$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: TIqCKiH1JZjmmEqLjEXTQU67HZF0Hh0UL0HPPI50cZU= Subject key identifier: 81:22:DE:73:51:11:72:D1:10:4F:38:82:F4:A2:E4:2A:FF:35:AA:B6 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858472F30806A2A19E886F5EB5500 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:80:6a:2a:19:e8:86:f5:eb:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=8063bdf7-3499-4a04-a59d-a19bc69b18d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:27:c9:20:c5:b1:09:f2:d8:4b:68:df:fb: de:0f:d5:f9:80:07:82:56:93:9f:3c:33:77:11:10: 3b:65:9f:45:2f:47:b7:7a:4c:0e:d5:2f:31:44:cb: 3b:22:14:17:56:f6:d4:e2:b7:d4:e4:fd:bb:87:e8: d5:62:04:7b:a6:81:a7:9c:e9:d1:d5:5e:b7:c7:e4: cd:7a:94:52:65:95:1f:0d:7d:a0:17:6b:c4:35:69: 6a:c4:17:5b:88:1d:64:8f:31:d0:7e:a6:26:f9:84: 8b:cb:69:58:61:5a:e8:e5:b6:da:9d:e7:9d:c4:6e: 7f:68:66:b0:0a:85:ac:04:36:8d:24:4a:50:35:35: 23:97:a0:2c:8c:fb:fa:41:4d:05:aa:d8:c1:4f:65: 39:66:96:a6:84:9b:33:67:1d:6a:97:75:34:f2:4d: 48:b3:dd:96:eb:e6:2b:72:1b:5b:01:7e:fc:21:45: ee:d7:99:7d:a7:73:7a:40:f0:b9:6c:fd:05:b4:32: ed:c6:31:85:a7:67:87:d2:88:9d:db:1d:22:9c:39: 80:78:bf:7e:79:2f:de:25:20:54:ab:08:ef:3c:99: 05:e4:19:1e:07:14:50:c1:c3:12:b6:28:97:4f:8b: 7b:6f:e9:b7:46:30:f0:fa:35:25:f5:36:da:5a:38: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:DE:73:51:11:72:D1:10:4F:38:82:F4:A2:E4:2A:FF:35:AA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e5:24:0a:4b:68:d5:97:69:4e:96:bb:f8:0f:8e:28:1d:9f: 5a:52:4e:3c:4f:2d:7f:20:af:22:73:68:47:23:e7:dc:2f:c6: 32:0e:90:cd:6b:a2:17:20:83:ae:09:b3:e5:4e:96:99:94:ae: 6f:cb:08:f8:38:37:2d:53:2c:f2:e8:18:4d:3e:3e:0b:3c:40: 0f:88:70:35:2f:23:15:09:e0:ca:45:7c:0c:c7:4f:22:02:b6: 6f:93:2e:5d:16:06:ac:f1:f6:ee:cc:7f:b4:54:81:6a:38:75: 75:0d:0c:3b:e1:fe:aa:59:0c:1d:40:e2:ff:bd:6e:0e:97:e3: c9:fc:2d:65:b3:b0:9f:1e:dc:49:b8:fd:b2:06:c5:da:07:37: 97:46:96:29:6c:18:f7:55:72:1f:24:3f:d0:3d:30:77:87:63: 5d:c1:92:3b:bd:ae:b1:89:a5:fa:50:de:4d:5d:35:07:5f:22: 6e:3e:9c:bd:05:76:bc:23:59:ce:86:45:25:17:be:a0:94:2e: 3c:ae:b4:89:61:50:0c:2c:a5:0f:06:14:9b:9d:5d:68:bd:8d: c4:05:e4:0d:2e:1e:18:b3:02:ba:e4:c5:db:85:99:ac:8c:42: 3c:0a:2a:b4:1a:1f:2d:6b:cd:53:2b:59:e9:9c:a2:97:48:13: 0b:0d:81:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIBqKhnohvXrVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk ODA2M2JkZjctMzQ5OS00YTA0LWE1OWQtYTE5YmM2OWIxOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOAnySDFsQny2Eto3/veD9X5gAeCVpOfPDN3 ERA7ZZ9FL0e3ekwO1S8xRMs7IhQXVvbU4rfU5P27h+jVYgR7poGnnOnR1V63x+TN epRSZZUfDX2gF2vENWlqxBdbiB1kjzHQfqYm+YSLy2lYYVro5bbaneedxG5/aGaw CoWsBDaNJEpQNTUjl6AsjPv6QU0FqtjBT2U5ZpamhJszZx1ql3U08k1Is92W6+Yr chtbAX78IUXu15l9p3N6QPC5bP0FtDLtxjGFp2eH0oid2x0inDmAeL9+eS/eJSBU qwjvPJkF5BkeBxRQwcMStiiXT4t7b+m3RjDw+jUl9TbaWjiH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEi3nNREXLREE84gvSi5Cr/Naq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLlJApLaNWXaU6Wu/gPjigdn1pSTjxPLX8gryJzaEcj59wvxjIOkM1r ohcgg64Js+VOlpmUrm/LCPg4Ny1TLPLoGE0+Pgs8QA+IcDUvIxUJ4MpFfAzHTyIC tm+TLl0WBqzx9u7Mf7RUgWo4dXUNDDvh/qpZDB1A4v+9bg6X48n8LWWzsJ8e3Em4 /bIGxdoHN5dGlilsGPdVch8kP9A9MHeHY13Bkju9rrGJpfpQ3k1dNQdfIm4+nL0F drwjWc6GRSUXvqCULjyutIlhUAwspQ8GFJudXWi9jcQF5A0uHhizArrkxduFmayM QjwKKrQaHy1rzVMrWemcopdIEwsNgfY= -----END CERTIFICATE-----Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org