$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa File: ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json) Hash identifier: 7nJVOL41c+HeO6in5GwTCIH0HqOSVxhDaIPr0WbrW7A= Subject key identifier: 16:BE:E9:5B:8C:55:8B:93:59:8A:D0:93:13:55:0E:A9:92:37:B4:45 Certificate issuer: /CN=67612b49-91a4-42d2-8352-16977b5d8e8a Certificate serial: 010D0C9F43285847B10155DE19288A07C052A580 Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 14041 IP address blocks: 198.59.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:55:de:19:28:8a:07:c0:52:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=c0c50cad-c2b5-4b4e-bf2d-558c75f697e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:34:fc:88:85:96:68:6f:06:d2:53:33:4d:64: 80:a7:ac:47:5c:ce:37:75:df:1d:ce:24:4d:6f:ad: 95:19:9c:f3:c4:52:15:b6:1c:71:19:5e:ee:5a:0c: fa:99:f2:c7:3b:48:c1:ad:ae:3f:cf:24:55:53:db: ce:da:e7:2e:f2:aa:74:15:af:4d:e1:15:05:5a:3a: 55:b3:93:2a:23:b8:78:02:83:1a:38:e0:68:44:9b: 82:e7:c3:7d:e1:b1:dd:ac:75:23:b7:13:f9:66:cf: 13:6c:2a:05:6c:57:43:46:00:91:1b:d5:3e:22:40: c7:13:17:2b:91:93:17:15:a6:1e:84:b4:5f:24:d3: 54:b6:be:90:9d:fd:0b:a8:db:2b:7f:9b:a4:fc:a4: fe:c9:69:fb:ef:76:f7:f4:04:6c:89:99:40:54:89: 27:91:d3:fb:5e:4f:dd:93:db:98:21:12:c5:61:1f: a8:c9:f2:5e:db:17:94:39:9b:4a:52:40:bd:1b:d3: 86:4f:c6:f8:c7:80:dc:ba:16:b6:01:76:33:2e:15: 89:fd:e3:39:ff:f2:57:ee:64:9a:88:05:54:a1:80: 2b:60:2b:95:12:94:69:a5:60:cc:df:8f:2e:49:ec: e8:cb:e6:e3:e4:02:da:cf:f2:73:22:99:1b:60:64: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:E9:5B:8C:55:8B:93:59:8A:D0:93:13:55:0E:A9:92:37:B4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl X509v3 Authority Key Identifier: keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer sbgp-ipAddrBlock: critical IPv4: 198.59.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:91:2d:57:48:f1:25:3a:9a:33:68:9b:bd:de:a3:56:c1:69: d7:1c:21:65:b6:4d:91:fd:47:b5:1a:04:07:5f:25:d1:40:b5: 61:57:44:37:d0:90:5f:90:39:6d:a5:bc:f2:7d:2d:c8:ad:95: 41:43:db:0d:a6:df:76:2c:3b:8f:b3:c3:cf:de:c1:c6:c3:cc: 6a:15:42:0e:72:38:fb:7a:36:36:df:c9:34:1c:35:d8:f4:1c: 89:c0:99:09:3b:4e:ac:38:d0:25:11:68:d8:15:15:71:13:3b: 82:fa:5f:c3:b3:16:17:4d:d0:bf:8b:6c:22:4f:18:66:f9:89: 0d:7e:1f:cf:d6:f7:14:18:85:27:6d:ad:0a:4e:8a:eb:da:89: 1f:33:a7:06:0f:1c:9a:41:59:18:1d:5b:4c:b3:57:15:f2:b9: 8d:0b:a8:d3:2d:fd:74:3a:2c:98:68:03:86:86:6c:a5:ba:67: c1:c9:59:d1:d5:ad:9d:3a:08:d7:d7:4b:49:a6:d2:6c:84:35: 28:57:53:6b:6a:e0:47:e5:0b:17:78:6a:1f:24:a2:a1:2a:9c: d4:14:c5:a5:d7:ec:0b:72:0b:28:42:10:8b:b3:a1:c7:79:bb: fc:6e:2b:a5:9b:61:87:ac:2b:dc:dc:cb:15:c5:19:e0:95:31: 0e:87:6b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVXeGSiKB8BSpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4 ZThhMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk YzBjNTBjYWQtYzJiNS00YjRlLWJmMmQtNTU4Yzc1ZjY5N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzT8iIWWaG8G0lMzTWSAp6xHXM43dd8dziRN b62VGZzzxFIVthxxGV7uWgz6mfLHO0jBra4/zyRVU9vO2ucu8qp0Fa9N4RUFWjpV s5MqI7h4AoMaOOBoRJuC58N94bHdrHUjtxP5Zs8TbCoFbFdDRgCRG9U+IkDHExcr kZMXFaYehLRfJNNUtr6Qnf0LqNsrf5uk/KT+yWn773b39ARsiZlAVIknkdP7Xk/d k9uYIRLFYR+oyfJe2xeUOZtKUkC9G9OGT8b4x4Dcuha2AXYzLhWJ/eM5//JX7mSa iAVUoYArYCuVEpRppWDM348uSezoy+bj5ALaz/JzIpkbYGRNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa+6VuMVYuTWYrQkxNVDqmSN7RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvYWI1NDBmMDgtNDBjYS0z NjJlLWE3MjMtZjNiZjBkNTNjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3 N2I1ZDhlOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGRLVdI8SU6mjNom73eo1bBadccIWW2TZH9R7UaBAdfJdFAtWFXRDfQ kF+QOW2lvPJ9LcitlUFD2w2m33YsO4+zw8/ewcbDzGoVQg5yOPt6NjbfyTQcNdj0 HInAmQk7Tqw40CURaNgVFXETO4L6X8OzFhdN0L+LbCJPGGb5iQ1+H8/W9xQYhSdt rQpOiuvaiR8zpwYPHJpBWRgdW0yzVxXyuY0LqNMt/XQ6LJhoA4aGbKW6Z8HJWdHV rZ06CNfXS0mm0myENShXU2tq4EflCxd4ah8koqEqnNQUxaXX7AtyCyhCEIuzocd5 u/xuK6WbYYesK9zcyxXFGeCVMQ6Ha4Y= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:38 2024 by rpki-client on console-fra.rpki-client.org