$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa File: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (raw, json) Hash identifier: EXzs1RRjydPnyzQCXmEbvqEJYOiWImuaPsEiXTrKmnc= Subject key identifier: BF:FC:2C:68:5E:6C:26:05:36:2B:26:92:F8:0A:BE:C1:4F:0E:5A:55 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F432858482F9130596BAF6D2F09C41280 Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa Signing time: Thu 12 Dec 2024 21:02:25 +0000 ROA not before: Thu 12 Dec 2024 21:02:25 +0000 ROA not after: Wed 12 Mar 2025 20:02:25 +0000 asID: 11700 IP address blocks: 199.71.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2f:91:30:59:6b:af:6d:2f:09:c4:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Dec 12 21:02:25 2024 GMT Not After : Mar 12 20:02:25 2025 GMT Subject: CN=a54de6e2-a263-44bf-b392-18526f67b71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f5:2c:e6:e1:5e:1b:22:c4:7c:8c:ee:c9:7a: 8f:ac:af:25:17:d3:63:13:52:f0:74:9c:35:f3:92: cd:29:50:87:c3:a4:17:59:64:00:7c:70:e5:5a:85: b3:3b:3c:29:7e:3c:b0:e3:32:08:37:09:ea:60:63: 07:c9:0d:fd:9e:55:b8:b3:5a:ef:ec:af:2b:49:11: 84:c7:90:3c:bc:8a:24:18:7f:2f:78:f7:a9:c3:52: aa:c9:31:3f:6b:9f:34:95:64:75:ba:94:79:01:32: 36:14:7b:3c:e9:dd:b3:70:9d:65:c5:3f:eb:69:ea: d9:bd:bc:44:02:a8:a3:d1:c0:13:a6:65:28:67:65: f2:2f:b7:e7:d1:4b:74:b1:15:90:e1:48:d6:1a:ed: 40:ca:15:36:82:5c:b6:22:dd:ce:db:56:fe:f1:99: aa:a4:3c:01:a7:09:3b:21:18:42:1a:14:0f:0c:9d: 1e:12:18:ec:93:08:0b:ac:70:ad:6e:64:cf:e7:29: 88:9a:94:a9:d5:ff:39:06:6e:3c:72:64:14:5b:08: ae:3b:8b:07:fc:64:12:12:99:5f:b8:10:6f:b8:f6: 12:16:8b:00:24:1d:34:26:9d:f0:3d:88:93:a5:d8: 2c:fa:41:46:ab:7f:32:f0:bf:f6:76:8c:02:45:ee: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FC:2C:68:5E:6C:26:05:36:2B:26:92:F8:0A:BE:C1:4F:0E:5A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: 199.71.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a5:c6:6e:0c:ac:09:c7:be:c3:da:9c:f1:1c:5d:f7:3e:9a: f3:5d:6e:bc:85:bb:c0:29:30:f6:bf:5e:98:1f:8f:a8:e3:64: 83:a6:b9:b3:e6:01:67:b7:f5:23:76:55:19:d6:92:2e:6c:a2: d3:44:20:24:3e:1f:76:be:57:21:11:71:a6:8d:eb:9e:9e:2d: 29:4a:c4:c4:5d:26:6c:60:a9:fa:31:c1:45:8c:74:0b:2b:54: 1c:f7:ff:13:70:33:cd:d4:ca:5c:d1:df:04:df:c7:81:d6:4e: 6a:23:31:d1:3d:4d:ae:58:c7:7e:39:64:a1:33:bf:18:52:4a: 2c:a1:3e:e8:99:c9:23:f4:83:1b:3f:2c:12:00:72:05:7d:d0: 41:a0:7c:2d:7f:30:13:93:b6:ec:8f:b2:65:7d:26:3f:15:3e: a7:ee:a7:22:55:1d:b5:c0:e2:fb:f8:78:56:f0:33:11:d1:6b: 8a:b9:9f:80:e5:82:0d:b7:28:cc:ea:f8:6f:cb:30:11:5c:dd: 55:ba:dd:74:3e:b9:87:ef:5c:fd:8d:b6:a6:f4:ad:33:65:11: b8:c3:8a:b8:53:70:ab:5f:ff:93:63:10:78:17:f6:d1:25:8f: 0b:05:4b:f4:3d:9e:ac:39:7c:28:aa:fd:f0:5f:8a:6e:d4:31: 60:6d:ed:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgvkTBZa69tLwnEEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI0MTIxMjIxMDIyNVoXDTI1MDMxMjIwMDIyNVowLzEtMCsGA1UEAxMk YTU0ZGU2ZTItYTI2My00NGJmLWIzOTItMTg1MjZmNjdiNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Us5uFeGyLEfIzuyXqPrK8lF9NjE1LwdJw1 85LNKVCHw6QXWWQAfHDlWoWzOzwpfjyw4zIINwnqYGMHyQ39nlW4s1rv7K8rSRGE x5A8vIokGH8vePepw1KqyTE/a580lWR1upR5ATI2FHs86d2zcJ1lxT/raerZvbxE Aqij0cATpmUoZ2XyL7fn0Ut0sRWQ4UjWGu1AyhU2gly2It3O21b+8ZmqpDwBpwk7 IRhCGhQPDJ0eEhjskwgLrHCtbmTP5ymImpSp1f85Bm48cmQUWwiuO4sH/GQSEplf uBBvuPYSFosAJB00Jp3wPYiTpdgs+kFGq38y8L/2dowCRe4B7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/8LGhebCYFNismkvgKvsFPDlpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvODJiZTMyZjgtNmE3Yy0z YWM1LTk1NTktODA3ZGVhNGVjMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0eNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+lxm4MrAnHvsPanPEcXfc+mvNdbryFu8ApMPa/Xpgfj6jjZIOmubPm AWe39SN2VRnWki5sotNEICQ+H3a+VyERcaaN656eLSlKxMRdJmxgqfoxwUWMdAsr VBz3/xNwM83UylzR3wTfx4HWTmojMdE9Ta5Yx345ZKEzvxhSSiyhPuiZySP0gxs/ LBIAcgV90EGgfC1/MBOTtuyPsmV9Jj8VPqfupyJVHbXA4vv4eFbwMxHRa4q5n4Dl gg23KMzq+G/LMBFc3VW63XQ+uYfvXP2Ntqb0rTNlEbjDirhTcKtf/5NjEHgX9tEl jwsFS/Q9nqw5fCiq/fBfim7UMWBt7WA= -----END CERTIFICATE-----Generated at Sat Dec 28 17:54:48 2024 by rpki-client on console-fra.rpki-client.org