$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: v6bwHfQt0KK7wheecew9TQsGLNq3kMZIw9T5eudmD8Y= Subject key identifier: E8:AB:0F:48:C9:0A:E2:F7:78:83:85:23:C9:D5:24:FF:7E:A6:0A:84 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F432858473FF08A6E0DF03AE22992BD00 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:8a:6e:0d:f0:3a:e2:29:92:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=dee60329-028d-45cf-8555-200b295790f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:9f:b9:5a:81:1d:e8:b0:32:e2:93:4e:f1: eb:92:1d:09:b8:ca:02:29:6f:e7:89:e8:e5:23:fa: 3b:f3:86:6b:76:41:a6:a6:62:49:57:76:5f:3d:45: ac:ec:f9:e4:91:b6:ee:98:69:2c:0f:1a:4f:6a:65: 4e:51:11:6e:d6:65:aa:cb:cb:a0:0a:da:a6:b0:b9: b4:0e:94:15:f2:59:84:b4:ba:6d:cc:41:f4:4c:1f: bf:55:30:14:9b:4a:6c:0f:8b:91:a7:1f:86:7c:42: f6:ec:8a:66:5d:d4:27:84:14:06:86:3b:f6:5e:3a: 60:70:0f:4d:05:51:a6:bf:14:86:76:2d:38:0e:80: d8:c4:29:98:c4:7a:7a:54:73:79:e6:7e:25:38:c8: 52:22:3d:ea:0d:fc:c9:3a:4d:66:3e:ca:c0:07:a9: 72:6c:ea:39:e8:fe:46:65:34:14:07:bf:86:10:a6: a6:c7:dd:8b:d7:04:9d:52:19:80:f2:c7:89:69:4a: 46:dd:fb:51:d0:46:c6:21:95:52:4d:3d:fe:ba:e0: e7:2b:f7:62:84:35:4d:1e:b8:0f:91:47:9d:49:36: 8c:c3:44:4f:ca:79:8a:c8:92:e5:9b:e7:ed:57:83: 01:a3:05:60:b0:27:ce:2a:ca:33:07:a1:32:09:ca: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:0F:48:C9:0A:E2:F7:78:83:85:23:C9:D5:24:FF:7E:A6:0A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:15:3b:60:cc:62:5a:a3:1a:46:cc:82:ba:46:5d:67:53:7e: 75:be:e6:38:99:e8:be:0f:d1:cb:7e:01:64:e8:71:74:f2:2a: 9f:2d:0b:a5:ef:cd:09:d3:3b:b6:52:c5:2c:51:67:df:bb:8c: 60:be:e3:69:f8:6e:71:08:27:5c:b9:54:64:58:d0:13:bc:8b: 30:21:1a:be:e1:bc:69:36:42:49:b9:f7:7f:e8:8f:97:c4:e9: 4b:20:54:b5:f5:f4:24:a3:ff:37:42:8b:55:02:58:55:e6:b4: 4b:24:dd:78:21:38:46:cc:4e:d5:69:50:29:30:c6:87:8f:3e: d2:00:22:43:35:93:78:96:76:ab:ae:b7:db:e1:6e:bb:99:36: 1f:82:2f:e2:7a:7b:0c:e0:1b:1d:2a:20:cc:5c:00:a0:75:a0: 06:87:6c:47:38:9c:09:d3:66:4a:5b:17:81:e9:40:3d:bc:f0: 25:21:c9:fb:69:33:b1:9d:5c:87:27:e7:d7:31:1a:e8:3d:36: d1:83:ff:91:ec:84:3b:a5:c1:34:2b:1a:76:bd:22:5a:95:84: d4:bf:38:5b:cd:3f:6f:3a:cf:7d:47:da:b9:3c:b1:77:2d:93: da:db:e4:3a:94:4a:85:45:5b:a1:6a:a5:51:cc:fb:8e:35:2a: 78:92:7e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8IpuDfA64imSvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk ZGVlNjAzMjktMDI4ZC00NWNmLTg1NTUtMjAwYjI5NTc5MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPafuVqBHeiwMuKTTvHrkh0JuMoCKW/niejl I/o784ZrdkGmpmJJV3ZfPUWs7PnkkbbumGksDxpPamVOURFu1mWqy8ugCtqmsLm0 DpQV8lmEtLptzEH0TB+/VTAUm0psD4uRpx+GfEL27IpmXdQnhBQGhjv2XjpgcA9N BVGmvxSGdi04DoDYxCmYxHp6VHN55n4lOMhSIj3qDfzJOk1mPsrAB6lybOo56P5G ZTQUB7+GEKamx92L1wSdUhmA8seJaUpG3ftR0EbGIZVSTT3+uuDnK/dihDVNHrgP kUedSTaMw0RPynmKyJLlm+ftV4MBowVgsCfOKsozB6EyCcqXJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOirD0jJCuL3eIOFI8nVJP9+pgqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUVO2DMYlqjGkbMgrpGXWdTfnW+5jiZ6L4P0ct+AWTocXTyKp8tC6Xv zQnTO7ZSxSxRZ9+7jGC+42n4bnEIJ1y5VGRY0BO8izAhGr7hvGk2Qkm593/oj5fE 6UsgVLX19CSj/zdCi1UCWFXmtEsk3XghOEbMTtVpUCkwxoePPtIAIkM1k3iWdquu t9vhbruZNh+CL+J6ewzgGx0qIMxcAKB1oAaHbEc4nAnTZkpbF4HpQD288CUhyftp M7GdXIcn59cxGug9NtGD/5HshDulwTQrGna9IlqVhNS/OFvNP286z31H2rk8sXct k9rb5DqUSoVFW6FqpVHM+441KniSfgw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:32 2024 by rpki-client on console-fra.rpki-client.org