$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: k2JzvwFaHX3lCj/Q70rraXTxtcgVZzXygLHp9eRL4NM= Subject key identifier: A8:C3:77:9E:B6:13:B6:EC:16:2A:A9:89:F8:39:F5:2C:05:7A:3E:8D Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F432858473D25EB023FD474DB5A563B20 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:eb:02:3f:d4:74:db:5a:56:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=9db23502-21f3-4d45-a716-4df1078d11f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:70:45:7d:c7:16:ba:fd:5b:20:74:80:56: 57:b4:21:02:33:7a:22:70:df:1b:9a:87:b4:28:84: 59:73:e1:e5:81:cd:e7:ab:d5:73:8f:c0:ab:ff:b8: 3e:83:47:1f:fc:cd:7b:15:ee:bf:c7:1a:93:bd:6b: cc:b2:f5:ed:0b:e2:b5:94:bd:f7:90:db:df:59:f9: 90:fb:ee:9d:b2:f0:fd:34:d4:76:84:64:79:d4:b9: b7:bd:b4:ad:23:51:ba:00:b9:80:6c:6e:33:a7:02: f1:7d:74:6f:45:eb:8c:12:73:ff:f8:bd:f4:f8:fe: 5d:95:5e:c9:4e:1a:96:41:60:0a:a2:d2:6b:a1:d0: e2:38:12:c0:3e:da:f2:c2:b9:5e:bb:57:12:46:1b: c1:b3:e3:7a:52:bc:2b:93:ec:25:6d:b2:21:16:43: f9:65:94:a3:f7:71:84:26:52:6a:36:83:9b:d8:03: 59:2a:4a:a3:21:60:0f:49:fe:65:15:0b:7a:e4:ea: c5:5f:7e:bc:ac:e4:1f:83:fa:35:67:77:a1:f4:ca: a0:7b:02:7b:88:df:82:5c:e3:f3:b1:ac:33:7b:d9: 25:bc:46:5b:5f:e2:d6:9b:10:2f:74:62:5a:cb:81: d2:9d:ba:a2:e8:c8:a1:de:de:51:13:62:b4:d4:83: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C3:77:9E:B6:13:B6:EC:16:2A:A9:89:F8:39:F5:2C:05:7A:3E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:17:27:4f:10:c9:2d:e7:8c:0d:65:db:af:f4:37:e4:07:d6: ed:bb:d5:36:46:9a:04:8b:99:ee:6a:28:d3:30:fe:81:67:3e: 71:71:f6:9c:44:aa:8d:63:e3:0c:22:fd:68:c6:08:58:0a:3b: 6f:53:b9:da:16:8e:73:6b:2e:10:6d:8c:6b:ce:08:24:52:24: 9e:62:a6:8c:62:9b:90:2f:23:cb:40:9f:a2:61:49:b7:64:92: f0:8b:67:f0:70:2d:b7:b7:ae:d4:42:09:f3:56:0d:7c:db:31: cd:46:ab:3a:4d:c6:49:d2:6d:8b:ff:ea:a8:97:90:b9:48:0b: 6e:9b:12:59:5e:24:15:2f:f5:60:87:81:ac:9a:c9:03:0d:5b: 49:22:15:bb:f9:d8:60:f7:87:a6:ad:d6:5b:dd:03:5e:0f:22: 6d:c7:5d:78:fb:c2:72:08:4b:7f:18:17:e3:d7:01:f8:73:08: 39:07:9d:09:44:3f:1c:7c:02:10:89:1b:7e:56:fd:9e:cf:6a: 84:22:d4:2e:75:ac:1f:c4:63:18:b4:0a:5d:03:07:eb:5d:54: 62:45:f6:14:73:07:7e:49:53:b5:02:74:b6:b5:ee:19:d5:f4: e6:ea:54:c3:48:a8:53:85:24:6d:76:cb:42:24:86:9c:49:ff: 7a:a0:fe:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9JesCP9R021pWOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk OWRiMjM1MDItMjFmMy00ZDQ1LWE3MTYtNGRmMTA3OGQxMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDZwRX3HFrr9WyB0gFZXtCECM3oicN8bmoe0 KIRZc+Hlgc3nq9Vzj8Cr/7g+g0cf/M17Fe6/xxqTvWvMsvXtC+K1lL33kNvfWfmQ ++6dsvD9NNR2hGR51Lm3vbStI1G6ALmAbG4zpwLxfXRvReuMEnP/+L30+P5dlV7J ThqWQWAKotJrodDiOBLAPtrywrleu1cSRhvBs+N6Urwrk+wlbbIhFkP5ZZSj93GE JlJqNoOb2ANZKkqjIWAPSf5lFQt65OrFX368rOQfg/o1Z3eh9MqgewJ7iN+CXOPz sawze9klvEZbX+LWmxAvdGJay4HSnbqi6Mih3t5RE2K01IPKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjDd562E7bsFiqpifg59SwFej6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEXJ08QyS3njA1l26/0N+QH1u271TZGmgSLme5qKNMw/oFnPnFx9pxE qo1j4wwi/WjGCFgKO29TudoWjnNrLhBtjGvOCCRSJJ5ipoxim5AvI8tAn6JhSbdk kvCLZ/BwLbe3rtRCCfNWDXzbMc1GqzpNxknSbYv/6qiXkLlIC26bElleJBUv9WCH gayayQMNW0kiFbv52GD3h6at1lvdA14PIm3HXXj7wnIIS38YF+PXAfhzCDkHnQlE Pxx8AhCJG35W/Z7PaoQi1C51rB/EYxi0Cl0DB+tdVGJF9hRzB35JU7UCdLa17hnV 9ObqVMNIqFOFJG12y0IkhpxJ/3qg/oA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:19 2024 by rpki-client on console-ams.rpki-client.org