$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa File: 91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa (raw, json) Hash identifier: j06DGr5yWKiAeBhkk31nA/yAK+36uIGRgu4mp1haCiA= Subject key identifier: 44:7B:2A:C5:F3:D6:36:24:16:C9:59:68:10:6B:82:D3:F8:09:84:8F Certificate issuer: /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0 Certificate serial: 010D0C9F432858472F3083F03C327690B1D45880 Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 19471 IP address blocks: 199.68.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:83:f0:3c:32:76:90:b1:d4:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0 Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=2d1f7e43-e2be-427a-a766-006a30f5bc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:e9:15:04:d4:20:9a:35:88:bb:f6:69:94: a5:dd:85:f2:93:d4:61:d3:4f:32:c4:68:8b:06:e2: 4b:19:b3:27:70:d5:9f:f9:47:bb:9d:a2:c6:18:c5: e6:61:74:a2:d8:5a:84:06:83:f5:e6:d3:5b:d8:46: 24:1d:0c:3f:d3:4e:c3:e6:b7:5f:f8:09:9f:92:2b: b7:f7:6a:62:1d:89:1c:01:67:58:e1:4a:78:c1:c6: 0d:0a:ce:d3:93:42:b7:46:b3:39:9d:cd:30:08:d7: 86:d1:ef:79:67:0e:94:86:3f:cf:fb:b8:ab:04:28: e9:8f:4c:dd:0d:42:1c:17:63:af:d9:2c:c3:bc:c6: e6:0d:83:02:7d:48:5a:a0:52:2e:c3:fd:ac:f1:8f: b0:4f:de:21:49:2a:18:27:d5:83:90:f6:67:f6:ad: 9e:bd:85:e8:39:6e:ed:a9:1a:c8:71:ce:81:ce:08: 25:2e:a3:93:6e:46:97:15:0d:44:71:e7:86:cb:24: 59:50:91:48:d2:53:2f:94:40:ba:34:75:90:9a:35: 7c:2f:a1:06:9f:0a:fa:b2:1b:82:dc:26:aa:20:06: 7f:d7:ba:56:5b:84:cb:d8:e2:16:a4:1c:8a:95:1c: d4:a9:d5:2b:2d:f5:26:79:cc:4e:8c:76:ff:2b:b9: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7B:2A:C5:F3:D6:36:24:16:C9:59:68:10:6B:82:D3:F8:09:84:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl X509v3 Authority Key Identifier: keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer sbgp-ipAddrBlock: critical IPv4: 199.68.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:59:c0:f4:80:f3:8f:ce:61:0f:b9:5a:9d:72:12:7f:94:db: b4:cb:4b:de:98:be:19:52:eb:d8:21:91:96:53:4e:63:a7:3b: 08:9b:7a:b8:96:c9:1e:9f:8e:7d:89:07:a7:60:3d:49:07:79: df:c6:55:12:97:84:a7:c9:79:09:2f:f8:78:af:b9:70:db:93: eb:25:2e:19:db:b8:68:47:50:3d:90:19:38:99:1a:16:77:4c: b5:a2:0c:86:b7:3e:ba:e8:61:8f:cf:75:a2:84:c0:e7:a3:c9: fc:f0:16:42:2c:ec:0e:17:cf:15:df:2c:dc:4a:43:69:f4:13: 22:49:34:6e:5b:10:06:3a:53:fb:02:16:a9:6a:50:fe:5c:d2: 3e:9b:73:08:c0:14:5f:c1:83:5b:c0:81:7e:99:39:cc:55:00: 85:8c:fc:eb:6e:16:75:20:2f:1c:10:0a:95:c5:98:c2:cd:d6: 7f:c1:bc:04:e1:cd:06:ae:40:98:3e:0d:27:98:02:35:e2:c4: 98:b4:ed:61:01:c0:bd:91:31:a4:57:94:8f:5e:a8:5b:c8:6e: ad:2a:26:9d:dd:2b:98:c1:65:f1:c5:74:f9:b4:3a:f3:fa:a0: b6:5f:98:ea:6e:31:27:7b:ed:63:cf:14:82:bf:6e:41:05:24: e4:7d:20:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIPwPDJ2kLHUWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj NWIwMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MmQxZjdlNDMtZTJiZS00MjdhLWE3NjYtMDA2YTMwZjViYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW/pFQTUIJo1iLv2aZSl3YXyk9Rh008yxGiL BuJLGbMncNWf+Ue7naLGGMXmYXSi2FqEBoP15tNb2EYkHQw/007D5rdf+Amfkiu3 92piHYkcAWdY4Up4wcYNCs7Tk0K3RrM5nc0wCNeG0e95Zw6Uhj/P+7irBCjpj0zd DUIcF2Ov2SzDvMbmDYMCfUhaoFIuw/2s8Y+wT94hSSoYJ9WDkPZn9q2evYXoOW7t qRrIcc6BzgglLqOTbkaXFQ1EceeGyyRZUJFI0lMvlEC6NHWQmjV8L6EGnwr6shuC 3CaqIAZ/17pWW4TL2OIWpByKlRzUqdUrLfUmecxOjHb/K7lsZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER7KsXz1jYkFslZaBBrgtP4CYSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvOTFhNjJlMDAtZDcyMC0z YTgzLWExNGQtYmU1YzViNGNlMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5 YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2 YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdZwPSA84/OYQ+5Wp1yEn+U27TLS96YvhlS69ghkZZTTmOnOwiberiW yR6fjn2JB6dgPUkHed/GVRKXhKfJeQkv+HivuXDbk+slLhnbuGhHUD2QGTiZGhZ3 TLWiDIa3PrroYY/PdaKEwOejyfzwFkIs7A4XzxXfLNxKQ2n0EyJJNG5bEAY6U/sC FqlqUP5c0j6bcwjAFF/Bg1vAgX6ZOcxVAIWM/OtuFnUgLxwQCpXFmMLN1n/BvATh zQauQJg+DSeYAjXixJi07WEBwL2RMaRXlI9eqFvIbq0qJp3dK5jBZfHFdPm0OvP6 oLZfmOpuMSd77WPPFIK/bkEFJOR9IEA= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:45 2024 by rpki-client on console-fra.rpki-client.org