$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa File: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (raw, json) Hash identifier: hJUE5j+FOaFBvy1RD6E9UZi2eJyxwl08/ZkHJjW0pzw= Subject key identifier: 35:D8:FA:71:63:7A:59:5D:F9:9A:29:E6:09:D7:65:41:80:B8:10:94 Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F432858478CB68AC4DA5E1887F9484420 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 62642 IP address blocks: 198.51.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8a:c4:da:5e:18:87:f9:48:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=fc5da33e-de82-4c80-8d6d-99fe883b68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ab:78:2d:ec:63:a2:40:63:f8:a1:a5:09:41: da:70:06:89:ea:36:d7:f4:de:a6:61:44:46:81:9f: de:3d:b6:e3:90:6e:a0:1d:25:98:ec:e2:82:de:36: b2:59:53:62:93:ba:7a:a5:6b:1e:aa:94:e7:af:b6: 9f:44:9a:67:ac:49:67:85:7b:6e:57:b5:fc:0b:77: 9c:3f:96:93:6b:50:ec:dc:d2:81:54:fd:53:7d:19: 9e:84:c0:25:b5:8e:54:4f:d6:b9:eb:06:2c:79:8f: cd:b3:20:b0:d6:a7:cf:ac:cc:72:69:37:c6:dd:89: 0f:94:6a:81:92:3f:1d:12:5b:e8:61:e4:18:b5:c3: f1:56:1d:80:83:1b:15:2f:96:25:59:95:c8:a0:9c: 13:0f:55:2f:a4:31:09:1f:17:39:2b:ad:b2:60:b0: 82:84:cd:50:2b:53:c2:81:33:e8:22:84:a5:99:07: f2:27:4f:26:4c:9b:26:63:e5:68:85:aa:99:b2:2d: 1e:d4:e5:42:38:cd:da:b4:48:8e:76:e0:84:9f:7e: 29:79:b6:3f:49:b5:c0:9b:3f:04:60:97:19:14:9f: 2c:6f:d9:8a:0a:5d:6d:3c:a6:bd:7d:37:77:de:d7: ba:8f:99:86:73:b0:0f:f2:03:06:d1:a9:94:60:c6: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:FA:71:63:7A:59:5D:F9:9A:29:E6:09:D7:65:41:80:B8:10:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aea4ee67-2699-3a0b-a978-13a7b345b89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: 198.51.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c3:7c:3e:b2:44:54:30:32:02:0c:44:69:d0:44:34:aa:49: 97:52:8a:2b:2e:24:27:86:85:6f:9b:f3:e0:f0:53:42:0c:e8: 89:41:60:be:3e:bf:6c:f5:8d:74:0b:e8:f0:52:d7:85:28:2a: 6d:97:56:39:98:77:a1:d0:a2:0e:3f:28:14:ae:71:ce:d3:83: d1:b5:2f:4f:ef:db:1b:c7:84:61:74:56:30:b7:2e:0e:75:82: 0d:09:d5:37:72:e2:19:9c:ce:d3:f9:89:d6:d1:bb:32:fd:0b: 6c:78:ae:ac:9e:26:0a:88:cf:b9:f3:8e:1f:c8:35:cf:14:1f: 70:c1:dc:08:fa:ef:50:a2:c8:e7:18:23:1f:67:dd:29:dc:06: c1:69:df:33:ee:b9:e3:10:62:12:06:0c:af:e9:8f:45:ef:f9: 41:31:ff:d2:2f:5c:f7:f7:b4:95:83:21:54:99:67:b2:ae:1f: d5:6c:69:c2:58:9e:f5:f4:45:e5:88:ce:44:a4:50:9d:0d:ac: 6d:6d:73:de:2e:17:e8:8a:1c:a5:d6:ad:c1:ea:17:15:22:12: bd:eb:9d:e9:d6:7a:d7:31:b4:b4:27:d0:8e:0e:f8:76:33:3a: 06:5d:96:e7:1f:83:6d:b4:48:00:08:e0:95:0a:20:a8:af:24: ce:23:59:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtorE2l4Yh/lIRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZmM1ZGEzM2UtZGU4Mi00YzgwLThkNmQtOTlmZTg4M2I2OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKt4LexjokBj+KGlCUHacAaJ6jbX9N6mYURG gZ/ePbbjkG6gHSWY7OKC3jayWVNik7p6pWseqpTnr7afRJpnrElnhXtuV7X8C3ec P5aTa1Ds3NKBVP1TfRmehMAltY5UT9a56wYseY/NsyCw1qfPrMxyaTfG3YkPlGqB kj8dElvoYeQYtcPxVh2AgxsVL5YlWZXIoJwTD1UvpDEJHxc5K62yYLCChM1QK1PC gTPoIoSlmQfyJ08mTJsmY+VohaqZsi0e1OVCOM3atEiOduCEn34pebY/SbXAmz8E YJcZFJ8sb9mKCl1tPKa9fTd33te6j5mGc7AP8gMG0amUYMbgNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXY+nFjelld+Zop5gnXZUGAuBCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWVhNGVlNjctMjY5OS0z YTBiLWE5NzgtMTNhN2IzNDViODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/DfD6yRFQwMgIMRGnQRDSqSZdSiisuJCeGhW+b8+DwU0IM6IlBYL4+ v2z1jXQL6PBS14UoKm2XVjmYd6HQog4/KBSucc7Tg9G1L0/v2xvHhGF0VjC3Lg51 gg0J1Tdy4hmcztP5idbRuzL9C2x4rqyeJgqIz7nzjh/INc8UH3DB3Aj671CiyOcY Ix9n3SncBsFp3zPuueMQYhIGDK/pj0Xv+UEx/9IvXPf3tJWDIVSZZ7KuH9VsacJY nvX0ReWIzkSkUJ0NrG1tc94uF+iKHKXWrcHqFxUiEr3rnenWetcxtLQn0I4O+HYz OgZdlucfg220SAAI4JUKIKivJM4jWec= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org