$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa File: 72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json) Hash identifier: 1gPFwvWHM3sf9pgia37DQWHoEJlSH5VSkduJU2Sc7Rg= Subject key identifier: D9:F8:5A:2C:B4:F6:6F:41:09:3C:EE:CF:87:EE:9C:3F:46:6F:9B:5B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847EA5A040126F25F7887F70D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 31898 IP address blocks: 199.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:04:01:26:f2:5f:78:87:f7:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=098c52d7-89df-417d-a7f4-1107c43401d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:06:9d:1e:ca:d5:77:93:0a:b4:9e:03:26: d0:5d:07:99:23:83:16:56:50:e0:a9:c4:ef:cb:01: 1e:b3:5b:c9:1c:53:b7:d3:d6:d0:27:f4:45:94:7e: 88:b6:91:53:24:ca:94:a4:be:bf:86:62:78:0c:d6: 50:42:45:b9:27:7b:a6:d2:77:71:99:1c:90:59:87: 7c:43:cc:15:a4:af:39:16:d7:0a:7f:99:4d:4f:73: 60:90:15:e6:92:79:05:dc:d5:5f:4a:fe:85:4f:51: f6:ec:3f:c2:bd:50:86:f8:92:1c:39:65:66:c4:2d: 2a:c9:b6:cb:a3:0c:76:0f:46:79:a6:c7:70:3c:36: 53:f5:38:dd:e6:7f:73:30:0d:d4:c1:c9:b6:ea:e7: 31:87:ba:38:0c:90:12:84:bd:9e:f2:29:d5:51:05: 5d:02:cc:51:9b:22:05:61:97:f9:ef:6b:fd:ca:db: a9:48:64:41:6c:48:1b:10:88:89:52:f2:31:b8:58: 97:88:26:f7:76:ef:88:da:e5:e9:66:b3:b6:9d:70: 8b:33:f5:0b:02:87:20:a9:1c:a9:f8:ef:31:6f:c5: 8b:b1:7e:d5:53:23:52:6e:57:4a:1b:f7:1f:50:1f: 56:26:aa:7f:75:08:9a:2f:5b:8a:32:08:77:23:d7: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:5A:2C:B4:F6:6F:41:09:3C:EE:CF:87:EE:9C:3F:46:6F:9B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:10:95:50:d9:2d:ba:cb:8f:30:5b:1b:a7:57:95:4a:cd: 6c:e9:05:c8:1f:cd:36:92:bf:a0:82:be:a2:40:07:c9:fe:7e: 52:bd:e2:5a:fb:dd:49:31:60:a0:de:bf:da:47:7d:83:ca:32: 93:a9:98:76:8c:f9:fa:4d:fe:25:80:b3:17:14:84:3d:19:65: 48:7d:ee:8f:54:15:41:0b:03:14:19:dc:d2:ab:40:02:8c:50: 6c:6b:df:06:92:9a:46:dd:2f:cd:57:a8:e4:6f:15:a5:61:52: 90:67:b9:d3:e1:85:c0:ae:08:42:50:94:7d:54:73:a8:54:92: e5:6f:91:4f:0e:f3:dd:dc:af:f7:96:73:30:c7:86:05:81:51: 59:a6:ec:d0:63:a0:ff:4c:35:ee:23:fa:1a:cc:e2:3e:3b:a0: 19:4d:b6:06:6c:f8:cd:cf:52:25:da:75:bd:f1:69:e5:21:21: ae:9c:23:62:62:6a:3a:df:ae:bc:3a:7a:ae:f1:f3:68:ec:38: ff:c3:b1:e4:bd:61:35:98:2c:ea:d8:8a:9e:92:ce:31:d6:31: dd:6b:05:f0:8c:0b:a5:2e:09:02:2f:c3:41:92:0f:bc:0e:cb: 33:b7:31:f2:8c:2e:8a:f8:7e:9c:68:e2:e4:d4:63:cd:be:7f: 40:cf:c7:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgQBJvJfeIf3DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk MDk4YzUyZDctODlkZi00MTdkLWE3ZjQtMTEwN2M0MzQwMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvsGnR7K1XeTCrSeAybQXQeZI4MWVlDgqcTv ywEes1vJHFO309bQJ/RFlH6ItpFTJMqUpL6/hmJ4DNZQQkW5J3um0ndxmRyQWYd8 Q8wVpK85FtcKf5lNT3NgkBXmknkF3NVfSv6FT1H27D/CvVCG+JIcOWVmxC0qybbL owx2D0Z5psdwPDZT9Tjd5n9zMA3Uwcm26ucxh7o4DJAShL2e8inVUQVdAsxRmyIF YZf572v9ytupSGRBbEgbEIiJUvIxuFiXiCb3du+I2uXpZrO2nXCLM/ULAocgqRyp +O8xb8WLsX7VUyNSbldKG/cfUB9WJqp/dQiaL1uKMgh3I9efXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn4Wiy09m9BCTzuz4funD9Gb5tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzJlOGM5YjMtODgyOS0z OWQwLWJlMDEtZDg1MGZkZmU3ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMbEJVQ2S26y48wWxunV5VKzWzpBcgfzTaSv6CCvqJAB8n+flK94lr7 3UkxYKDev9pHfYPKMpOpmHaM+fpN/iWAsxcUhD0ZZUh97o9UFUELAxQZ3NKrQAKM UGxr3waSmkbdL81XqORvFaVhUpBnudPhhcCuCEJQlH1Uc6hUkuVvkU8O893cr/eW czDHhgWBUVmm7NBjoP9MNe4j+hrM4j47oBlNtgZs+M3PUiXadb3xaeUhIa6cI2Ji ajrfrrw6eq7x82jsOP/DseS9YTWYLOrYip6SzjHWMd1rBfCMC6UuCQIvw0GSD7wO yzO3MfKMLor4fpxo4uTUY82+f0DPx7k= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org