$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa File: 89a846c9-5a33-333a-a489-267263a98c98.roa (raw, json) Hash identifier: ovay3iSQmYWTXS44UqCUjlyMjzsCDuBkNh+gnAKMMI4= Subject key identifier: 15:7C:92:AE:C3:F2:A0:29:FF:1C:00:2D:AB:B7:45:56:18:FE:C1:69 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F432858474850A5092B4CA01739C68D80 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 14593 IP address blocks: 198.54.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:a5:09:2b:4c:a0:17:39:c6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=72cb4f27-f31d-4521-937f-10406708d9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:85:b5:31:8f:4b:1f:16:02:4e:51:0d:e9: f4:9b:6e:53:1a:5f:30:ec:39:e1:01:48:04:d5:e5: e7:31:db:f9:32:13:7c:e8:3d:59:00:12:b0:35:1d: bc:8f:e5:76:1b:24:32:0b:47:1d:7e:2a:3b:d3:f6: 33:fe:b3:3c:fe:bd:fd:a7:46:50:a9:3f:17:b7:c0: 38:ca:fa:5a:e1:67:93:e3:bf:52:f6:f0:76:df:1b: 9d:7e:8c:02:fc:56:68:95:f2:ad:1e:fb:64:97:3e: 9a:e5:67:46:0e:92:b4:84:b0:32:e3:de:23:15:50: 11:94:3b:d5:b7:74:f7:16:a3:cd:68:d4:10:12:8b: 49:2a:9b:26:fc:2b:54:ff:4a:93:db:7f:85:7a:5d: 94:cc:78:b0:b1:67:18:b7:64:56:a5:0d:9f:1f:13: 0e:1c:64:45:94:e7:72:3a:d0:87:37:35:ff:0c:68: 70:74:0e:c6:77:8c:da:e9:0e:83:cb:08:c0:65:6d: 10:ba:3d:b6:0c:ce:bb:30:2d:a7:c9:c7:0b:5d:9e: e2:a8:70:b8:82:bf:0f:2a:08:b2:ab:06:19:e4:3c: 89:c0:2d:0e:d3:cf:d7:e1:c7:a0:77:f1:7d:f4:c8: 33:32:1a:9c:ff:ff:19:3d:76:eb:5a:df:6b:66:e8: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:92:AE:C3:F2:A0:29:FF:1C:00:2D:AB:B7:45:56:18:FE:C1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 198.54.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:87:81:ee:32:63:99:0c:07:01:bb:7d:6e:8e:b2:b3:9d:a3: 71:4a:0b:3b:36:ef:38:91:45:c7:6b:d1:b0:16:fd:4b:18:26: c4:47:4e:aa:14:a2:9d:6a:c5:86:63:64:a2:0f:60:ed:90:71: 8c:a6:59:2b:88:6d:dc:37:c2:43:fc:f4:f2:16:b3:61:c3:22: df:24:f9:60:5d:52:a7:44:58:cd:05:21:ca:ad:48:ec:0a:68: 2f:47:7e:fb:9c:2a:92:da:e0:e4:f8:b0:c1:e8:d7:7f:a1:5a: 64:b3:1c:7f:a7:97:8b:f1:68:16:0b:63:dd:9f:e5:8a:ba:db: 4b:a5:c8:bf:66:13:f3:86:f0:ff:45:35:5d:33:e2:9c:75:13: 07:9a:8f:2b:78:f4:2d:bd:8d:93:41:6e:37:72:a3:15:d2:fe: ac:fe:49:8d:a6:ae:f2:1c:0e:40:cc:77:db:38:35:3a:aa:4b: f3:5c:23:f7:ce:dc:c6:4c:bd:da:06:f6:6b:a8:1d:b1:ce:36: 03:11:0e:98:20:12:08:81:c3:ee:43:91:a8:f3:f2:e2:be:5c: 8e:f1:19:b7:a6:2f:75:83:4b:4e:4a:a2:c9:19:92:85:2a:59: e5:82:f0:69:2c:11:c2:ae:96:0a:f5:11:c5:0f:dd:d9:be:f1: 59:08:cd:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUKUJK0ygFznGjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk NzJjYjRmMjctZjMxZC00NTIxLTkzN2YtMTA0MDY3MDhkOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBeFtTGPSx8WAk5RDen0m25TGl8w7DnhAUgE 1eXnMdv5MhN86D1ZABKwNR28j+V2GyQyC0cdfio70/Yz/rM8/r39p0ZQqT8Xt8A4 yvpa4WeT479S9vB23xudfowC/FZolfKtHvtklz6a5WdGDpK0hLAy494jFVARlDvV t3T3FqPNaNQQEotJKpsm/CtU/0qT23+Fel2UzHiwsWcYt2RWpQ2fHxMOHGRFlOdy OtCHNzX/DGhwdA7Gd4za6Q6DywjAZW0Quj22DM67MC2nyccLXZ7iqHC4gr8PKgiy qwYZ5DyJwC0O08/X4cegd/F99MgzMhqc//8ZPXbrWt9rZuiW3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV8kq7D8qAp/xwALau3RVYY/sFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvODlhODQ2YzktNWEzMy0z MzNhLWE0ODktMjY3MjYzYTk4Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaHge4yY5kMBwG7fW6OsrOdo3FKCzs27ziRRcdr0bAW/UsYJsRHTqoU op1qxYZjZKIPYO2QcYymWSuIbdw3wkP89PIWs2HDIt8k+WBdUqdEWM0FIcqtSOwK aC9HfvucKpLa4OT4sMHo13+hWmSzHH+nl4vxaBYLY92f5Yq620ulyL9mE/OG8P9F NV0z4px1Eweajyt49C29jZNBbjdyoxXS/qz+SY2mrvIcDkDMd9s4NTqqS/NcI/fO 3MZMvdoG9muoHbHONgMRDpggEgiBw+5Dkajz8uK+XI7xGbemL3WDS05KoskZkoUq WeWC8GksEcKulgr1EcUP3dm+8VkIzeM= -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org