$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/facd8c04-c008-3d7f-9f58-f8415815308b.roa File: facd8c04-c008-3d7f-9f58-f8415815308b.roa (raw, json) Hash identifier: ffUwgwBjExhELOiQHjBZZysk+CKgDYTENKeHx09CCQg= Subject key identifier: 33:40:7A:90:CE:7F:6C:2C:2A:5D:9A:27:C0:79:A4:20:13:7E:F9:D9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B14A0DC0BF2641C86FD780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/facd8c04-c008-3d7f-9f58-f8415815308b.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 199.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:4a:0d:c0:bf:26:41:c8:6f:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=8b61611d-8186-4537-b75b-e9e88876372e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:b0:84:b6:6c:04:35:94:12:6c:a1:88:0d: 98:02:dd:4d:d2:ca:bb:ef:89:44:80:29:02:cd:7f: 10:f3:44:a6:0a:45:3f:a0:2e:8d:74:0d:6f:74:1f: 04:62:49:68:35:81:7d:88:5b:4e:d8:ab:34:4a:78: 51:df:86:0f:13:a3:96:c6:3a:d2:29:c2:b7:13:ad: c4:be:43:74:23:60:d0:81:5c:23:5c:18:64:07:2f: 94:3b:64:88:ff:3f:28:a1:a9:53:62:64:07:5a:bf: 3f:4e:eb:5e:d2:97:56:4e:f2:4e:f7:06:f7:bb:06: 3a:a3:c4:db:52:cc:5e:0b:4d:ef:8b:12:80:50:02: fb:6d:a0:72:47:18:e4:45:3c:51:8a:23:3a:ca:4a: cd:5e:a5:61:96:2d:b1:22:59:db:7b:60:9c:d6:f5: 6d:35:9e:75:b1:e7:4e:d6:1e:ec:b7:eb:4b:d5:8c: c5:f6:b2:a8:18:4e:97:0b:4d:60:b7:55:9e:12:57: 1d:00:78:33:74:cb:75:35:ac:b2:65:bd:59:f7:5d: e3:aa:db:be:da:09:7d:43:9c:ea:b1:33:26:26:4d: db:d8:f6:7f:32:69:f1:de:69:d7:ed:c9:97:7d:4a: 9e:3e:52:46:69:a5:52:fa:9c:34:50:b2:21:c5:0e: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:7A:90:CE:7F:6C:2C:2A:5D:9A:27:C0:79:A4:20:13:7E:F9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/facd8c04-c008-3d7f-9f58-f8415815308b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:be:83:13:08:21:43:33:8b:0c:e5:d1:e6:8f:96:15:82:b2: 00:12:1d:6a:d0:e0:6f:a2:1b:dc:06:04:a3:37:7d:de:69:eb: 87:99:42:6a:da:a2:6a:4d:b5:5e:46:bb:9e:73:7b:49:dc:cf: 28:f1:5d:9c:7b:ae:68:a9:a2:c8:b0:c7:9c:21:f1:09:12:26: c2:72:9f:43:bd:14:1f:0d:8f:e4:47:c2:ca:4e:38:86:ec:de: 19:54:6f:ce:60:77:4f:d3:ca:47:6d:4a:5c:c8:88:23:46:ef: ca:f8:f0:33:ea:e4:96:75:cc:60:ae:48:9c:8d:26:2d:dc:e9: 24:6f:e1:7c:b8:3a:0c:c4:ee:7a:a7:d2:2b:e5:5c:3e:89:73: f6:80:2a:b9:db:ad:81:5c:42:79:d3:6e:8e:47:b2:1a:cf:c4: 37:43:c7:70:9b:d4:2a:46:4f:c3:ac:ac:ee:3f:e7:44:16:96: 60:ff:91:de:fe:71:6b:b9:46:f5:68:30:68:50:40:ae:59:52: 01:e9:a5:cf:bb:b1:58:f2:dc:42:78:2e:fa:5e:eb:9a:06:71: 82:67:48:1b:0b:34:a8:9c:d8:05:ce:e1:a9:9b:1b:5f:01:77: 70:18:4c:41:99:29:06:ec:d4:ab:bb:cf:53:5a:bc:7b:b7:12: 40:44:82:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsUoNwL8mQchv14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk OGI2MTYxMWQtODE4Ni00NTM3LWI3NWItZTllODg4NzYzNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+CwhLZsBDWUEmyhiA2YAt1N0sq774lEgCkC zX8Q80SmCkU/oC6NdA1vdB8EYkloNYF9iFtO2Ks0SnhR34YPE6OWxjrSKcK3E63E vkN0I2DQgVwjXBhkBy+UO2SI/z8ooalTYmQHWr8/Tute0pdWTvJO9wb3uwY6o8Tb UsxeC03vixKAUAL7baByRxjkRTxRiiM6ykrNXqVhli2xIlnbe2Cc1vVtNZ51sedO 1h7st+tL1YzF9rKoGE6XC01gt1WeElcdAHgzdMt1NayyZb1Z913jqtu+2gl9Q5zq sTMmJk3b2PZ/Mmnx3mnX7cmXfUqePlJGaaVS+pw0ULIhxQ59BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNAepDOf2wsKl2aJ8B5pCATfvnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmFjZDhjMDQtYzAwOC0z ZDdmLTlmNTgtZjg0MTU4MTUzMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+gkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa+gxMIIUMziwzl0eaPlhWCsgASHWrQ4G+iG9wGBKM3fd5p64eZQmra ompNtV5Gu55ze0nczyjxXZx7rmiposiwx5wh8QkSJsJyn0O9FB8Nj+RHwspOOIbs 3hlUb85gd0/TykdtSlzIiCNG78r48DPq5JZ1zGCuSJyNJi3c6SRv4Xy4OgzE7nqn 0ivlXD6Jc/aAKrnbrYFcQnnTbo5HshrPxDdDx3Cb1CpGT8OsrO4/50QWlmD/kd7+ cWu5RvVoMGhQQK5ZUgHppc+7sVjy3EJ4Lvpe65oGcYJnSBsLNKic2AXO4ambG18B d3AYTEGZKQbs1Ku7z1NavHu3EkBEgjY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:33 2024 by rpki-client on console-ams.rpki-client.org