$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa File: 1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa (raw, json) Hash identifier: 1H7bJA2BiD2eOPt+f/y6A9OpJxOMWkJ1V1XMXizW57Q= Subject key identifier: 00:E2:ED:8F:68:28:DB:65:DD:FA:50:28:30:30:BF:A6:7C:50:43:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B2EE6A3D2F8958A8C2500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 198.45.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:2e:e6:a3:d2:f8:95:8a:8c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=18d10bee-2bd6-445a-8822-c301eebb0059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:22:fd:01:69:cb:a4:ec:e8:1a:ff:b0:9f: 0c:73:e1:ea:7a:b5:43:b5:9c:d5:43:31:9b:24:a8: 58:90:cc:ec:fc:83:45:ad:ea:eb:97:23:b8:ba:b7: 24:48:4b:46:c3:01:96:d3:ab:be:70:fb:5d:5b:bb: 2f:47:64:7e:e3:e9:3a:a2:42:e2:8e:ab:a6:7f:fa: f5:69:43:f0:80:61:2e:5e:68:c0:e3:3c:35:cb:26: c2:19:fa:22:84:f7:d9:d3:41:1a:6f:b3:32:a6:1c: b5:14:d6:06:66:b9:f6:88:f0:84:9e:71:05:6f:38: e6:bc:dc:99:5f:3b:ae:29:8f:1f:07:7d:f0:ad:10: 7c:aa:4b:dc:02:33:66:2d:03:c0:d7:7e:5e:5b:ac: aa:b3:6a:fa:f3:72:32:eb:69:f7:d1:f4:1f:f0:2b: 66:9c:12:cd:b9:56:b7:e6:06:98:ad:eb:77:7c:ae: 25:e1:b9:ca:50:37:3d:93:96:1e:04:fa:4c:c7:ae: f3:67:a7:a6:29:38:3c:e7:23:80:75:66:10:1a:f4: 60:b1:30:64:2f:4e:66:ae:57:21:c8:f4:43:71:84: 27:9f:ed:ea:bc:68:cb:77:31:d5:54:36:75:94:01: d9:a1:30:03:88:1a:ad:47:eb:ab:18:f4:5f:98:97: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:ED:8F:68:28:DB:65:DD:FA:50:28:30:30:BF:A6:7C:50:43:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a97c544-9fcf-3017-9e8e-82bd63b3356e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c6:29:b8:a2:61:50:fc:98:90:04:86:7c:0e:d8:d8:b6:14: a4:e9:e5:ca:0d:23:32:70:d6:6f:e8:9e:58:b7:94:b4:3e:62: ed:b4:0b:4e:c2:f2:4f:69:9f:23:07:3f:0e:5f:7e:46:f5:22: 19:fb:41:03:dc:51:ea:72:e0:a9:3f:3f:d6:d1:bc:78:b3:ae: 6e:ad:9d:bd:33:d5:7d:9b:a2:1c:43:ff:89:05:20:fb:4a:cc: 4c:fe:ee:7d:3d:4a:98:9e:d2:42:b5:7c:73:69:df:27:3c:78: 9a:29:81:4b:c3:de:43:93:eb:38:e7:43:60:50:2a:e7:c7:26: 95:f9:6d:de:50:0e:31:18:e3:47:0a:f2:b7:fb:40:fd:37:b8: d3:90:c2:4b:bc:8a:02:7e:46:0b:d8:e4:65:8d:10:fc:36:02: ad:d2:13:17:72:ac:ce:9f:0f:b4:04:1f:21:61:26:54:81:44: 9b:34:19:6f:91:0e:69:91:a4:90:90:29:52:28:5a:7e:16:8f: e9:9c:a0:db:fa:9e:29:69:ae:1c:e2:e2:8c:e0:b5:e1:8f:ba: bb:a2:91:92:cb:3b:52:e1:41:21:ed:30:ed:f3:de:11:c2:e8: 90:7c:5d:7f:97:4b:49:83:12:04:c1:10:29:68:5e:eb:c8:44: d5:6a:02:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKy7mo9L4lYqMJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MThkMTBiZWUtMmJkNi00NDVhLTg4MjItYzMwMWVlYmIwMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkIi/QFpy6Ts6Br/sJ8Mc+HqerVDtZzVQzGb JKhYkMzs/INFrerrlyO4urckSEtGwwGW06u+cPtdW7svR2R+4+k6okLijqumf/r1 aUPwgGEuXmjA4zw1yybCGfoihPfZ00Eab7Myphy1FNYGZrn2iPCEnnEFbzjmvNyZ XzuuKY8fB33wrRB8qkvcAjNmLQPA135eW6yqs2r683Iy62n30fQf8CtmnBLNuVa3 5gaYret3fK4l4bnKUDc9k5YeBPpMx67zZ6emKTg85yOAdWYQGvRgsTBkL05mrlch yPRDcYQnn+3qvGjLdzHVVDZ1lAHZoTADiBqtR+urGPRfmJccEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADi7Y9oKNtl3fpQKDAwv6Z8UEOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWE5N2M1NDQtOWZjZi0z MDE3LTllOGUtODJiZDYzYjMzNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnGKbiiYVD8mJAEhnwO2Ni2FKTp5coNIzJw1m/onli3lLQ+Yu20C07C 8k9pnyMHPw5ffkb1Ihn7QQPcUepy4Kk/P9bRvHizrm6tnb0z1X2bohxD/4kFIPtK zEz+7n09Spie0kK1fHNp3yc8eJopgUvD3kOT6zjnQ2BQKufHJpX5bd5QDjEY40cK 8rf7QP03uNOQwku8igJ+RgvY5GWNEPw2Aq3SExdyrM6fD7QEHyFhJlSBRJs0GW+R DmmRpJCQKVIoWn4Wj+mcoNv6nilprhzi4ozgteGPuruikZLLO1LhQSHtMO3z3hHC 6JB8XX+XS0mDEgTBECloXuvIRNVqArE= -----END CERTIFICATE-----Generated at Mon Nov 25 01:02:49 2024 by rpki-client on console-ams.rpki-client.org