$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa File: bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa (raw, json) Hash identifier: FG3pA4sVThcMUVtOFlj9QHK8JtpM9VLu0MYOaoevLUU= Subject key identifier: E2:C2:D4:EC:81:DA:02:A9:3F:85:00:E0:14:B0:C1:E5:B2:B8:9C:43 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847B531500F3720F29BA8904900 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 31898 IP address blocks: 199.36.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:50:0f:37:20:f2:9b:a8:90:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=dd1bd5f3-d9f4-4708-b243-7484770ee5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:5a:74:da:6d:a1:cd:bf:95:27:f4:3c:53: 10:25:be:37:2f:f5:8b:db:f3:45:f2:01:d2:18:5f: 5b:3f:54:ab:67:6f:13:63:71:22:17:a3:bd:d3:bb: 43:7d:ab:c0:db:cd:85:39:39:66:cc:a1:45:23:42: 54:17:5b:95:9b:5c:33:87:43:0a:c8:03:02:e3:05: 5a:c9:e8:bc:11:ac:09:ec:2c:60:b6:63:b2:a2:62: 2b:ba:99:42:55:5e:86:20:3f:d6:9f:79:e1:6d:1b: 40:f8:02:cd:97:1e:df:7d:23:4a:8e:96:6c:87:f8: 9f:86:fa:35:ed:fb:4f:07:06:86:56:1a:e9:99:b1: 1a:b8:b2:8d:c2:6e:87:cf:7f:9d:52:59:50:6a:36: c4:46:9f:78:16:04:00:85:e8:f6:3d:69:8b:37:b9: 1e:98:ff:7a:97:51:a8:e8:11:e6:ae:26:17:6c:04: 58:ae:99:4f:82:ea:4f:e6:91:5a:20:1f:c2:24:66: ad:a3:97:84:68:55:cf:68:c5:dd:3e:3b:8d:53:d1: d9:a3:17:5d:81:19:16:ab:f4:dc:ef:40:b1:b7:45: f5:96:d7:57:cc:95:3e:77:67:58:3a:58:8e:c9:06: b4:e8:92:65:ea:db:9b:78:c6:e9:55:22:fa:a6:1d: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C2:D4:EC:81:DA:02:A9:3F:85:00:E0:14:B0:C1:E5:B2:B8:9C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5c:a2:dd:2f:cc:ea:37:87:32:72:34:cb:56:1e:bf:cd:24: f6:c9:28:44:c3:24:4b:fe:72:66:40:3b:64:32:9b:fb:89:f9: 5b:be:d1:ca:e9:17:af:a7:b0:83:2a:46:c7:38:db:0f:7c:66: 7e:ee:df:4a:9f:98:1f:45:64:0e:72:1c:40:c3:ac:eb:c9:ba: a1:01:1a:bd:46:09:f2:f5:5a:13:6b:8a:21:5f:db:2f:2d:6f: 16:84:8b:b7:1b:18:18:0c:03:ba:72:17:83:2e:03:7a:ff:78: b5:31:91:d9:9e:4d:13:3d:07:eb:39:ee:44:86:7c:b1:65:80: ab:60:39:0c:fa:b3:34:ff:3d:79:c0:ed:41:e8:19:59:15:ec: d0:84:98:36:52:5b:b5:7c:da:62:d0:f8:49:70:87:db:ed:3d: c4:6f:43:f4:b9:85:a6:0e:ea:19:9b:a9:da:38:9e:03:e0:2f: 36:62:19:16:2a:0f:85:ae:46:bc:93:0e:83:3c:a3:01:43:e8: e1:41:e5:21:46:13:62:a1:6a:23:34:06:24:32:cf:7c:11:19: 56:45:29:87:b8:e2:62:89:e1:0e:88:c2:30:97:36:d1:1a:e6: 35:17:5d:9e:b8:9c:c5:0a:be:d7:4c:73:ed:7e:05:7f:b9:87: a4:f5:3b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVAPNyDym6iQSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk ZGQxYmQ1ZjMtZDlmNC00NzA4LWIyNDMtNzQ4NDc3MGVlNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqpadNptoc2/lSf0PFMQJb43L/WL2/NF8gHS GF9bP1SrZ28TY3EiF6O907tDfavA282FOTlmzKFFI0JUF1uVm1wzh0MKyAMC4wVa yei8EawJ7CxgtmOyomIruplCVV6GID/Wn3nhbRtA+ALNlx7ffSNKjpZsh/ifhvo1 7ftPBwaGVhrpmbEauLKNwm6Hz3+dUllQajbERp94FgQAhej2PWmLN7kemP96l1Go 6BHmriYXbARYrplPgupP5pFaIB/CJGato5eEaFXPaMXdPjuNU9HZoxddgRkWq/Tc 70Cxt0X1ltdXzJU+d2dYOliOyQa06JJl6tubeMbpVSL6ph141wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLC1OyB2gKpP4UA4BSwweWyuJxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmJhNDhmNmYtNzIzMS0z ZjNhLWE4ZTAtOGMzZWY1ZDk0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlcot0vzOo3hzJyNMtWHr/NJPbJKETDJEv+cmZAO2Qym/uJ+Vu+0crp F6+nsIMqRsc42w98Zn7u30qfmB9FZA5yHEDDrOvJuqEBGr1GCfL1WhNriiFf2y8t bxaEi7cbGBgMA7pyF4MuA3r/eLUxkdmeTRM9B+s57kSGfLFlgKtgOQz6szT/PXnA 7UHoGVkV7NCEmDZSW7V82mLQ+Elwh9vtPcRvQ/S5haYO6hmbqdo4ngPgLzZiGRYq D4WuRryTDoM8owFD6OFB5SFGE2KhaiM0BiQyz3wRGVZFKYe44mKJ4Q6IwjCXNtEa 5jUXXZ64nMUKvtdMc+1+BX+5h6T1O1I= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org