$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa File: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (raw, json) Hash identifier: jXY2asj/R/j72OvaR/E5Qq3GkvYuCzn5gbeVaqz+koE= Subject key identifier: 5D:7A:14:CC:43:EC:07:31:41:7F:E3:70:E0:44:33:26:8C:62:2C:42 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F432858479D76BA39166D14761F68FDF0 Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 394907 IP address blocks: 159.242.32.0/19 maxlen: 24 172.83.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ba:39:16:6d:14:76:1f:68:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=5bbf6f7d-664f-445f-9406-5eaa6f26e998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:96:38:ce:ad:62:41:27:1c:52:1d:54:d3: fd:64:32:68:44:41:31:01:f6:e0:70:40:6d:de:e2: ae:6f:bd:17:26:05:d7:d2:d5:b1:9f:f1:9c:6d:62: 6b:75:cd:23:e6:48:29:20:d5:3c:1f:8b:4a:37:57: 11:ed:d9:bf:0f:00:94:f8:48:3e:5f:2d:1a:66:89: ec:44:58:52:f2:1f:f7:58:3d:ce:5f:47:27:95:bf: 1c:e8:01:f0:5c:5f:75:31:e1:12:dc:8d:ca:a6:71: 9e:6b:f2:e3:ae:cf:e0:33:29:ec:6d:c6:15:1b:19: ab:9e:c8:ce:f4:98:26:82:fe:d0:06:3d:bd:db:61: 2c:e3:e7:8e:e8:97:fc:ff:41:15:21:e4:5b:19:f6: 1d:cc:e5:1b:e3:6a:9a:39:b4:4c:3b:4d:20:e9:8f: d7:a1:f5:e7:d6:d9:28:c2:81:53:2c:6b:9c:51:e2: c4:5a:49:eb:bc:14:a6:4b:fb:32:d6:8a:c5:74:7f: dc:9b:11:ca:13:ab:4a:08:27:63:1d:d9:61:74:13: a8:ab:73:93:8f:7d:20:cf:2f:ef:e9:d9:d1:19:2d: 78:11:a3:48:95:b1:c3:ba:07:3d:43:c9:f0:ef:24: d6:04:3c:83:90:06:57:0f:ca:36:4f:64:ad:9a:54: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:14:CC:43:EC:07:31:41:7F:E3:70:E0:44:33:26:8C:62:2C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: 159.242.32.0/19 172.83.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bc:70:23:ef:e0:58:aa:e1:c5:62:1b:ec:df:b8:db:f5:ee: ec:bb:d6:ae:5a:44:1e:6c:30:13:7f:67:22:44:b8:05:84:a3: 37:dc:aa:e0:e3:28:9c:58:93:66:ff:9e:e5:72:07:0e:82:02: 27:1a:af:51:76:6b:5f:ea:49:e4:14:48:e7:02:6e:52:3f:19: 8a:56:e2:f2:7f:52:19:61:db:a0:6c:70:61:c4:75:db:50:61: 85:49:1a:18:e0:ca:3e:67:c4:bc:e5:f3:1c:83:8c:a5:46:8e: 00:aa:e7:c0:78:4c:75:16:88:42:59:f6:45:2b:cb:90:1e:39: c9:77:fd:cc:a5:ad:e9:54:6b:b3:b0:be:75:30:aa:76:ba:d1: c2:75:81:3a:08:1d:b6:ec:09:fa:13:77:5a:0c:62:5d:e9:2a: 59:3d:e2:f7:ed:c9:4c:b4:43:f3:75:0d:9b:e6:a7:a6:8d:aa: 59:0d:dd:67:63:0a:33:5e:7a:4e:61:cf:60:24:ee:4e:f4:f6: 1a:dd:f4:60:30:5e:2d:f1:94:1e:33:88:18:96:42:fa:ea:e2: f4:8e:95:a3:bc:32:4f:29:8a:b8:e7:02:ee:df:72:24:1f:fc: 8e:44:01:a0:d0:57:4b:5e:9f:d0:99:ce:5c:dc:e7:b1:a4:cd: 83:da:2e:df -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeddro5Fm0Udh9o/fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NWJiZjZmN2QtNjY0Zi00NDVmLTk0MDYtNWVhYTZmMjZlOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BCWOM6tYkEnHFIdVNP9ZDJoREExAfbgcEBt 3uKub70XJgXX0tWxn/GcbWJrdc0j5kgpINU8H4tKN1cR7dm/DwCU+Eg+Xy0aZons RFhS8h/3WD3OX0cnlb8c6AHwXF91MeES3I3KpnGea/Ljrs/gMynsbcYVGxmrnsjO 9Jgmgv7QBj2922Es4+eO6Jf8/0EVIeRbGfYdzOUb42qaObRMO00g6Y/XofXn1tko woFTLGucUeLEWknrvBSmS/sy1orFdH/cmxHKE6tKCCdjHdlhdBOoq3OTj30gzy/v 6dnRGS14EaNIlbHDugc9Q8nw7yTWBDyDkAZXD8o2T2StmlSMnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF16FMxD7AcxQX/jcOBEMyaMYixCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvOThiNzZhZjQtY2RhMy0z ZDk0LTk1NTEtNjc3YmEwY2MzNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn/IgAwQE rFMQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFa8cCPv4Fiq4cViG+zfuNv17uy71q5aRB5sMBN/ZyJEuAWE ozfcquDjKJxYk2b/nuVyBw6CAicar1F2a1/qSeQUSOcCblI/GYpW4vJ/Uhlh26Bs cGHEddtQYYVJGhjgyj5nxLzl8xyDjKVGjgCq58B4THUWiEJZ9kUry5AeOcl3/cyl relUa7OwvnUwqna60cJ1gToIHbbsCfoTd1oMYl3pKlk94vftyUy0Q/N1DZvmp6aN qlkN3WdjCjNeek5hz2Ak7k709hrd9GAwXi3xlB4ziBiWQvrq4vSOlaO8Mk8pirjn Au7fciQf/I5EAaDQV0ten9CZzlzc57GkzYPaLt8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org