$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: 1ZBZpCGkipEzc17lSPOr43utkRfjX1rqnQLxipXMyq8= Subject key identifier: 7B:98:F4:5C:93:C6:26:9E:20:BA:EB:68:1C:F9:FD:DB:E0:2C:5B:13 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285847B53151372A1904BD8D3F0C20 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:51:37:2a:19:04:bd:8d:3f:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=03889029-266d-4877-91f5-c0d21bc52810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f8:c5:8f:40:59:a7:c4:26:a5:79:64:49:c4: 10:9e:42:5c:11:d0:a6:fb:07:27:41:52:15:bd:37: 07:62:f7:d6:c1:11:e1:2b:66:82:95:51:12:03:cd: bd:ec:c5:34:00:4b:08:af:3c:5c:33:8d:a1:7f:dd: f1:16:86:f7:07:e6:19:9a:5a:c9:b8:4c:61:12:9d: 7c:98:c1:87:5d:5a:80:00:d1:09:cc:a0:da:15:04: ee:ce:e6:b0:f4:4e:ba:97:99:90:91:9d:33:d7:57: 53:56:8b:88:df:4e:ab:f7:bc:03:21:e4:88:1b:57: 17:7c:c3:08:c2:f7:ab:2a:8c:98:f3:00:d4:8a:01: 1e:46:58:2f:68:a8:a3:25:6c:2d:93:d2:8a:c7:ad: a5:a0:1e:47:51:29:91:9b:d2:84:74:1c:e5:33:d8: cc:53:d8:12:9a:36:ce:ad:b0:49:28:e0:6f:1c:a6: bb:92:ac:cf:f0:4d:41:1e:88:5b:8b:57:27:97:69: a9:6f:81:9b:8c:0f:66:89:85:85:77:58:ed:3a:af: fe:25:c8:70:35:77:4a:a2:46:81:8c:ee:9d:91:f7: 22:9a:fc:d5:53:4a:92:89:f1:34:02:ef:5e:36:61: 71:e3:9e:b7:28:72:8e:ad:28:be:60:39:30:b9:fa: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:98:F4:5C:93:C6:26:9E:20:BA:EB:68:1C:F9:FD:DB:E0:2C:5B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ca:85:d1:57:f5:f2:e2:ab:84:82:8c:e5:a0:40:9e:7e:4e: 32:06:08:a4:04:39:42:bf:db:83:c6:fc:f1:ae:b7:5f:f3:b8: b5:fb:8f:5c:48:b7:39:ca:f9:b5:d1:09:9b:29:3c:83:bf:43: be:d9:74:53:a2:1a:0c:30:b1:bf:21:22:9b:b4:ea:37:2c:66: 09:7b:fb:82:9a:46:6f:d0:6f:6c:57:96:1a:5f:4c:b3:78:45: 92:44:62:a3:8c:a5:44:d5:0c:ab:b9:30:5c:ae:9f:12:5e:69: 60:35:d8:d9:cb:00:e0:cb:79:ee:d2:ab:ff:49:f0:d2:e0:e2: 08:ce:05:d5:27:9c:6d:a8:16:8a:90:a7:01:19:c0:7d:e9:15: f0:0c:95:ca:7b:61:78:08:6e:de:32:69:8b:e3:0e:b3:d1:72: 6f:24:0e:1a:0c:49:f7:6a:f9:04:f8:38:be:d3:2c:7b:b2:dc: 97:ce:1a:ba:5f:04:50:33:7f:3b:e4:26:80:04:5e:12:ae:c2: 0f:af:59:29:7e:8d:7c:fd:e2:98:43:38:2c:d3:26:85:46:fd: 5e:03:34:3f:4e:4b:49:2d:ec:93:9b:24:a0:65:04:54:4d:8e: e8:88:46:92:22:9c:e4:77:f2:39:f9:4f:d3:c9:3a:74:e1:db: ed:f5:55:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVE3KhkEvY0/DCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk MDM4ODkwMjktMjY2ZC00ODc3LTkxZjUtYzBkMjFiYzUyODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPjFj0BZp8QmpXlkScQQnkJcEdCm+wcnQVIV vTcHYvfWwRHhK2aClVESA8297MU0AEsIrzxcM42hf93xFob3B+YZmlrJuExhEp18 mMGHXVqAANEJzKDaFQTuzuaw9E66l5mQkZ0z11dTVouI306r97wDIeSIG1cXfMMI wverKoyY8wDUigEeRlgvaKijJWwtk9KKx62loB5HUSmRm9KEdBzlM9jMU9gSmjbO rbBJKOBvHKa7kqzP8E1BHohbi1cnl2mpb4GbjA9miYWFd1jtOq/+JchwNXdKokaB jO6dkfcimvzVU0qSifE0Au9eNmFx4563KHKOrSi+YDkwufqmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuY9FyTxiaeILrraBz5/dvgLFsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHKhdFX9fLiq4SCjOWgQJ5+TjIGCKQEOUK/24PG/PGut1/zuLX7j1xI tznK+bXRCZspPIO/Q77ZdFOiGgwwsb8hIpu06jcsZgl7+4KaRm/Qb2xXlhpfTLN4 RZJEYqOMpUTVDKu5MFyunxJeaWA12NnLAODLee7Sq/9J8NLg4gjOBdUnnG2oFoqQ pwEZwH3pFfAMlcp7YXgIbt4yaYvjDrPRcm8kDhoMSfdq+QT4OL7TLHuy3JfOGrpf BFAzfzvkJoAEXhKuwg+vWSl+jXz94phDOCzTJoVG/V4DND9OS0kt7JObJKBlBFRN juiIRpIinOR38jn5T9PJOnTh2+31Vck= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:30 2024 by rpki-client on console-fra.rpki-client.org