$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: 9rTSK1PXQlo1PfGRNxcabNwryu6SYBs5DYJOlxu8/bo= Subject key identifier: 3A:02:16:53:4B:50:A5:2B:50:3D:2D:91:CA:4E:CC:A4:E0:1C:6F:1A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847AE36B2CF849FE30C94204E00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:b2:cf:84:9f:e3:0c:94:20:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=3ca7846e-2ccf-4dbb-9444-29f9de238cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:b6:51:bf:3e:6c:9f:c8:c2:7e:38:58:81: 44:e3:59:ad:6e:fc:12:c7:b1:b1:4e:80:4e:ef:64: 90:bc:2a:60:67:33:54:d4:96:c1:76:fc:b8:e1:96: af:46:60:8e:43:30:62:ea:62:ef:3c:b0:fb:be:e3: 9f:54:39:55:95:9f:dd:b0:b8:07:de:af:b3:ed:4b: 9f:6d:16:53:60:71:3f:59:f0:ba:2d:02:7f:f3:df: 65:e6:74:03:96:f8:fa:83:87:00:8e:07:ec:7f:74: 38:93:47:e3:42:81:fa:52:c6:c8:3b:d8:07:2a:c1: 5e:66:dd:38:b8:50:4d:05:61:a4:b8:32:fb:32:5a: 69:ac:ed:b8:4d:93:ac:5a:a1:ef:b3:31:5c:a3:d0: 03:f1:93:48:b2:07:0e:34:ae:89:06:2a:3a:e0:a0: dc:39:58:26:9f:23:6d:62:f3:f3:af:23:3c:f2:a4: 9f:47:23:71:a3:d4:d4:08:a1:f0:ac:e6:40:73:af: 7d:0d:e2:24:6c:12:8e:da:8f:38:6a:c7:74:14:ba: 4a:27:3f:ab:00:38:27:e7:66:44:56:7f:fe:28:d4: 8b:e7:8c:08:d5:02:80:3d:9b:cc:63:1a:be:29:c8: 85:7b:a7:59:f0:e4:33:4d:b9:aa:08:c1:9c:2e:3b: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:16:53:4B:50:A5:2B:50:3D:2D:91:CA:4E:CC:A4:E0:1C:6F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:85:44:0f:75:43:a9:50:74:0f:2a:c1:2a:e5:6d:78:f3:fb: 01:1e:80:c1:6c:72:03:10:29:50:e1:59:bd:24:f0:9a:8b:58: 7d:00:0b:a9:70:5b:3b:48:53:1c:e7:36:70:b0:aa:e7:80:66: 36:74:f9:02:d3:47:4a:b4:f4:83:4c:6e:73:f8:f5:1a:79:23: ed:bb:22:6a:da:72:a8:41:53:b1:4c:34:b0:bc:29:b9:a0:34: 1b:d4:b8:85:ad:d5:8f:2a:6b:ee:42:2b:af:50:49:10:f8:0d: 98:23:a3:8a:55:c1:7f:fe:4f:e4:8d:88:89:dd:e1:ef:8a:0f: f3:f2:44:3a:ff:98:91:59:22:b8:11:b9:b4:be:a9:11:f0:7b: 34:b0:36:d4:91:a7:ab:ab:a5:f3:2d:d0:8a:9b:d0:22:17:0b: 12:3b:6b:0d:15:a7:fe:18:cb:77:67:13:56:43:96:ef:38:ac: 40:e1:5f:2e:49:53:1e:48:58:27:0d:a6:4f:25:a2:fa:5d:a8: 9e:b5:b1:a4:61:2c:d2:fd:b8:bd:73:a3:26:cf:1c:45:2e:bb: b8:84:63:16:6b:71:1a:c4:70:f9:89:67:f3:e3:a6:b4:dd:2c: a8:81:0b:78:20:dd:1e:fe:f6:cd:d6:56:a4:43:33:1b:7f:29: dc:98:c6:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNrLPhJ/jDJQgTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk M2NhNzg0NmUtMmNjZi00ZGJiLTk0NDQtMjlmOWRlMjM4Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/a2Ub8+bJ/Iwn44WIFE41mtbvwSx7GxToBO 72SQvCpgZzNU1JbBdvy44ZavRmCOQzBi6mLvPLD7vuOfVDlVlZ/dsLgH3q+z7Uuf bRZTYHE/WfC6LQJ/899l5nQDlvj6g4cAjgfsf3Q4k0fjQoH6UsbIO9gHKsFeZt04 uFBNBWGkuDL7MlpprO24TZOsWqHvszFco9AD8ZNIsgcONK6JBio64KDcOVgmnyNt YvPzryM88qSfRyNxo9TUCKHwrOZAc699DeIkbBKO2o84asd0FLpKJz+rADgn52ZE Vn/+KNSL54wI1QKAPZvMYxq+KciFe6dZ8OQzTbmqCMGcLjuhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoCFlNLUKUrUD0tkcpOzKTgHG8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqFRA91Q6lQdA8qwSrlbXjz+wEegMFscgMQKVDhWb0k8JqLWH0AC6lw WztIUxznNnCwqueAZjZ0+QLTR0q09INMbnP49Rp5I+27ImracqhBU7FMNLC8Kbmg NBvUuIWt1Y8qa+5CK69QSRD4DZgjo4pVwX/+T+SNiInd4e+KD/PyRDr/mJFZIrgR ubS+qRHwezSwNtSRp6urpfMt0Iqb0CIXCxI7aw0Vp/4Yy3dnE1ZDlu84rEDhXy5J Ux5IWCcNpk8lovpdqJ61saRhLNL9uL1zoybPHEUuu7iEYxZrcRrEcPmJZ/PjprTd LKiBC3gg3R7+9s3WVqRDMxt/KdyYxuw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:49 2024 by rpki-client on console-fra.rpki-client.org