$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: 4PrEkTaIB2CPjrJ2tjHoPw6UTBm3bMBSQIr6SFGti/M= Subject key identifier: 53:4D:E1:B0:4E:9B:C4:36:88:F3:7B:F7:A7:2E:20:0A:AD:53:2F:6A Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285847F84F7685C0A1609E6C1DF680 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Sat 23 Nov 2024 02:00:28 +0000 ROA not before: Sat 23 Nov 2024 02:00:28 +0000 ROA not after: Fri 21 Feb 2025 02:00:28 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:4f:76:85:c0:a1:60:9e:6c:1d:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Nov 23 02:00:28 2024 GMT Not After : Feb 21 02:00:28 2025 GMT Subject: CN=b7e7aed8-f5e9-432f-8c77-d83a3417524d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:d8:83:56:48:e8:e5:49:5a:b2:09:d6:6e: bb:0a:a0:06:3a:78:0b:76:32:a8:71:34:c4:03:22: 52:e2:b1:01:9c:6d:09:11:e8:fb:2c:7e:d6:da:67: 4d:2a:ab:4d:e9:5d:27:93:96:21:c1:18:3d:11:e4: 85:37:04:ea:c8:e6:bf:27:c1:3d:fd:bc:69:02:6c: d9:7c:1a:49:c7:7a:88:3f:8b:f3:56:c7:9f:b9:d8: 79:dc:06:64:3c:94:28:13:d7:dd:9d:0d:8c:3e:b7: 59:60:b8:3d:dd:c3:f1:d1:1e:73:76:ec:f7:dc:d1: 36:e4:b5:a5:b8:1b:58:ea:2b:de:aa:45:b9:8c:66: 3e:46:92:e5:e4:4e:5f:06:34:10:0d:03:e8:73:0a: d8:d7:1f:35:b1:20:fe:17:e2:42:77:2c:9b:38:66: 4b:c4:7a:68:8a:2f:da:13:ed:52:b5:ab:28:66:b9: 1c:1c:d3:d0:02:0f:16:68:5d:be:b7:68:18:5b:97: a3:3d:e2:78:59:84:b0:94:43:a9:24:98:55:f0:fd: 87:2d:14:c3:23:ac:be:55:16:ef:68:67:2d:0a:3a: 15:42:83:31:c8:d0:ab:0c:f8:17:a9:84:9a:c8:e8: eb:3a:ff:41:de:51:63:17:34:1c:e4:7e:89:34:cb: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:E1:B0:4E:9B:C4:36:88:F3:7B:F7:A7:2E:20:0A:AD:53:2F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:28:88:4b:c7:fe:3c:3d:7e:f1:b6:9f:14:85:5d:51:ad:1c: 84:b4:2b:8a:55:f4:a1:f7:54:2c:ad:16:65:e1:c1:2e:f9:06: 37:de:c3:c4:0a:ba:fd:54:5f:3c:e3:b8:45:cd:97:57:b4:ae: c8:28:ed:90:ba:4a:d5:fd:a6:d0:7f:ac:cc:30:94:8f:2a:31: 68:f9:a1:3f:37:68:ae:73:f3:9c:03:d0:3a:a5:3d:c3:d2:af: 52:50:b6:2e:0a:15:00:bf:fd:af:7c:ae:48:e0:7f:79:9c:0e: dc:97:68:27:97:8c:3f:c7:86:ef:b2:d8:e0:c0:23:a3:e0:5f: e7:2d:9e:5e:8a:82:54:66:da:6d:b2:8a:40:61:36:02:2a:0d: 88:35:ba:11:d8:15:d4:4c:90:f0:68:96:d4:c9:3d:96:ef:75: 73:4f:e3:c6:87:d5:f6:ec:8a:43:e3:33:86:53:27:0c:04:96: 1f:5d:af:64:b5:66:93:bc:16:28:55:e4:ae:41:57:ab:62:be: c2:97:f8:80:9a:57:41:67:bb:3b:62:e9:5d:31:3a:0e:81:2a: 39:70:21:a9:e5:3e:2c:aa:2c:af:67:34:7c:12:5c:12:17:6b: b1:63:a6:9e:72:c8:01:43:8a:42:34:77:09:1e:7b:e9:37:7a: e9:b3:df:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T3aFwKFgnmwd9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk YjdlN2FlZDgtZjVlOS00MzJmLThjNzctZDgzYTM0MTc1MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm53Yg1ZI6OVJWrIJ1m67CqAGOngLdjKocTTE AyJS4rEBnG0JEej7LH7W2mdNKqtN6V0nk5YhwRg9EeSFNwTqyOa/J8E9/bxpAmzZ fBpJx3qIP4vzVsefudh53AZkPJQoE9fdnQ2MPrdZYLg93cPx0R5zduz33NE25LWl uBtY6iveqkW5jGY+RpLl5E5fBjQQDQPocwrY1x81sSD+F+JCdyybOGZLxHpoii/a E+1StasoZrkcHNPQAg8WaF2+t2gYW5ejPeJ4WYSwlEOpJJhV8P2HLRTDI6y+VRbv aGctCjoVQoMxyNCrDPgXqYSayOjrOv9B3lFjFzQc5H6JNMsPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNN4bBOm8Q2iPN796cuIAqtUy9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsoiEvH/jw9fvG2nxSFXVGtHIS0K4pV9KH3VCytFmXhwS75Bjfew8QK uv1UXzzjuEXNl1e0rsgo7ZC6StX9ptB/rMwwlI8qMWj5oT83aK5z85wD0DqlPcPS r1JQti4KFQC//a98rkjgf3mcDtyXaCeXjD/Hhu+y2ODAI6PgX+ctnl6KglRm2m2y ikBhNgIqDYg1uhHYFdRMkPBoltTJPZbvdXNP48aH1fbsikPjM4ZTJwwElh9dr2S1 ZpO8FihV5K5BV6tivsKX+ICaV0Fnuzti6V0xOg6BKjlwIanlPiyqLK9nNHwSXBIX a7Fjpp5yyAFDikI0dwkee+k3eumz34w= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:09 2024 by rpki-client on console-fra.rpki-client.org