$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa File: 9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa (raw, json) Hash identifier: 4NZ2EUV0zSTvjzIEx0WHwxpqGUNMGyHxEkWhg4pejPQ= Subject key identifier: 20:53:4A:F3:E1:84:10:94:CC:51:13:DF:97:23:5D:46:19:66:D3:96 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B14D62743081B699B8B880 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 199.232.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:4d:62:74:30:81:b6:99:b8:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=2997b83b-4d4f-4716-b777-229698bc9139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:92:6b:fd:31:33:01:c3:92:13:57:2d:91: f4:be:de:42:6e:6c:07:3a:af:09:65:15:ee:f6:5e: 25:f5:01:52:c9:0f:af:d9:eb:3d:05:19:5c:a9:98: dd:e9:19:04:34:fc:ab:9f:71:a6:11:a0:26:84:0d: fe:e9:5b:1b:62:b6:a9:4b:ed:4b:4a:c2:cd:ad:7b: 20:76:01:a3:2a:e8:f6:e8:54:c1:59:40:73:9f:0f: 90:24:1f:fa:a2:25:92:aa:b3:a0:fb:b9:2a:ef:b3: 02:9d:a6:f2:92:0a:65:2a:b0:d3:29:bf:0d:78:ed: 28:2a:e7:5c:46:cd:81:2e:f8:13:24:af:e9:dc:f2: 11:15:26:2e:41:1a:2c:c9:16:58:55:9b:50:79:09: 93:d2:9f:c5:ff:d5:28:80:7f:fc:b5:55:5c:ca:49: a6:ad:2c:4e:06:d9:c6:1a:09:75:04:51:84:d4:6a: d2:92:3b:02:53:8f:c5:b1:e0:3b:6a:e2:8d:d5:30: be:6f:96:9e:d4:36:2e:fa:90:56:c9:b5:00:20:58: a3:15:38:62:21:b6:d0:9d:50:68:72:70:e6:3c:56: e9:6a:e3:7e:ac:c7:0a:ff:5e:10:ad:f5:b2:10:66: 32:4a:a1:53:0e:fa:eb:e0:22:55:5d:7a:6f:3c:46: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:53:4A:F3:E1:84:10:94:CC:51:13:DF:97:23:5D:46:19:66:D3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a804fe1-a4aa-3daa-98c1-6e4128a1812d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7d:e3:56:cb:12:d8:b4:1c:5d:37:a0:a5:e9:f0:c8:6a:e2: a3:60:85:4c:2c:ed:c9:8c:2d:9d:b6:67:3b:f2:01:37:6f:23: eb:57:1e:68:e0:70:ed:65:4b:e5:41:67:c3:22:b5:3d:8e:69: 3d:d6:a7:de:e9:19:d3:81:d6:08:e5:cd:b4:3b:31:85:39:ba: 68:48:ab:cf:bc:04:e8:9f:95:57:4c:be:a6:f0:2b:d5:2e:7b: d9:3d:fa:8c:7a:5a:79:cc:eb:cb:5f:6b:cb:97:a4:be:c8:84: 19:c2:1f:af:47:39:69:ba:c5:14:5c:23:5f:73:25:83:be:31: 5e:fa:32:9f:fa:72:27:f5:da:2d:d8:05:0c:8b:da:b0:b6:1e: e5:64:4f:38:7c:58:24:96:08:0b:d4:4a:a3:01:c4:80:fa:ef: 20:79:87:ae:8d:5a:69:3e:2e:1c:ae:68:1f:e5:99:9b:9d:d0: 04:b7:ba:d2:97:fe:90:a4:b0:d4:8c:c7:61:0c:15:33:f0:5c: f5:b7:1a:de:d0:5d:0a:e4:58:4e:1e:dd:fa:c9:fd:43:f8:d8: ad:66:a8:5c:bf:74:db:05:fb:68:72:4e:6a:f3:4e:8e:f6:59: 7d:ed:cf:bf:08:19:e4:20:8b:8d:a8:51:99:7a:b2:4c:d8:da: 5c:1d:f6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsU1idDCBtpm4uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk Mjk5N2I4M2ItNGQ0Zi00NzE2LWI3NzctMjI5Njk4YmM5MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8WSa/0xMwHDkhNXLZH0vt5CbmwHOq8JZRXu 9l4l9QFSyQ+v2es9BRlcqZjd6RkENPyrn3GmEaAmhA3+6VsbYrapS+1LSsLNrXsg dgGjKuj26FTBWUBznw+QJB/6oiWSqrOg+7kq77MCnabykgplKrDTKb8NeO0oKudc Rs2BLvgTJK/p3PIRFSYuQRosyRZYVZtQeQmT0p/F/9UogH/8tVVcykmmrSxOBtnG Ggl1BFGE1GrSkjsCU4/FseA7auKN1TC+b5ae1DYu+pBWybUAIFijFThiIbbQnVBo cnDmPFbpauN+rMcK/14QrfWyEGYySqFTDvrr4CJVXXpvPEYi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBTSvPhhBCUzFET35cjXUYZZtOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOWE4MDRmZTEtYTRhYS0z ZGFhLTk4YzEtNmU0MTI4YTE4MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+j4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp941bLEti0HF03oKXp8Mhq4qNghUws7cmMLZ22ZzvyATdvI+tXHmjg cO1lS+VBZ8MitT2OaT3Wp97pGdOB1gjlzbQ7MYU5umhIq8+8BOiflVdMvqbwK9Uu e9k9+ox6WnnM68tfa8uXpL7IhBnCH69HOWm6xRRcI19zJYO+MV76Mp/6cif12i3Y BQyL2rC2HuVkTzh8WCSWCAvUSqMBxID67yB5h66NWmk+LhyuaB/lmZud0AS3utKX /pCksNSMx2EMFTPwXPW3Gt7QXQrkWE4e3frJ/UP42K1mqFy/dNsF+2hyTmrzTo72 WX3tz78IGeQgi42oUZl6skzY2lwd9vg= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:31 2024 by rpki-client on console-ams.rpki-client.org