$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: G9P3ZhO/I2uEIfaO2wg8mzY18CcxIpAeTFLnJLwQmmc= Subject key identifier: 4D:17:71:A4:ED:2A:D9:8B:65:35:18:5A:24:0F:B4:4B:D0:5C:DC:04 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847EBBF83FDD7E8471A148BCD80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:83:fd:d7:e8:47:1a:14:8b:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=af44a9de-7f82-4f80-bb4b-54b64680f2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:c4:ae:18:8b:fa:fc:a3:a5:45:82:57:80: a9:13:92:07:51:ac:f1:fd:fa:c2:8a:a4:89:49:4e: d4:d2:9e:62:6e:9f:aa:98:91:03:ef:c9:a0:e2:ae: c5:ed:24:6f:47:0d:c1:73:95:05:50:d0:38:6a:4d: 74:69:8b:85:76:61:29:48:31:c9:b4:f7:ba:a4:40: f0:21:02:d1:26:60:60:92:f9:87:a0:fd:d0:78:e6: 5e:cb:05:52:e3:d0:82:89:7d:3a:85:a1:26:36:05: 88:a7:3d:40:db:61:85:fb:e1:62:16:94:e8:6f:13: 73:4c:af:35:e4:19:2d:b0:cd:26:6c:6f:55:c1:c7: 0f:46:29:12:2c:aa:44:f8:7b:fd:cf:24:78:46:43: af:e1:d4:01:66:ec:1c:a9:18:67:79:21:42:2f:27: 23:49:7f:19:40:40:45:ad:ad:66:7d:b2:ce:19:eb: 14:d9:1e:a7:39:ec:29:2e:c0:4b:96:a2:f9:4e:8d: 5a:19:d2:43:d8:e3:b1:94:9c:ce:16:86:08:0a:f0: 78:da:87:a1:8b:5b:2a:94:cd:0e:18:36:9f:1b:19: b9:9b:37:2f:30:39:cb:17:6b:f1:6f:b6:31:f2:04: e0:9f:69:e5:a9:89:f8:2a:5f:0b:d1:c2:ac:50:75: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:71:A4:ED:2A:D9:8B:65:35:18:5A:24:0F:B4:4B:D0:5C:DC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:91:2e:f5:0c:e9:b2:df:ce:cc:fd:d3:b2:55:f0:4a:65:47: ea:15:b3:4f:f0:1e:b8:b0:63:a6:a4:55:03:23:0f:51:24:0c: da:fb:da:83:56:de:37:2c:06:c1:c6:f8:3f:ee:a4:b8:09:e5: 1e:9b:c0:3f:5f:bf:79:c0:6b:e3:48:d8:e4:8b:40:79:c2:51: e4:42:34:12:34:6f:c8:9e:1a:f8:46:e7:13:88:e1:0d:77:38: 0e:77:87:a6:4b:2d:87:d2:fc:d7:43:d6:39:22:c4:5f:d5:8e: b9:3b:8e:48:de:56:19:f9:75:2a:42:f2:2f:8e:b8:18:e4:66: a0:4f:b6:c5:82:72:58:c9:14:12:29:f6:5f:ee:35:07:7b:3d: e5:84:7e:72:ae:3f:44:85:32:cb:38:3b:69:0a:be:74:4a:c7: e5:87:4f:0a:e4:45:cb:64:cb:82:59:4a:70:d5:c2:f8:2c:30: c1:22:1b:1a:f8:d7:03:ac:5f:4e:2a:b1:18:f5:8d:12:b6:6d: aa:fe:10:7b:88:98:fd:54:a0:3d:3b:4a:a1:eb:c2:c1:2b:e5: 6c:64:a6:de:34:9f:4b:63:6a:ae:85:bf:50:a7:b4:93:1c:d8: 54:b0:1d:06:42:ea:77:1f:d4:03:20:bd:c4:6d:c0:3d:11:60: ca:6c:67:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4P91+hHGhSLzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk YWY0NGE5ZGUtN2Y4Mi00ZjgwLWJiNGItNTRiNjQ2ODBmMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP/ErhiL+vyjpUWCV4CpE5IHUazx/frCiqSJ SU7U0p5ibp+qmJED78mg4q7F7SRvRw3Bc5UFUNA4ak10aYuFdmEpSDHJtPe6pEDw IQLRJmBgkvmHoP3QeOZeywVS49CCiX06haEmNgWIpz1A22GF++FiFpTobxNzTK81 5BktsM0mbG9VwccPRikSLKpE+Hv9zyR4RkOv4dQBZuwcqRhneSFCLycjSX8ZQEBF ra1mfbLOGesU2R6nOewpLsBLlqL5To1aGdJD2OOxlJzOFoYICvB42oehi1sqlM0O GDafGxm5mzcvMDnLF2vxb7Yx8gTgn2nlqYn4Kl8L0cKsUHUwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0XcaTtKtmLZTUYWiQPtEvQXNwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADORLvUM6bLfzsz907JV8EplR+oVs0/wHriwY6akVQMjD1EkDNr72oNW 3jcsBsHG+D/upLgJ5R6bwD9fv3nAa+NI2OSLQHnCUeRCNBI0b8ieGvhG5xOI4Q13 OA53h6ZLLYfS/NdD1jkixF/Vjrk7jkjeVhn5dSpC8i+OuBjkZqBPtsWCcljJFBIp 9l/uNQd7PeWEfnKuP0SFMss4O2kKvnRKx+WHTwrkRctky4JZSnDVwvgsMMEiGxr4 1wOsX04qsRj1jRK2bar+EHuImP1UoD07SqHrwsEr5Wxkpt40n0tjaq6Fv1CntJMc 2FSwHQZC6ncf1AMgvcRtwD0RYMpsZ68= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org