$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: uobU8FUUZigd/ZHFPh21PQ4cw0u+xBZxcU+br3gxRec= Subject key identifier: AB:B0:50:A2:81:E3:1C:E0:08:FA:6E:D9:E4:F6:DD:1F:ED:33:AB:78 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F432858480259BC193A60438A51CF5780 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Tue 26 Nov 2024 16:19:18 +0000 ROA not before: Tue 26 Nov 2024 16:19:18 +0000 ROA not after: Mon 24 Feb 2025 16:19:18 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:59:bc:19:3a:60:43:8a:51:cf:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Nov 26 16:19:18 2024 GMT Not After : Feb 24 16:19:18 2025 GMT Subject: CN=ced14d1a-90be-4f59-a317-faf6cafde4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:8b:97:5e:50:b8:e8:13:4b:1b:31:79:c6: 06:7b:d7:92:51:9d:f9:c3:33:1e:45:3c:4c:94:d5: e1:36:02:94:69:15:6d:ec:6b:ce:b6:66:32:90:6f: 51:6f:a3:4a:81:f2:ea:fe:a9:85:ab:66:f5:fa:ff: c8:ec:c9:92:4d:12:40:c7:7c:73:58:91:9f:65:3f: cd:ca:38:ae:e9:3c:8a:3b:d3:d4:99:ee:38:58:28: 49:b3:21:c8:45:5b:d4:e7:b5:49:9f:97:69:12:2d: 19:8f:3c:c0:f3:d6:1a:d9:55:99:90:f6:9d:f5:24: f0:84:52:c5:a5:f8:22:54:32:30:79:86:51:ec:50: ea:f1:fd:1d:47:c6:9d:53:e2:8d:28:fa:f6:29:64: ae:06:56:72:0f:61:79:97:a6:c5:d4:70:30:bf:01: 4a:9d:11:83:7c:44:b5:2e:c4:aa:cf:21:f6:54:b5: 6c:47:f0:f6:f2:5f:ef:5b:de:f0:c4:01:f2:1c:93: 46:aa:9d:70:bb:ad:27:47:49:20:33:8a:60:cc:8a: 42:4f:e2:e4:f2:8d:b3:e0:e7:e9:11:f5:84:5b:fa: 86:fa:82:7b:f3:4f:37:09:2b:fc:b2:14:db:82:40: 0e:6d:54:49:16:f5:7c:e2:d0:28:d1:d7:c6:29:fe: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B0:50:A2:81:E3:1C:E0:08:FA:6E:D9:E4:F6:DD:1F:ED:33:AB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:99:ef:05:4f:61:01:75:10:f5:e2:45:96:7f:c4:22:14:cd: c9:4f:57:f3:c5:51:75:db:97:d9:8e:e1:63:9e:a5:f6:c1:4d: d0:ed:5e:97:bc:9c:16:fa:fe:e1:df:ae:57:6c:67:88:23:ed: e0:e2:12:a1:db:73:38:f1:d8:1e:ff:8d:c1:41:38:24:62:15: 13:ff:13:1b:38:32:46:67:0f:4c:f8:35:08:90:6e:80:10:f2: ac:75:00:cc:29:98:d6:2b:c4:29:1e:52:b1:1c:d3:b3:a8:e0: 10:bc:c0:41:c2:34:56:20:49:f8:4a:2f:da:ae:82:fc:ae:45: 0b:0f:0a:8c:c8:46:fd:ca:83:87:15:a4:8a:6a:4f:2e:48:c6: 55:93:73:66:8d:b8:98:b3:51:d8:fc:9e:f1:38:81:0a:ab:14: 04:3b:a7:7e:0a:76:fd:3c:19:55:37:e5:ba:57:e0:6b:de:e7: 6d:88:c5:b8:63:a1:3a:08:06:d1:46:6f:88:af:36:f2:39:ed: 1c:4f:0a:18:41:21:96:5f:d1:98:9e:d7:46:b1:5c:e8:70:98: cd:6f:6e:3b:4a:6c:ed:0a:0a:cb:4a:39:4d:13:85:2c:15:ce: 57:83:84:7c:8b:7c:e1:66:e5:3f:e5:91:68:5c:89:35:3b:17: 33:c7:9d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCWbwZOmBDilHPV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI0MTEyNjE2MTkxOFoXDTI1MDIyNDE2MTkxOFowLzEtMCsGA1UEAxMk Y2VkMTRkMWEtOTBiZS00ZjU5LWEzMTctZmFmNmNhZmRlNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWLl15QuOgTSxsxecYGe9eSUZ35wzMeRTxM lNXhNgKUaRVt7GvOtmYykG9Rb6NKgfLq/qmFq2b1+v/I7MmSTRJAx3xzWJGfZT/N yjiu6TyKO9PUme44WChJsyHIRVvU57VJn5dpEi0ZjzzA89Ya2VWZkPad9STwhFLF pfgiVDIweYZR7FDq8f0dR8adU+KNKPr2KWSuBlZyD2F5l6bF1HAwvwFKnRGDfES1 LsSqzyH2VLVsR/D28l/vW97wxAHyHJNGqp1wu60nR0kgM4pgzIpCT+Lk8o2z4Ofp EfWEW/qG+oJ78083CSv8shTbgkAObVRJFvV84tAo0dfGKf7WHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuwUKKB4xzgCPpu2eT23R/tM6t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeZ7wVPYQF1EPXiRZZ/xCIUzclPV/PFUXXbl9mO4WOepfbBTdDtXpe8 nBb6/uHfrldsZ4gj7eDiEqHbczjx2B7/jcFBOCRiFRP/Exs4MkZnD0z4NQiQboAQ 8qx1AMwpmNYrxCkeUrEc07Oo4BC8wEHCNFYgSfhKL9qugvyuRQsPCozIRv3Kg4cV pIpqTy5IxlWTc2aNuJizUdj8nvE4gQqrFAQ7p34Kdv08GVU35bpX4Gve522Ixbhj oToIBtFGb4ivNvI57RxPChhBIZZf0Zie10axXOhwmM1vbjtKbO0KCstKOU0ThSwV zleDhHyLfOFm5T/lkWhciTU7FzPHnd4= -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org