$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json) Hash identifier: 5uxWZM19t6RpAcOXNvKW9hDdfXTnlz+olBrraeA7Avw= Subject key identifier: C9:C9:27:B7:2B:6E:23:EA:D2:8E:F3:62:77:2E:41:05:B1:F3:31:23 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F432858472C65D85751DF1A8B578CEEF2 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 394353 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:d8:57:51:df:1a:8b:57:8c:ee:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=78a045e8-0da0-479e-8057-98b17abc1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:cd:74:53:59:cf:88:5e:ac:4c:5e:d2:37: 93:63:f4:20:35:0c:63:91:5e:3b:da:45:33:69:30: 30:54:fb:ba:88:03:b3:c6:0c:75:7d:ca:8d:cd:fe: 57:5f:2d:0a:2a:44:4e:5a:bb:f0:dd:c5:4c:f0:25: 28:6d:03:ad:3c:87:ba:9e:7c:6c:8f:92:e4:05:35: 07:6c:f4:74:c2:ec:c8:7a:4f:07:82:4f:59:ff:64: 2c:cd:51:e8:d1:bc:79:7d:4d:3a:fc:93:1d:7b:bf: 53:2f:ac:49:a4:b7:81:53:27:8b:0e:01:cb:6d:bf: 31:e1:7f:4b:88:0a:d5:ca:c9:9b:ee:9c:7e:07:58: 78:cb:2c:3c:ad:7d:bc:a3:11:2b:24:b4:a3:ed:e9: 6e:5a:79:1b:d7:0c:15:58:da:33:0c:68:c6:ba:97: b9:7b:61:de:6b:f3:c8:25:46:28:f4:38:8d:a3:b5: 07:fa:e3:99:f5:9b:d7:70:b2:8c:31:22:e4:cc:ff: 88:3b:2e:80:5f:d8:09:83:95:ae:84:b5:a7:b5:d9: 72:b6:74:79:3a:c9:49:df:e6:18:98:f1:e5:89:9f: d1:73:4f:5e:d2:80:d5:14:85:60:dd:83:a0:44:f8: 8a:54:b1:0a:6e:24:9c:b3:7f:33:49:fe:78:30:6b: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:27:B7:2B:6E:23:EA:D2:8E:F3:62:77:2E:41:05:B1:F3:31:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d9:1d:76:a9:dd:44:f3:6a:8c:33:0c:bd:5c:b1:21:d1:6a: 0a:4d:7b:45:e5:70:20:62:d8:36:7c:66:f7:10:ae:07:80:45: 00:3c:bd:85:ed:3c:f9:d8:9e:a7:12:c2:9f:2e:bb:70:90:3f: cc:13:c3:77:94:3f:0a:7d:59:78:a8:dd:cc:47:73:f3:40:a3: ab:51:fe:59:43:10:52:7f:39:52:27:f0:85:7a:be:9d:35:2a: 20:13:50:52:ad:98:d6:f8:e2:ed:4e:ab:a0:13:d9:81:a2:ea: 64:46:60:9d:3f:85:e4:47:aa:4b:48:28:da:f0:a0:07:44:07: 85:0d:42:a8:ce:6f:94:31:9c:25:58:3b:68:09:46:a8:49:2f: ed:fc:25:bf:f1:83:46:b6:fa:29:c9:13:50:4b:31:22:ed:64: 49:75:3b:67:f3:ec:b9:fe:1b:c5:4d:0b:03:3f:51:c8:ad:d1: 1d:3f:53:9b:81:87:f8:b5:c5:2f:9b:b7:78:e4:7e:29:20:e4: 7b:40:a3:1d:38:93:83:88:34:0f:ea:28:9c:1f:26:5f:fb:cc: 98:0c:12:ee:16:60:d4:b1:48:b2:a9:ab:78:b3:a4:65:92:d5: 2f:e0:41:5b:8f:27:cd:86:fa:ed:fa:70:09:98:13:3e:32:de: 61:5e:ef:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdhXUd8ai1eM7vIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk NzhhMDQ1ZTgtMGRhMC00NzllLTgwNTctOThiMTdhYmMxZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirNdFNZz4herExe0jeTY/QgNQxjkV472kUz aTAwVPu6iAOzxgx1fcqNzf5XXy0KKkROWrvw3cVM8CUobQOtPIe6nnxsj5LkBTUH bPR0wuzIek8Hgk9Z/2QszVHo0bx5fU06/JMde79TL6xJpLeBUyeLDgHLbb8x4X9L iArVysmb7px+B1h4yyw8rX28oxErJLSj7eluWnkb1wwVWNozDGjGupe5e2Hea/PI JUYo9DiNo7UH+uOZ9ZvXcLKMMSLkzP+IOy6AX9gJg5WuhLWntdlytnR5OslJ3+YY mPHliZ/Rc09e0oDVFIVg3YOgRPiKVLEKbiScs38zSf54MGu2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnJJ7crbiPq0o7zYncuQQWx8zEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZDBmY2MwMzktMmYzMi0z NDNlLWFhNjYtZTIwOTQwNjZkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjZHXap3UTzaowzDL1csSHRagpNe0XlcCBi2DZ8ZvcQrgeARQA8vYXt PPnYnqcSwp8uu3CQP8wTw3eUPwp9WXio3cxHc/NAo6tR/llDEFJ/OVIn8IV6vp01 KiATUFKtmNb44u1Oq6AT2YGi6mRGYJ0/heRHqktIKNrwoAdEB4UNQqjOb5QxnCVY O2gJRqhJL+38Jb/xg0a2+inJE1BLMSLtZEl1O2fz7Ln+G8VNCwM/Ucit0R0/U5uB h/i1xS+bt3jkfikg5HtAox04k4OINA/qKJwfJl/7zJgMEu4WYNSxSLKpq3izpGWS 1S/gQVuPJ82G+u36cAmYEz4y3mFe718= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org