$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf8cb4d0-5403-325d-a13e-729309c62de4.roa File: bf8cb4d0-5403-325d-a13e-729309c62de4.roa (raw, json) Hash identifier: yiWuDzO7bYO1wbLGTmTrmb/iDs0wDPv1fl80lnDqwso= Subject key identifier: 6C:48:32:3F:70:C0:5D:12:1A:03:8E:64:97:F4:3F:C0:B2:76:D1:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AE4A9FD808D038D4BDDA580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf8cb4d0-5403-325d-a13e-729309c62de4.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 162.158.97.0/24 maxlen: 24 198.41.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:e4:a9:fd:80:8d:03:8d:4b:dd:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=58dedcc7-e349-4f9c-af73-feb6737d0814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:b5:d8:e8:0f:ff:a6:54:89:3a:98:42:18: 88:97:a6:da:66:cf:c7:2c:98:30:27:03:4d:5f:50: 5b:b2:33:f5:3c:bb:e5:7d:ed:27:de:25:84:65:cf: 3f:16:5a:4b:c1:15:92:a5:82:21:c6:d1:d5:46:56: f2:72:b5:51:10:f6:30:39:55:c4:f4:bb:15:a3:79: 5b:61:21:33:f2:b2:1c:d2:08:b5:0a:b8:62:46:a9: 0d:d3:1d:9a:02:4a:38:3d:7d:87:5a:b6:5a:4c:13: ea:c0:c0:24:c7:6f:58:5a:d6:a2:90:30:7c:3c:31: 9e:18:e0:7e:f0:8e:62:e0:a3:19:5e:18:b6:b2:53: 53:09:37:fa:f2:85:34:b4:88:76:b0:51:4f:46:21: dd:c3:37:09:e9:80:95:1f:ce:07:14:c8:9a:93:f0: c9:da:35:5b:41:af:89:bf:9a:d5:07:7b:72:b6:b5: 97:be:d5:a1:75:ea:f8:05:33:e7:d5:29:36:b5:cc: be:0e:c5:1f:50:d6:6e:e9:10:8c:81:7f:2c:6a:51: 40:63:af:c5:15:9d:21:21:e0:f0:28:77:ae:d2:12: e9:33:5f:09:de:02:aa:0d:ed:a3:fe:46:b1:45:cf: 18:a2:de:b7:d5:2b:a4:5a:04:81:ce:4e:f9:6b:c9: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:48:32:3F:70:C0:5D:12:1A:03:8E:64:97:F4:3F:C0:B2:76:D1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf8cb4d0-5403-325d-a13e-729309c62de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.97.0/24 198.41.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f4:8e:95:e5:70:28:9b:eb:2e:1d:40:9b:c2:5c:ba:51:74: 83:64:ed:9a:97:03:43:91:a4:78:61:bf:90:2e:f3:47:2f:54: f8:a7:11:df:6e:5f:18:13:ed:c6:65:49:71:39:7a:6a:78:f0: f6:ad:55:da:48:f4:8c:be:be:88:8a:98:60:d3:cf:26:16:59: 6b:87:41:e5:7f:a4:de:b6:1b:6b:65:e3:e3:4e:03:1e:af:de: 6c:d4:e3:c4:72:7e:43:63:f2:5f:a6:63:c5:1f:9b:d6:89:28: 02:da:37:48:bb:d1:e2:cd:03:33:5b:c3:19:21:2d:05:16:f0: 2b:e7:91:5b:68:49:1c:08:74:57:d8:28:fd:bb:a7:b2:da:0d: 7e:b9:91:fb:c2:59:d1:25:4e:a9:2c:58:ee:41:73:54:1b:4e: 19:81:2e:a0:5c:62:f6:32:86:8c:90:82:2a:b1:1a:f4:6f:6a: c7:05:dd:b0:c9:e5:de:c8:e4:25:b1:c2:aa:ad:f3:79:56:84: c3:5b:83:fa:8e:94:f2:9e:ba:bd:5e:6e:67:47:f7:fb:0f:ad: 8a:fa:8e:b0:de:b0:5b:84:df:b0:a4:04:f9:46:f9:d7:8a:1f: 96:57:87:68:59:0e:ec:b0:e8:0d:3c:d7:0d:2f:72:56:d6:a7: ee:7b:37:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEc65Kn9gI0DjUvdpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk NThkZWRjYzctZTM0OS00ZjljLWFmNzMtZmViNjczN2QwODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYy12OgP/6ZUiTqYQhiIl6baZs/HLJgwJwNN X1BbsjP1PLvlfe0n3iWEZc8/FlpLwRWSpYIhxtHVRlbycrVREPYwOVXE9LsVo3lb YSEz8rIc0gi1CrhiRqkN0x2aAko4PX2HWrZaTBPqwMAkx29YWtaikDB8PDGeGOB+ 8I5i4KMZXhi2slNTCTf68oU0tIh2sFFPRiHdwzcJ6YCVH84HFMiak/DJ2jVbQa+J v5rVB3tytrWXvtWhder4BTPn1Sk2tcy+DsUfUNZu6RCMgX8salFAY6/FFZ0hIeDw KHeu0hLpM18J3gKqDe2j/kaxRc8Yot631SukWgSBzk75a8lrAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGxIMj9wwF0SGgOOZJf0P8CydtGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY4Y2I0ZDAtNTQwMy0z MjVkLWExM2UtNzI5MzA5YzYyZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAop5hAwQA xingMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABf0jpXlcCib6y4dQJvCXLpRdINk7ZqXA0ORpHhhv5Au80cv VPinEd9uXxgT7cZlSXE5emp48PatVdpI9Iy+voiKmGDTzyYWWWuHQeV/pN62G2tl 4+NOAx6v3mzU48RyfkNj8l+mY8Ufm9aJKALaN0i70eLNAzNbwxkhLQUW8CvnkVto SRwIdFfYKP27p7LaDX65kfvCWdElTqksWO5Bc1QbThmBLqBcYvYyhoyQgiqxGvRv ascF3bDJ5d7I5CWxwqqt83lWhMNbg/qOlPKeur1ebmdH9/sPrYr6jrDesFuE37Ck BPlG+deKH5ZXh2hZDuyw6A081w0vclbWp+57N5w= -----END CERTIFICATE-----Generated at Fri Nov 22 02:36:05 2024 by rpki-client on console-fra.rpki-client.org