$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37f7ed3b-9d9e-329c-9b2a-b22556270182.roa File: 37f7ed3b-9d9e-329c-9b2a-b22556270182.roa (raw, json) Hash identifier: VfaXf37muCet1NFTU44tfjQ2K3JQe9GQuKJOOJMMPEw= Subject key identifier: 2D:29:77:2E:90:53:00:E9:40:92:20:AF:D3:47:D5:22:26:11:96:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AA12C58FA558EBE091240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37f7ed3b-9d9e-329c-9b2a-b22556270182.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 199.36.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:a1:2c:58:fa:55:8e:be:09:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=f5c29fdc-1847-43a8-a352-3e9a923590e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:eb:0f:8d:1e:c9:2b:96:28:02:8e:1b:c8: a7:90:74:f5:75:c7:77:8e:2f:c6:1a:a7:85:36:da: 05:88:e0:12:a5:c1:b4:52:7f:8e:4a:3e:c7:b2:79: 8f:44:f9:cf:a8:55:31:55:18:3b:8a:a2:7b:a7:b1: 43:2d:c6:41:a9:69:15:5d:6b:79:c9:7a:e1:82:75: bb:25:49:5d:33:fc:06:09:1b:4f:d7:36:df:de:79: 72:fd:30:45:41:d9:b5:f9:04:2b:32:e5:f3:fc:fa: b1:e6:e8:9c:96:3b:49:7a:f0:ae:2f:03:3d:37:bc: 5b:e2:9a:5a:ea:ce:b7:aa:d2:75:21:4f:b6:b9:84: 51:28:96:cb:62:6f:f2:95:68:3e:e2:ce:f8:fc:86: ae:8a:71:10:3d:c4:77:1d:d4:ad:3d:cb:84:dc:c3: 16:cb:b6:dc:a2:1d:23:be:50:99:78:a5:d9:56:52: 1b:1c:42:6b:e4:9a:a0:c1:69:51:8a:b2:00:a8:38: fe:99:d8:8f:40:e3:c7:36:e2:93:18:6b:24:7b:ee: 6b:07:a3:87:49:a1:a5:fc:d1:58:50:68:0b:0f:2c: 95:d9:7d:77:9b:30:bd:67:00:a8:db:7a:2e:af:7d: 0e:8f:83:22:25:1f:37:b2:84:eb:11:f0:83:4f:e5: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:29:77:2E:90:53:00:E9:40:92:20:AF:D3:47:D5:22:26:11:96:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37f7ed3b-9d9e-329c-9b2a-b22556270182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7b:05:c6:51:87:ea:31:45:22:58:6b:3d:70:19:a5:42:d1: 09:d7:6f:17:7c:33:0e:80:84:5f:6d:6a:eb:ec:83:66:f0:80: 32:ee:5d:df:67:df:69:88:ec:fa:d0:57:7c:44:39:0d:24:f4: f0:92:54:6c:d1:b5:a9:33:bc:a9:6b:31:f1:66:01:19:20:0e: ed:07:44:76:29:c5:9e:03:72:db:2d:7c:23:0a:28:e8:cc:6e: 0b:76:c2:1c:60:0d:b7:81:2b:fa:dc:0b:cd:27:a6:65:37:f5: c1:ea:b4:b8:b9:0d:3b:85:db:af:9b:7b:70:c5:f9:d5:b2:9e: 21:8e:cc:fe:30:bc:3b:f9:72:4f:ab:89:e5:7f:f5:13:0d:c8: 9b:51:84:9b:95:ca:b7:18:a4:d6:92:c3:27:30:e4:d7:ba:a7: 3e:79:b2:ca:c8:6e:35:f4:c9:1a:1f:a1:43:c5:b5:3d:df:5b: dd:b1:38:db:c3:35:8f:76:70:eb:3c:b7:c7:9d:05:7f:94:a0: 3f:1b:f2:83:70:d9:f3:79:f5:43:c5:1a:6c:87:ae:3b:81:f7: bd:78:85:ce:b1:5e:71:56:86:74:71:41:18:57:b9:4c:80:66: aa:c6:89:82:73:22:b1:36:66:bc:72:1c:05:44:07:bf:86:71: ec:91:57:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqEsWPpVjr4JEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjVjMjlmZGMtMTg0Ny00M2E4LWEzNTItM2U5YTkyMzU5MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLnrD40eySuWKAKOG8inkHT1dcd3ji/GGqeF NtoFiOASpcG0Un+OSj7HsnmPRPnPqFUxVRg7iqJ7p7FDLcZBqWkVXWt5yXrhgnW7 JUldM/wGCRtP1zbf3nly/TBFQdm1+QQrMuXz/Pqx5uicljtJevCuLwM9N7xb4ppa 6s63qtJ1IU+2uYRRKJbLYm/ylWg+4s74/IauinEQPcR3HdStPcuE3MMWy7bcoh0j vlCZeKXZVlIbHEJr5JqgwWlRirIAqDj+mdiPQOPHNuKTGGske+5rB6OHSaGl/NFY UGgLDyyV2X13mzC9ZwCo23our30Oj4MiJR83soTrEfCDT+W4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0pdy6QUwDpQJIgr9NH1SImEZYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzdmN2VkM2ItOWQ5ZS0z MjljLTliMmEtYjIyNTU2MjcwMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ7BcZRh+oxRSJYaz1wGaVC0QnXbxd8Mw6AhF9tauvsg2bwgDLuXd9n 32mI7PrQV3xEOQ0k9PCSVGzRtakzvKlrMfFmARkgDu0HRHYpxZ4DctstfCMKKOjM bgt2whxgDbeBK/rcC80npmU39cHqtLi5DTuF26+be3DF+dWyniGOzP4wvDv5ck+r ieV/9RMNyJtRhJuVyrcYpNaSwycw5Ne6pz55ssrIbjX0yRofoUPFtT3fW92xONvD NY92cOs8t8edBX+UoD8b8oNw2fN59UPFGmyHrjuB9714hc6xXnFWhnRxQRhXuUyA ZqrGiYJzIrE2ZrxyHAVEB7+GceyRV90= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:10 2024 by rpki-client on console-ams.rpki-client.org