26:b4:29:ac:b4:f6:88:28:b7:ca:77:02:4a:7e:4d:73:69: e7:57:6e:27:2f:cb:f8:d3:40:4a:7a:0b:14:75:36:b5:1f:ff: da:4c:3f:64:df:a5:b1:ef:53:ea:a7:85:ae:a5:6a:72:18:32: 77:f4:a3:ed:3f:90:57:2e:15:1e:e9:6a:98:cf:2e:c0:2d:ac: a0:51:e0:5a:3f:dc:3b:41:4e:c6:8d:21:b2:33:0a:2f:59:5a: f2:7f:c5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVIzyUaH2dfQPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NDZjOWQ3YWMtOTczMy00NWYwLTgxMDItY2MzMzM3MzU4Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4lay8qAfghNoPNcC0+ptpyDdVDoL9CG+E4I WTWeWI5iGsb1/rmoQ3DU1G3OhSR8OR5pOo9OduZT7AEQLhlztJkaUQ707FXJZIz2 lPTDusA3AKeoCB1hB1mI5rDBezH/3Evs+Ao4FC6JwPLyNm+fqtjrMWNwoEHYR5ww lyy+XV+CXy7H2E+GU3MB+Xs4gu1yDSls+uL/yL+XT0AjqG8mJhnbBfrT7ptBEKzW rSN3Q1z5cVLTL74v0geWgNmZWsyt3FjgzFDi2iOA3Vw7gDbcTJDv6QfF693L9K6L FSj4PpeykFqKHbIX9+LI/k6j4BWx4EFGALstsPS48QSU6+FTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZAIgR5Gh6Rx+TdsvUMINPNT4yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs8tXjMMCx81JMM6SJSEj7h7R7Uj3sUYxDFeVXRXf0WkzSN1nGTM6hU yeXx8Pl1jZzi4AxtRyfpSjd+R6eeJF9IpkxhMX195UhqXPIW0GE0hckC8XbxwXgm 9wM/5aRWdhccBfi/83/gxA77/eEOSq2PsueNFIUfojC/TzZy011boQ8P6cSks3A3 W29HfQNg0bKM3w/8t+wk45cqVprYl6iTxEUmtCmstPaIKLfKdwJKfk1zaedXbicv y/jTQEp6CxR1NrUf/9pMP2TfpbHvU+qnha6lanIYMnf0o+0/kFcuFR7papjPLsAt rKBR4Fo/3DtBTsaNIbIzCi9ZWvJ/xek= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org