$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json) Hash identifier: JG+UQtpOKyzzjRxPC7Kpmk8BckuZn6oGc1gJFDqazqI= Subject key identifier: A0:B7:73:68:D0:CF:19:8A:85:AF:3F:3E:DE:39:24:81:1A:FF:32:C0 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F43285847F154F1BEA0D8190044C6AF00 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26459 IP address blocks: 199.250.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f1:be:a0:d8:19:00:44:c6:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=672728dc-9c59-4d20-8c85-55f78f625828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:23:0a:35:14:b6:ad:0b:56:a9:db:5a:d1: 5b:cc:ea:ef:cd:c3:b6:32:1c:8f:1c:88:d4:83:f0: 7b:8a:20:69:08:74:3c:72:63:2f:da:e9:5b:54:2d: 04:03:10:fb:e8:b2:5d:d8:9a:16:cc:e0:5d:7c:8a: 96:1b:65:9b:a7:02:30:fd:03:ed:d5:29:99:d8:b6: 31:a3:47:7b:c8:00:5e:31:d0:5f:e5:38:67:36:91: 79:b1:36:8e:a5:07:df:4c:e5:a1:75:c6:04:1e:ab: 06:69:25:ec:35:d8:cd:c3:16:bb:91:7a:c5:7b:b1: ae:04:b1:16:f1:83:62:f5:c2:ef:3d:31:3e:c7:bf: 5c:81:44:6f:97:e1:98:76:5e:35:5b:6a:09:ad:bc: cf:73:40:a7:d4:76:6d:17:27:63:e0:49:54:5d:ee: 04:3b:7a:82:05:eb:75:28:a1:4c:9c:36:a4:98:59: 30:53:95:e5:17:6c:d3:71:d1:b1:12:d8:a5:3c:d4: 07:e2:71:42:86:f8:30:6e:4e:8d:4d:08:2d:b2:78: c5:52:44:64:b2:5a:58:40:8c:8b:94:7d:0d:a5:cf: da:57:e2:b5:3c:47:14:94:bd:1a:e8:13:7c:50:3c: f8:98:e0:42:06:54:d3:4d:fb:99:6c:16:20:e8:10: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:73:68:D0:CF:19:8A:85:AF:3F:3E:DE:39:24:81:1A:FF:32:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 199.250.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:37:22:9d:98:04:9d:a0:bb:ae:54:75:90:3c:5b:48:4f:1b: b4:b5:49:3d:b3:98:ed:69:b4:09:11:84:45:08:f0:de:8b:5e: 6f:d1:a1:be:60:48:c4:95:3a:b2:2a:7a:77:95:c0:2b:13:91: 16:77:30:94:54:fe:ff:3a:a1:a8:6d:b8:5b:3a:e5:fa:9b:a8: 99:9a:68:e5:f7:36:0e:a8:bd:f9:f9:55:32:fd:af:7d:e4:e9: de:1b:a4:19:ff:d5:43:46:f8:8e:92:74:f2:79:25:8b:2b:05: 17:54:25:84:a0:e1:f9:e3:8b:e8:61:99:3d:ed:13:59:e5:25: ee:3f:00:0e:bc:a2:e8:29:1e:88:14:2a:63:a1:85:d9:34:da: 2c:00:26:3e:54:84:45:4e:45:ba:d6:96:e0:08:06:28:46:1b: 83:80:62:17:eb:10:30:a4:b2:0e:df:95:ab:cd:58:08:ae:e8: 72:eb:88:51:8b:98:10:f2:38:c0:7b:1c:b9:6c:ab:fa:2c:3d: 80:c7:08:50:81:f7:bf:9f:93:e1:d6:b2:62:f1:13:1b:ee:a4: 62:f3:06:85:28:12:a1:7d:ac:1a:74:94:c0:f2:75:6f:47:b4: 49:51:f7:02:bf:0f:fc:51:3b:1e:5e:bb:97:f4:3f:85:65:1b: a4:a6:94:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPG+oNgZAETGrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjcyNzI4ZGMtOWM1OS00ZDIwLThjODUtNTVmNzhmNjI1ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw8jCjUUtq0LVqnbWtFbzOrvzcO2MhyPHIjU g/B7iiBpCHQ8cmMv2ulbVC0EAxD76LJd2JoWzOBdfIqWG2WbpwIw/QPt1SmZ2LYx o0d7yABeMdBf5ThnNpF5sTaOpQffTOWhdcYEHqsGaSXsNdjNwxa7kXrFe7GuBLEW 8YNi9cLvPTE+x79cgURvl+GYdl41W2oJrbzPc0Cn1HZtFydj4ElUXe4EO3qCBet1 KKFMnDakmFkwU5XlF2zTcdGxEtilPNQH4nFChvgwbk6NTQgtsnjFUkRkslpYQIyL lH0Npc/aV+K1PEcUlL0a6BN8UDz4mOBCBlTTTfuZbBYg6BAYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC3c2jQzxmKha8/Pt45JIEa/zLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvMTE0YzIzZWItZDJmNy0z YTQzLTgyNjYtNDY0ZTgxODM2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw3Ip2YBJ2gu65UdZA8W0hPG7S1ST2zmO1ptAkRhEUI8N6LXm/Rob5g SMSVOrIqeneVwCsTkRZ3MJRU/v86oahtuFs65fqbqJmaaOX3Ng6ovfn5VTL9r33k 6d4bpBn/1UNG+I6SdPJ5JYsrBRdUJYSg4fnji+hhmT3tE1nlJe4/AA68ougpHogU KmOhhdk02iwAJj5UhEVORbrWluAIBihGG4OAYhfrEDCksg7flavNWAiu6HLriFGL mBDyOMB7HLlsq/osPYDHCFCB97+fk+HWsmLxExvupGLzBoUoEqF9rBp0lMDydW9H tElR9wK/D/xROx5eu5f0P4VlG6SmlIs= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:12 2024 by rpki-client on console-fra.rpki-client.org