$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json) Hash identifier: AHuHcxGkePZ1BnAqVG7qx2/m6Yw1xYACH0uRJ0ukSQ8= Subject key identifier: CF:98:C8:DA:29:54:38:7D:E9:B1:A3:64:30:8F:5A:78:81:9C:42:89 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F43285847AB6C12CA512E043187162B80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 21777 IP address blocks: 206.168.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:12:ca:51:2e:04:31:87:16:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=69b76002-4a16-41c0-a339-e6f73e675a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:09:39:e5:9a:cf:c8:18:ee:46:9d:db:50: 9c:49:a2:2b:8c:62:5f:0f:ce:49:8c:50:c0:27:54: 63:73:a2:7d:c5:9a:a0:90:d7:5c:92:f3:ef:f6:c4: 3c:5f:16:90:dc:eb:db:69:a3:a3:c4:6d:1c:b6:db: 6d:1f:1f:b6:22:7e:01:f4:7d:e0:05:cf:79:51:3b: 2a:f9:de:ce:2c:54:b1:20:39:44:d2:3d:f7:2e:0e: 58:32:81:54:dc:01:29:63:8b:2a:6c:c6:7b:08:4a: 74:03:27:c3:bb:83:87:dd:ea:79:99:34:1f:c9:bb: 64:b4:44:36:38:b9:22:54:8d:79:b4:57:03:31:b1: f5:49:00:fe:3c:74:8d:c8:8d:89:a9:2b:e8:b3:6c: fd:a9:73:20:4d:b9:b7:0f:01:38:fc:39:e9:af:f8: 7b:8c:23:d7:1a:38:37:0c:86:eb:05:17:77:ec:2b: 5f:a8:9a:5c:34:25:7f:f8:6f:83:28:80:65:35:93: d8:3e:fb:f6:39:8e:10:e1:88:0b:9c:75:ae:c6:3d: 77:4b:d3:84:57:eb:f8:9e:94:76:71:e7:ff:a3:bc: 24:ed:cd:f9:f6:25:23:0b:fb:27:99:09:1d:be:61: db:25:01:25:fd:1a:39:1b:f6:54:b4:b9:38:28:ba: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:C8:DA:29:54:38:7D:E9:B1:A3:64:30:8F:5A:78:81:9C:42:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f2:33:63:6c:2c:c5:f4:2f:f1:84:12:f5:0b:29:d7:85:78: bb:39:f3:ea:52:1a:e3:7d:30:d0:fd:8d:56:4c:ce:4b:d2:02: f0:ae:67:75:23:30:c8:60:30:82:af:dd:a1:00:f6:67:98:3d: db:8d:3c:cf:1f:4b:15:f6:a0:e8:a6:57:b7:1a:d0:43:df:cb: 01:7a:67:76:57:8b:62:e0:31:f0:5a:12:20:f3:be:cb:24:59: cc:d2:fd:28:12:f6:14:16:0f:ed:31:0f:a8:40:6a:d1:47:a4: 48:69:b6:03:a8:1e:47:ed:40:ea:6e:31:f9:95:e0:00:ea:28: ae:a7:a0:7b:c4:00:a5:43:ff:20:59:02:de:d8:ce:35:1a:70: 4c:f4:1b:ef:2f:f7:ed:b5:68:24:ad:83:01:9b:50:c1:59:3f: 68:d0:41:dd:2f:17:44:0a:1c:1e:0f:00:c8:6f:66:e0:6e:91: 08:d6:29:8c:8b:8a:6f:37:27:46:5e:54:36:e2:05:4d:bb:ea: cb:c2:65:5c:0c:fe:40:b8:15:c2:d3:fb:85:a3:3e:e0:1c:fd: 5d:cb:e5:54:8d:16:5c:04:63:56:6d:85:35:9c:a8:e0:b2:5d: 10:eb:4d:0a:66:52:e6:69:94:ce:24:73:fc:64:03:3f:6c:a4: 95:f7:22:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbBLKUS4EMYcWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk NjliNzYwMDItNGExNi00MWMwLWEzMzktZTZmNzNlNjc1YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QEJOeWaz8gY7kad21CcSaIrjGJfD85JjFDA J1Rjc6J9xZqgkNdckvPv9sQ8XxaQ3OvbaaOjxG0cttttHx+2In4B9H3gBc95UTsq +d7OLFSxIDlE0j33Lg5YMoFU3AEpY4sqbMZ7CEp0AyfDu4OH3ep5mTQfybtktEQ2 OLkiVI15tFcDMbH1SQD+PHSNyI2JqSvos2z9qXMgTbm3DwE4/Dnpr/h7jCPXGjg3 DIbrBRd37CtfqJpcNCV/+G+DKIBlNZPYPvv2OY4Q4YgLnHWuxj13S9OEV+v4npR2 cef/o7wk7c359iUjC/snmQkdvmHbJQEl/Ro5G/ZUtLk4KLp+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+YyNopVDh96bGjZDCPWniBnEKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZTY4ZDdiZDUtOWQzMC0z MGIxLWE3NmItOThlZjlhZWFmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbyM2NsLMX0L/GEEvULKdeFeLs58+pSGuN9MND9jVZMzkvSAvCuZ3Uj MMhgMIKv3aEA9meYPduNPM8fSxX2oOimV7ca0EPfywF6Z3ZXi2LgMfBaEiDzvssk WczS/SgS9hQWD+0xD6hAatFHpEhptgOoHkftQOpuMfmV4ADqKK6noHvEAKVD/yBZ At7YzjUacEz0G+8v9+21aCStgwGbUMFZP2jQQd0vF0QKHB4PAMhvZuBukQjWKYyL im83J0ZeVDbiBU276svCZVwM/kC4FcLT+4WjPuAc/V3L5VSNFlwEY1ZthTWcqOCy XRDrTQpmUuZplM4kc/xkAz9spJX3IgU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org