$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa File: 3f4fade1-a438-3112-a00d-10ea443d520e.roa (raw, json) Hash identifier: Kjom7NJPjZSYB8IF7Lqry6mXL9L/VCphgW+uhXCsGMI= Subject key identifier: AE:90:9B:B2:77:82:EC:BF:A6:3B:16:34:B1:A6:04:F9:80:66:9B:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475216140EB51CD942E1C94280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 20940 IP address blocks: 173.222.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:14:0e:b5:1c:d9:42:e1:c9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=7a13c871-1ecd-42bc-924b-8cee4a7b9c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:8b:9a:79:5e:b9:26:a4:01:46:7d:3d:40: c2:33:dc:a1:37:70:bd:b6:d2:e6:0e:1b:2b:02:2e: e3:6f:a0:8c:24:cd:fc:f5:7c:e9:75:e0:d3:c3:ef: 04:41:78:04:1f:69:b5:eb:b2:08:44:e4:e6:77:95: 08:b5:fc:7d:e6:8f:72:87:88:8d:91:bd:24:f1:1c: 4d:57:a4:43:79:7d:ce:0e:93:47:f0:9e:de:10:65: 75:ee:62:98:f2:58:4d:97:3a:d6:25:f0:18:d8:14: 49:b3:5a:7c:92:55:b5:d9:38:ae:9f:73:5a:20:9a: 1c:9f:0b:2f:5d:54:d6:b6:a5:21:09:ba:e5:00:92: 39:10:ef:ec:60:48:05:f0:5d:15:19:67:89:d4:15: 2c:19:51:7c:77:a6:6e:b9:1b:ee:69:12:9b:1d:51: da:5c:38:c1:d7:f8:e4:55:d4:c0:4b:38:08:2f:1c: 00:22:f3:59:8e:ce:a3:53:41:3e:ce:f4:34:c5:22: 89:82:c7:e5:f4:a1:f3:fc:ac:df:88:1b:77:01:4c: a1:41:51:8f:43:73:ef:48:05:13:90:03:b8:ac:6f: 24:ce:78:22:6c:2a:00:b6:b4:68:8f:32:7f:99:af: 88:bb:35:74:95:26:e6:92:31:d2:39:1f:cd:a9:a9: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:9B:B2:77:82:EC:BF:A6:3B:16:34:B1:A6:04:F9:80:66:9B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2b:ef:89:91:e9:f1:1c:8d:14:49:83:c4:de:39:7e:22:4e: 48:14:a6:eb:d9:58:0f:af:34:3b:36:2a:e2:6d:03:6c:05:8f: 6c:df:29:aa:f6:66:1a:d6:1d:f4:bf:e2:71:d9:9b:c7:59:4f: 6c:f8:65:6d:19:ad:e7:86:b4:a7:ec:13:af:fe:1b:17:f2:1d: 37:41:3f:5d:a0:c7:dd:c5:6b:9f:58:16:d4:21:55:38:26:e1: 8b:c2:76:07:5c:d6:43:b2:53:88:6a:4f:2d:8d:c8:0b:16:b9: 23:91:3e:c8:1b:c7:68:b7:3d:47:83:9c:d8:b1:18:0d:97:99: 28:4d:31:17:d3:5d:9a:d3:e4:e7:ec:23:4b:eb:97:ac:88:f9: b4:cd:d5:78:40:65:f1:34:23:be:7f:1b:ed:84:fe:58:d5:36: 9f:a5:90:0a:35:b7:42:c4:06:1e:d8:d7:89:47:1f:3d:1d:03: 36:7c:a4:8f:b6:d2:5e:d9:4f:ab:3b:7a:02:91:24:0c:bb:b4: cc:9c:0a:ff:62:e8:a6:a5:5c:2a:ea:07:c9:fd:6d:bc:23:ec: 43:1b:fd:69:a2:18:63:94:7c:a0:9d:7e:19:ca:39:6f:52:17: 6b:b9:49:47:11:f3:48:12:cd:ff:1f:ec:e6:fc:51:96:dd:24: fa:1e:11:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhQOtRzZQuHJQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk N2ExM2M4NzEtMWVjZC00MmJjLTkyNGItOGNlZTRhN2I5YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRiLmnleuSakAUZ9PUDCM9yhN3C9ttLmDhsr Ai7jb6CMJM389XzpdeDTw+8EQXgEH2m167IIROTmd5UItfx95o9yh4iNkb0k8RxN V6RDeX3ODpNH8J7eEGV17mKY8lhNlzrWJfAY2BRJs1p8klW12Tiun3NaIJocnwsv XVTWtqUhCbrlAJI5EO/sYEgF8F0VGWeJ1BUsGVF8d6ZuuRvuaRKbHVHaXDjB1/jk VdTASzgILxwAIvNZjs6jU0E+zvQ0xSKJgsfl9KHz/KzfiBt3AUyhQVGPQ3PvSAUT kAO4rG8kzngibCoAtrRojzJ/ma+IuzV0lSbmkjHSOR/Nqal9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6Qm7J3guy/pjsWNLGmBPmAZptIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0ZmFkZTEtYTQzOC0z MTEyLWEwMGQtMTBlYTQ0M2Q1MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsr74mR6fEcjRRJg8TeOX4iTkgUpuvZWA+vNDs2KuJtA2wFj2zfKar2 ZhrWHfS/4nHZm8dZT2z4ZW0ZreeGtKfsE6/+GxfyHTdBP12gx93Fa59YFtQhVTgm 4YvCdgdc1kOyU4hqTy2NyAsWuSORPsgbx2i3PUeDnNixGA2XmShNMRfTXZrT5Ofs I0vrl6yI+bTN1XhAZfE0I75/G+2E/ljVNp+lkAo1t0LEBh7Y14lHHz0dAzZ8pI+2 0l7ZT6s7egKRJAy7tMycCv9i6KalXCrqB8n9bbwj7EMb/WmiGGOUfKCdfhnKOW9S F2u5SUcR80gSzf8f7Ob8UZbdJPoeEWk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:21 2024 by rpki-client on console-ams.rpki-client.org