$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa File: 92644b99-55ad-3d17-a93f-570da3f56b87.roa (raw, json) Hash identifier: TOYMigMvS1+jBcslSDFnA2ojX0umGLNEXDsCTgJYtBY= Subject key identifier: BA:76:EE:C9:29:EB:00:A6:19:A5:E3:D7:DC:55:98:18:D9:C1:1F:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E35F76A6FDCB12C2F9A9D580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 54113 IP address blocks: 199.36.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:76:a6:fd:cb:12:c2:f9:a9:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=eb6cdcb2-e272-4f7a-958e-5eaa8acd4586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:61:e2:e9:1f:b3:ca:ef:27:a6:20:54:69:24: b4:66:e3:6b:1b:b1:12:eb:8f:e8:31:b5:8f:92:71: c5:cd:2b:6d:ca:f7:06:53:47:cf:14:51:09:e3:98: d0:76:58:d3:88:11:5e:d1:c0:b7:78:17:f1:b6:25: f2:cb:45:43:15:42:9a:c0:59:be:b6:d5:9c:7d:fe: d8:9c:32:4c:d3:da:ec:cc:a6:0e:9d:a8:38:c6:15: 89:45:03:7b:ba:7c:48:54:42:0b:a4:fe:69:00:00: 9c:f4:ee:bb:33:12:36:ee:93:4f:f7:65:0a:de:9c: 2f:3b:3f:41:ee:1a:d2:05:52:45:6e:93:43:a9:4e: 2f:77:58:8b:f4:86:d1:c1:cb:37:72:cf:4b:c0:9d: 86:cf:bd:cb:1e:d8:38:aa:54:56:64:a4:f0:26:09: 2b:51:96:62:8a:e8:82:7a:19:6d:95:7b:64:b2:96: b7:73:91:df:80:4e:2b:a7:06:71:75:a1:a1:62:f2: 8e:aa:14:c9:ed:6e:23:03:c6:ba:92:f4:56:d0:47: b1:3b:51:75:b2:d3:8b:33:69:b3:e9:0d:17:09:eb: 3a:0b:e9:fe:71:1a:07:97:b2:b4:fb:e4:5b:46:75: d3:54:2d:9d:0c:ac:ad:1c:74:5f:94:a2:9a:79:3e: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:EE:C9:29:EB:00:A6:19:A5:E3:D7:DC:55:98:18:D9:C1:1F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:98:f9:e3:b5:4a:98:56:0c:ed:36:2a:00:71:6d:41:82:7e: 7e:b3:ab:0b:ca:26:9c:53:90:1a:2a:42:38:13:94:32:37:a7: aa:5b:c0:de:57:c9:78:81:6f:7b:f2:b0:62:59:c6:1c:2b:43: 3a:40:ef:5d:20:07:db:12:53:51:bf:5d:66:54:e7:f5:87:12: 0c:9a:28:5b:70:7b:05:59:19:b7:ed:f4:ba:cf:49:53:c9:1c: 08:86:23:59:d8:a4:77:ac:f7:d8:be:50:87:ad:09:43:bb:b8: c7:98:b0:ce:6b:33:3b:df:fe:3d:e5:ad:fb:e4:1e:e1:6a:e4: f3:c2:1c:66:3b:76:a3:95:68:d3:52:48:ca:0c:dd:de:68:e4: 28:5f:78:d5:f4:12:c4:9c:ec:51:89:da:b0:5a:d3:b0:2f:89: aa:37:10:9c:fe:c6:53:78:04:88:89:fa:93:27:d1:65:9c:29: 07:6f:91:5b:b1:0e:e4:f6:c4:a2:a7:a0:58:13:db:f6:23:9a: 25:df:24:56:6b:48:a9:7c:af:1e:8a:66:90:3d:00:11:ea:ee: f1:5b:69:f6:c3:1d:f6:e1:e8:a2:37:25:b7:1a:7d:63:c4:a0: d1:f8:5a:00:30:b3:de:c4:9c:04:38:37:d5:79:8c:c6:bb:2f: e2:92:55:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3am/csSwvmp1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWI2Y2RjYjItZTI3Mi00ZjdhLTk1OGUtNWVhYThhY2Q0NTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52Hi6R+zyu8npiBUaSS0ZuNrG7ES64/oMbWP knHFzSttyvcGU0fPFFEJ45jQdljTiBFe0cC3eBfxtiXyy0VDFUKawFm+ttWcff7Y nDJM09rszKYOnag4xhWJRQN7unxIVEILpP5pAACc9O67MxI27pNP92UK3pwvOz9B 7hrSBVJFbpNDqU4vd1iL9IbRwcs3cs9LwJ2Gz73LHtg4qlRWZKTwJgkrUZZiiuiC ehltlXtkspa3c5HfgE4rpwZxdaGhYvKOqhTJ7W4jA8a6kvRW0EexO1F1stOLM2mz 6Q0XCes6C+n+cRoHl7K0++RbRnXTVC2dDKytHHRflKKaeT4h5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp27skp6wCmGaXj19xVmBjZwR8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTI2NDRiOTktNTVhZC0z ZDE3LWE5M2YtNTcwZGEzZjU2Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaY+eO1SphWDO02KgBxbUGCfn6zqwvKJpxTkBoqQjgTlDI3p6pbwN5X yXiBb3vysGJZxhwrQzpA710gB9sSU1G/XWZU5/WHEgyaKFtwewVZGbft9LrPSVPJ HAiGI1nYpHes99i+UIetCUO7uMeYsM5rMzvf/j3lrfvkHuFq5PPCHGY7dqOVaNNS SMoM3d5o5ChfeNX0EsSc7FGJ2rBa07Aviao3EJz+xlN4BIiJ+pMn0WWcKQdvkVux DuT2xKKnoFgT2/YjmiXfJFZrSKl8rx6KZpA9ABHq7vFbafbDHfbh6KI3JbcafWPE oNH4WgAws97EnAQ4N9V5jMa7L+KSVbI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:57 2024 by rpki-client on console-ams.rpki-client.org