$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa File: e07ffccc-e92d-3740-bf40-b1ce295ad731.roa (raw, json) Hash identifier: v2mWVEBJhbSibgF5DBJJEZH+xIhw6FxTMX04na6UjOc= Subject key identifier: F2:3D:E4:A5:51:DF:48:DA:48:E3:1E:59:AC:AB:AA:EB:F2:C8:CA:32 Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F432858472C65CAD90DEF1097AA58F640 Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 199.87.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:ca:d9:0d:ef:10:97:aa:58:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=985a511e-f3ce-4c89-8478-55bfca24a21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dc:49:45:83:4f:ae:cc:b6:f1:7e:39:01:4c: 40:7b:65:88:22:1d:df:a0:b0:15:ef:55:0f:86:60: 56:1a:5a:f2:cb:2f:24:b2:44:b7:ab:6d:f6:6b:48: ef:38:d0:f1:b7:14:38:5d:45:9d:d1:32:ed:83:56: ab:3e:bf:f4:7a:a3:7d:ed:ba:43:70:88:21:60:87: 90:13:ad:fd:e5:70:07:fd:9c:eb:b0:f4:d5:5a:78: 2b:ef:59:eb:e7:4e:d1:24:ad:4b:b1:5c:d8:36:fe: 5a:90:65:4b:9a:78:bb:73:7c:60:a4:d7:56:fb:ea: 7b:c6:17:91:32:94:5a:48:62:54:d0:20:1d:f3:5f: 4f:34:05:bb:44:1f:e2:44:80:75:31:e7:ef:e2:4c: 88:c0:9d:60:00:63:b1:ad:b9:dc:1d:96:4f:b9:ab: 4e:ce:da:3a:f0:e5:3c:c6:e2:7b:d0:d7:07:6d:63: 12:39:bb:eb:80:6d:87:f2:c2:b1:b9:ac:b2:06:c5: 2a:f7:04:c2:59:3c:70:37:c9:b7:bc:49:57:b5:77: f8:e8:97:65:ae:df:60:b1:f4:96:38:01:d5:aa:5d: b5:00:51:bd:3f:47:bf:66:74:a9:d8:39:a8:52:56: ec:91:62:31:40:6a:27:d5:de:ed:c1:c7:ee:4f:70: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:E4:A5:51:DF:48:DA:48:E3:1E:59:AC:AB:AA:EB:F2:C8:CA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: 199.87.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d7:6c:20:0d:0a:3d:14:0d:90:4a:43:78:7f:9b:a1:bc:81: 2d:f1:d9:e0:6b:0e:9b:34:d2:b2:de:b1:c8:2c:87:c4:6c:cb: 88:85:44:68:4d:93:74:f9:19:c2:36:83:05:0d:ce:e1:b1:08: de:cb:df:a2:dc:cd:46:56:f9:f3:4e:23:a0:46:4e:12:66:87: 6d:f0:c7:02:c5:84:24:45:a4:33:b8:8e:0f:ab:48:4a:be:3c: a4:59:8b:66:eb:13:5a:db:28:2f:16:d4:e7:ca:ba:97:ec:76: b7:60:e4:69:7f:83:d9:61:1b:34:d9:f1:40:d7:c3:4d:4e:c8: e4:39:08:37:b1:c1:cb:c8:6a:21:4a:3d:bd:2c:00:75:b5:a7: 7a:27:06:86:a0:11:8a:c0:4e:71:bd:fc:85:75:11:c0:28:12: 7d:d0:69:13:93:de:59:3a:9f:33:7b:ae:a7:9b:bf:ee:a3:3b: ab:38:ce:39:11:49:c4:fa:cc:ce:72:d9:41:0d:ec:5e:30:94: 4c:ee:12:03:ac:99:f5:ae:09:11:aa:28:5a:7b:82:47:b7:f2: 1e:b5:ef:19:a1:e9:53:af:62:ef:2e:5a:17:57:c2:ae:68:a7: 5c:ef:36:c1:1b:67:b1:f5:8e:fa:cc:b7:36:c9:aa:ef:eb:dd: ab:4a:15:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZcrZDe8Ql6pY9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk OTg1YTUxMWUtZjNjZS00Yzg5LTg0NzgtNTViZmNhMjRhMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtxJRYNPrsy28X45AUxAe2WIIh3foLAV71UP hmBWGlryyy8kskS3q232a0jvONDxtxQ4XUWd0TLtg1arPr/0eqN97bpDcIghYIeQ E6395XAH/ZzrsPTVWngr71nr507RJK1LsVzYNv5akGVLmni7c3xgpNdW++p7xheR MpRaSGJU0CAd819PNAW7RB/iRIB1Mefv4kyIwJ1gAGOxrbncHZZPuatOzto68OU8 xuJ70NcHbWMSObvrgG2H8sKxuayyBsUq9wTCWTxwN8m3vElXtXf46Jdlrt9gsfSW OAHVql21AFG9P0e/ZnSp2DmoUlbskWIxQGon1d7twcfuT3C7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI95KVR30jaSOMeWayrquvyyMoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvZTA3ZmZjY2MtZTkyZC0z NzQwLWJmNDAtYjFjZTI5NWFkNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzXbCANCj0UDZBKQ3h/m6G8gS3x2eBrDps00rLescgsh8Rsy4iFRGhN k3T5GcI2gwUNzuGxCN7L36LczUZW+fNOI6BGThJmh23wxwLFhCRFpDO4jg+rSEq+ PKRZi2brE1rbKC8W1OfKupfsdrdg5Gl/g9lhGzTZ8UDXw01OyOQ5CDexwcvIaiFK Pb0sAHW1p3onBoagEYrATnG9/IV1EcAoEn3QaROT3lk6nzN7rqebv+6jO6s4zjkR ScT6zM5y2UEN7F4wlEzuEgOsmfWuCRGqKFp7gke38h617xmh6VOvYu8uWhdXwq5o p1zvNsEbZ7H1jvrMtzbJqu/r3atKFZE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org