$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa File: 995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json) Hash identifier: R4KYdTrx6ODPm6lBnw5cJdTaCuM95cSiKvXi+tBDDos= Subject key identifier: C2:AB:CA:0A:7E:E7:62:A9:76:84:80:9D:5D:B7:C0:EE:69:DA:8F:34 Certificate issuer: /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65 Certificate serial: 010D0C9F432858479AABEA31EE1E2682255E2280 Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 60011 IP address blocks: 198.199.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:ea:31:ee:1e:26:82:25:5e:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=2b83693c-0218-4ccd-a299-715f64a9a0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:e6:16:cb:a8:18:66:d5:28:26:25:76:af: 52:0f:70:e3:33:5d:33:f0:97:ed:85:d5:40:47:05: cd:dc:b4:db:ba:90:85:54:e2:9b:e0:da:a6:1e:44: 8f:a5:1e:23:21:e1:c1:79:d6:47:18:3c:af:57:0c: 94:bd:a1:b6:ec:ca:c0:42:fe:d8:98:da:70:ab:4b: c4:ae:bc:ed:d5:c8:ee:94:ff:19:96:26:cc:b0:41: 15:23:da:32:14:93:87:23:f8:2a:f9:69:fa:8e:f4: 21:0d:97:10:bf:8d:6e:86:85:94:25:fd:2a:e7:c9: 0b:e4:ec:52:71:76:68:d0:f3:c3:3f:61:ab:61:9b: e3:14:60:67:9b:c9:4e:32:60:60:f4:f7:15:62:8b: a7:a9:ea:0d:76:cd:80:f5:bc:b6:2d:03:63:bc:f4: 6f:4e:5d:17:5a:57:79:83:e1:36:7c:66:16:9b:cd: 06:93:fa:11:06:3d:ff:e4:26:bb:db:c2:20:d1:52: af:36:bd:e3:72:fc:7d:98:a3:dd:ab:72:09:04:d7: cf:fe:27:1d:04:b0:2f:a9:56:e0:3f:1c:5c:02:84: 05:b1:c1:53:cf:bd:f3:3b:ea:4f:61:0d:6c:31:e2: 26:d3:62:66:46:63:22:da:7c:93:da:15:64:db:76: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AB:CA:0A:7E:E7:62:A9:76:84:80:9D:5D:B7:C0:EE:69:DA:8F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl X509v3 Authority Key Identifier: keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer sbgp-ipAddrBlock: critical IPv4: 198.199.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2a:09:42:29:21:43:74:5b:fc:d5:04:89:88:1a:a2:d9:ed: c2:5e:59:35:3b:64:81:2d:55:c7:50:e8:c8:6b:e8:fe:2f:d7: 38:55:90:78:c6:31:36:5e:35:38:f0:ad:f0:83:e6:fe:34:97: 0f:cb:59:c9:e2:39:c4:01:91:ef:01:90:f6:b9:a4:bb:e5:73: 4a:23:76:12:fd:78:e1:6a:9d:d3:44:b8:86:df:3a:69:c9:db: 07:67:10:9b:02:31:0f:4f:ee:c7:17:c6:eb:3c:a0:be:01:de: 17:11:1f:77:27:dc:ab:c1:4d:b8:50:24:12:65:0a:73:36:86: fb:2d:5b:46:4d:60:ca:a1:0e:96:97:d1:fe:e3:3a:41:12:8a: 54:06:5f:45:04:d5:5d:5e:0e:7a:d2:6f:51:3b:d7:fe:15:9a: dc:ad:86:cb:bd:db:08:08:58:e0:82:f2:22:57:eb:a8:01:d5: 0b:49:13:b6:55:df:18:fd:0e:2a:cc:43:40:f2:7a:42:54:6f: db:63:38:e9:7e:19:49:72:0c:4a:41:a1:f2:eb:72:35:85:10: f9:10:72:1c:e8:d8:af:42:c1:dd:b8:7c:70:a2:05:e0:ce:8b: 9a:53:e6:d9:41:e1:06:73:23:b0:4d:6b:95:a8:1d:cc:26:cb: a3:c7:c0:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+ox7h4mgiVeIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0OWM2MmQtNTBlNC00ZmNiLTlkZmUtODYzNGQ0MDlm ZTY1MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MmI4MzY5M2MtMDIxOC00Y2NkLWEyOTktNzE1ZjY0YTlhMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBXmFsuoGGbVKCYldq9SD3DjM10z8JfthdVA RwXN3LTbupCFVOKb4NqmHkSPpR4jIeHBedZHGDyvVwyUvaG27MrAQv7YmNpwq0vE rrzt1cjulP8ZlibMsEEVI9oyFJOHI/gq+Wn6jvQhDZcQv41uhoWUJf0q58kL5OxS cXZo0PPDP2GrYZvjFGBnm8lOMmBg9PcVYounqeoNds2A9by2LQNjvPRvTl0XWld5 g+E2fGYWm80Gk/oRBj3/5Ca728Ig0VKvNr3jcvx9mKPdq3IJBNfP/icdBLAvqVbg PxxcAoQFscFTz73zO+pPYQ1sMeIm02JmRmMi2nyT2hVk23ZXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKrygp+52KpdoSAnV23wO5p2o80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5 YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0ZDQwOWZlNjUvOTk1ZDYwOGQtOGE3Ni0z NTYyLWJkNGYtZWIwZTkyZjM2YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDg0OWM2MmQtNTBlNC00ZmNiLTlk ZmUtODYzNGQ0MDlmZTY1L2Q4NDljNjJkLTUwZTQtNGZjYi05ZGZlLTg2MzRkNDA5 ZmU2NS5jcmwwHwYDVR0jBBgwFoAUa0Z3YIBpaPMhTWH5ch5VmWyup0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0 ZDQwOWZlNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsebMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMqCUIpIUN0W/zVBImIGqLZ7cJeWTU7ZIEtVcdQ6Mhr6P4v1zhVkHjG MTZeNTjwrfCD5v40lw/LWcniOcQBke8BkPa5pLvlc0ojdhL9eOFqndNEuIbfOmnJ 2wdnEJsCMQ9P7scXxus8oL4B3hcRH3cn3KvBTbhQJBJlCnM2hvstW0ZNYMqhDpaX 0f7jOkESilQGX0UE1V1eDnrSb1E71/4Vmtythsu92wgIWOCC8iJX66gB1QtJE7ZV 3xj9DirMQ0DyekJUb9tjOOl+GUlyDEpBofLrcjWFEPkQchzo2K9Cwd24fHCiBeDO i5pT5tlB4QZzI7BNa5WoHcwmy6PHwJI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:07 2024 by rpki-client on console-ams.rpki-client.org