$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa File: ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa (raw, json) Hash identifier: d6qf8jNVfxc49Z3frVvxFr++0E3RX40GudQrcQnLzr4= Subject key identifier: BB:D4:1C:1D:A6:D1:67:8B:0B:05:99:DA:55:2A:9F:96:E0:5F:37:68 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858479D76DD17E9E7BB1AFE006900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 397215 IP address blocks: 199.7.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:dd:17:e9:e7:bb:1a:fe:00:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=437f15ab-c6e5-478e-8354-e8c4a94b4780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:c4:c9:56:4f:73:b4:65:da:86:cc:3b:27: d8:e7:05:79:0e:c9:ef:a3:93:ab:04:1b:b5:cd:e5: 60:8d:e9:47:7f:ac:91:53:80:4c:bd:90:bc:4e:66: 4f:e0:f0:db:65:64:1e:3d:55:b3:5f:3c:6a:75:a2: 0a:a9:4a:11:ed:cd:c0:ea:f7:0d:39:ad:d7:5a:b8: 54:f8:80:bf:03:ef:b0:63:c0:82:93:56:19:b5:c4: 30:86:24:d2:b6:51:ab:7f:1d:80:99:ca:e4:1a:4e: 1b:45:e4:f0:bc:dc:02:79:6d:90:c7:84:be:54:24: 38:a2:64:25:af:dc:0e:bf:e8:14:f1:55:1c:39:04: cd:01:a0:bb:47:a6:dd:9e:5d:6c:39:e3:07:4f:d5: 0b:68:a8:22:b2:a9:13:37:e4:d2:03:7a:cb:ff:75: 90:cf:9e:45:47:11:5e:aa:da:12:2c:02:a4:c6:5d: b6:14:fd:00:f5:b3:0f:71:2f:39:c7:fc:6f:60:14: 93:07:54:ef:a2:7b:a8:3d:02:2f:3c:4c:aa:06:a3: d3:64:f0:26:11:fc:00:59:6e:cd:95:f7:1c:40:80: 73:4b:65:1d:28:6e:3d:78:61:cd:04:4e:eb:19:46: 36:49:e6:88:ce:8e:de:7f:25:2f:6f:46:cc:1c:8e: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:1C:1D:A6:D1:67:8B:0B:05:99:DA:55:2A:9F:96:E0:5F:37:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab01e86f-45a5-388c-87fc-1ec000e5f18c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5e:62:e0:46:61:ab:f1:3d:d5:d6:ab:7d:4e:b1:ec:91:9c: 23:53:8f:22:cc:b7:f1:88:89:31:7f:a0:87:9b:f7:f7:60:5d: cf:62:44:0a:6f:49:93:00:c7:6d:70:62:81:28:c3:f1:a1:76: 49:a2:54:05:a2:a6:fd:9a:c8:2b:b2:bf:a0:b8:12:c4:1b:16: 0b:ab:55:50:a6:9e:50:d4:2a:83:a2:4d:1b:14:77:7c:85:06: b9:7b:57:c4:ac:2d:60:a4:6f:ea:20:47:57:b4:5f:9e:76:ef: 99:90:7e:76:a1:9a:1b:e3:a2:ac:44:77:04:4d:cf:53:94:7f: 98:6b:03:f3:e8:f3:87:77:cb:e9:8d:46:cc:15:8c:d0:bf:7e: 48:48:08:ef:d3:42:f6:a8:3d:f7:a6:e9:45:73:62:ec:31:3e: 6c:fe:ec:ff:48:72:29:de:7e:10:00:89:51:e8:e2:b9:8c:0f: 47:00:16:cc:1c:b5:0d:2e:64:fb:01:ef:c5:9a:f7:6c:43:94: 42:66:15:96:ef:84:1e:8d:42:b6:18:d8:76:d9:16:b0:66:6c: 70:97:63:71:32:30:bf:60:61:cd:56:9e:e0:35:82:e7:e9:18: c0:4d:e7:c1:ca:8c:c0:78:44:8f:6f:08:14:99:44:37:53:97: 2b:e3:78:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddt0X6ee7Gv4AaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NDM3ZjE1YWItYzZlNS00NzhlLTgzNTQtZThjNGE5NGI0NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvHEyVZPc7Rl2obMOyfY5wV5Dsnvo5OrBBu1 zeVgjelHf6yRU4BMvZC8TmZP4PDbZWQePVWzXzxqdaIKqUoR7c3A6vcNOa3XWrhU +IC/A++wY8CCk1YZtcQwhiTStlGrfx2AmcrkGk4bReTwvNwCeW2Qx4S+VCQ4omQl r9wOv+gU8VUcOQTNAaC7R6bdnl1sOeMHT9ULaKgisqkTN+TSA3rL/3WQz55FRxFe qtoSLAKkxl22FP0A9bMPcS85x/xvYBSTB1TvonuoPQIvPEyqBqPTZPAmEfwAWW7N lfccQIBzS2UdKG49eGHNBE7rGUY2SeaIzo7efyUvb0bMHI5AhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvUHB2m0WeLCwWZ2lUqn5bgXzdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWIwMWU4NmYtNDVhNS0z ODhjLTg3ZmMtMWVjMDAwZTVmMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1eYuBGYavxPdXWq31OseyRnCNTjyLMt/GIiTF/oIeb9/dgXc9iRApv SZMAx21wYoEow/GhdkmiVAWipv2ayCuyv6C4EsQbFgurVVCmnlDUKoOiTRsUd3yF Brl7V8SsLWCkb+ogR1e0X55275mQfnahmhvjoqxEdwRNz1OUf5hrA/Po84d3y+mN RswVjNC/fkhICO/TQvaoPfem6UVzYuwxPmz+7P9IcinefhAAiVHo4rmMD0cAFswc tQ0uZPsB78Wa92xDlEJmFZbvhB6NQrYY2HbZFrBmbHCXY3EyML9gYc1WnuA1gufp GMBN58HKjMB4RI9vCBSZRDdTlyvjeNI= -----END CERTIFICATE-----Generated at Mon Nov 25 20:19:00 2024 by rpki-client on console-fra.rpki-client.org