$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/1960f65a-0901-3ab8-8fa8-28a7e902c240.roa File: 1960f65a-0901-3ab8-8fa8-28a7e902c240.roa (raw, json) Hash identifier: fRs3KIiVHwP3ILGKwhcaHP0lZrL6VvVtoNG/GWK3CiY= Subject key identifier: 7A:A7:37:71:5B:F4:3E:3B:AF:21:66:97:25:CA:DD:A2:78:16:42:9F Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F43285847CFD4A49469407C64C9754E80 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/1960f65a-0901-3ab8-8fa8-28a7e902c240.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:a4:94:69:40:7c:64:c9:75:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=062e4c81-0c56-4900-a449-d3505163ed71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:b9:34:72:ee:5d:87:e2:9c:f0:dd:b5:45: 7c:64:1b:ef:ff:87:52:99:ab:14:ba:9c:5b:6b:4f: 4e:2a:23:b1:76:70:c9:86:91:59:3c:ad:12:76:9b: 8b:8b:a9:7c:1a:8c:9e:f0:e2:08:b1:eb:82:06:18: 5c:04:c0:f6:d6:7f:d7:20:2f:c8:74:9f:0a:5d:74: d7:96:17:a4:38:f5:c9:da:95:ce:e2:1d:d0:ca:ba: cc:39:f1:ba:b7:04:0f:da:78:48:e0:9d:15:8e:68: ff:b3:3c:80:34:e6:e7:b7:c7:ac:ad:5e:d0:57:0e: 38:6f:d9:bf:e3:9f:16:f9:2e:ca:60:a0:86:ea:b8: 79:f2:15:a2:5e:27:3a:44:62:7b:50:d6:e6:4f:67: f0:2d:5a:12:30:f4:43:1f:ac:ce:4c:03:7d:36:d5: e7:a2:32:6f:86:8c:7e:11:17:4a:49:80:64:13:f6: aa:08:8c:56:41:9c:bf:fb:0f:06:a8:6d:5a:5e:74: bb:52:53:a7:81:2c:f5:47:cd:6b:57:cd:ff:e6:6b: 91:0c:c3:b8:e9:9a:b0:d6:76:d2:12:38:1c:18:4a: 41:6f:d7:dc:3e:9e:62:ad:42:99:e7:29:4b:4c:19: 17:bb:7a:33:49:c7:6f:ae:0f:c8:84:f1:82:68:d3: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:37:71:5B:F4:3E:3B:AF:21:66:97:25:CA:DD:A2:78:16:42:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/1960f65a-0901-3ab8-8fa8-28a7e902c240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:a6:d0:29:14:27:0c:e5:16:30:a4:5f:fa:61:3f:94:a2: 03:00:d1:ec:c8:ba:77:80:5f:d3:b5:fc:8f:4b:38:74:3d:3e: 31:c5:ed:c3:5f:ef:ba:ce:9d:2d:fd:87:b8:57:14:68:db:21: 76:81:e2:a2:37:1e:ba:f9:c5:c6:42:e4:07:d4:33:b6:67:89: 53:15:41:56:e6:ca:12:9c:05:e6:cf:65:26:ed:a9:02:7e:19: 24:3c:56:14:58:71:d2:d7:13:91:05:ba:0a:38:70:45:b9:b2: ef:ff:3c:4f:9e:29:cf:f4:92:b0:3b:1c:bd:c2:a2:d3:db:fc: b1:72:5d:ca:96:10:85:4f:8f:1d:ac:be:74:ef:43:42:de:39: 0a:06:33:54:c1:1a:f5:d2:0b:7d:f5:d3:d7:a9:f0:82:2e:f9: 68:6f:63:fc:a0:ff:6f:5e:c3:21:58:bb:ee:54:5c:49:f8:c2: d6:35:2f:f2:44:11:44:cf:48:20:5a:91:37:d3:5a:b8:97:37: 51:15:92:f1:52:d8:04:52:71:36:ae:de:82:bb:5c:35:79:29: 92:23:90:39:e0:ec:f4:17:ec:a2:63:0d:f6:85:28:ae:00:47: 2c:d2:11:d1:f7:38:03:71:cc:4e:88:e6:7c:53:bd:ca:45:ee: 5d:de:b0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1KSUaUB8ZMl1ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MDYyZTRjODEtMGM1Ni00OTAwLWE0NDktZDM1MDUxNjNlZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ65NHLuXYfinPDdtUV8ZBvv/4dSmasUupxb a09OKiOxdnDJhpFZPK0SdpuLi6l8Goye8OIIseuCBhhcBMD21n/XIC/IdJ8KXXTX lhekOPXJ2pXO4h3QyrrMOfG6twQP2nhI4J0Vjmj/szyANObnt8esrV7QVw44b9m/ 458W+S7KYKCG6rh58hWiXic6RGJ7UNbmT2fwLVoSMPRDH6zOTAN9NtXnojJvhox+ ERdKSYBkE/aqCIxWQZy/+w8GqG1aXnS7UlOngSz1R81rV83/5muRDMO46Zqw1nbS EjgcGEpBb9fcPp5irUKZ5ylLTBkXu3ozScdvrg/IhPGCaNOWGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqnN3Fb9D47ryFmlyXK3aJ4FkKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvMTk2MGY2NWEtMDkwMS0z YWI4LThmYTgtMjhhN2U5MDJjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfOptApFCcM5RYwpF/6YT+UogMA0ezIuneAX9O1/I9LOHQ9PjHF7cNf 77rOnS39h7hXFGjbIXaB4qI3Hrr5xcZC5AfUM7ZniVMVQVbmyhKcBebPZSbtqQJ+ GSQ8VhRYcdLXE5EFugo4cEW5su//PE+eKc/0krA7HL3CotPb/LFyXcqWEIVPjx2s vnTvQ0LeOQoGM1TBGvXSC33109ep8IIu+WhvY/yg/29ewyFYu+5UXEn4wtY1L/JE EUTPSCBakTfTWriXN1EVkvFS2ARScTau3oK7XDV5KZIjkDng7PQX7KJjDfaFKK4A RyzSEdH3OANxzE6I5nxTvcpF7l3esG4= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:31 2024 by rpki-client on console-fra.rpki-client.org