$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa File: 95ba1ae1-7080-38af-84e0-b79e7484f667.roa (raw, json) Hash identifier: LN3qX7K+7N2rge/NalL++zctLvHcVXuTaEGnI4QcEv4= Subject key identifier: B2:51:56:9F:0A:12:1C:E5:EB:10:B3:9D:22:E6:6B:02:11:87:A2:5A Certificate issuer: /CN=96fbd019-e8e1-4204-844b-f1654a891e0d Certificate serial: 010D0C9F4328584807AA7042F913138A7982B480 Authority key identifier: 5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa Signing time: Thu 28 Nov 2024 14:00:52 +0000 ROA not before: Thu 28 Nov 2024 14:00:52 +0000 ROA not after: Wed 26 Feb 2025 14:00:52 +0000 asID: 11796 IP address blocks: 198.161.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:07:aa:70:42:f9:13:13:8a:79:82:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fbd019-e8e1-4204-844b-f1654a891e0d Validity Not Before: Nov 28 14:00:52 2024 GMT Not After : Feb 26 14:00:52 2025 GMT Subject: CN=ecf3e5d3-9ca3-4c75-9b5f-aa47fcaa2f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:0f:1e:7c:eb:fc:32:42:76:6c:db:46:65: ba:3d:a3:e6:17:9f:c6:e3:0b:89:94:3d:58:c5:aa: 37:85:78:2f:f4:6a:29:7b:08:de:b8:e3:6c:f3:ff: 97:16:bf:63:0a:ce:88:db:ba:aa:e1:34:3a:cd:f3: ed:e9:11:ab:18:32:05:bd:d4:8e:74:11:c1:49:b4: 69:08:68:97:50:6d:0f:5a:21:9e:6f:01:a6:ce:c2: b5:b5:66:17:04:69:cd:00:ec:0e:32:42:e7:53:de: 39:35:b2:cf:4a:a7:58:f2:43:d9:17:a2:44:6b:ca: 93:d8:2c:00:aa:40:b6:81:79:22:d6:50:c6:38:45: 6d:2a:17:4c:a3:a2:8f:c6:53:52:3a:1f:f1:c2:0f: 19:61:8a:af:2b:21:03:b0:79:1e:02:e0:22:00:90: f5:69:b6:5a:12:41:eb:a8:b3:fa:d6:2b:c8:70:cd: 86:7b:e6:b1:d2:c4:bd:3b:99:8d:03:5d:9c:4d:ad: dd:ad:fb:d5:ba:c0:1a:c3:86:ea:fc:23:60:52:00: 12:dc:3a:37:4e:1f:4c:d7:fb:86:24:c0:2e:89:de: ca:07:4d:09:b0:94:9d:5c:48:1d:40:38:7a:37:d7: 76:65:32:7d:14:3f:ae:af:f3:61:45:6b:20:6e:ab: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:56:9F:0A:12:1C:E5:EB:10:B3:9D:22:E6:6B:02:11:87:A2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl X509v3 Authority Key Identifier: keyid:5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:39:5e:24:55:a6:e5:30:a7:5d:97:9b:b5:fe:2d:1b:20:e4: 51:89:48:2d:4a:f1:15:ca:dd:cd:06:f0:0d:cc:78:15:4f:d6: 9a:3a:1b:96:bc:76:33:7a:d0:18:0f:16:51:cd:82:61:4f:dd: c1:0e:91:82:cb:71:ac:08:86:dd:c1:d3:b9:e6:7d:a9:76:5c: be:74:7f:f9:49:46:37:a7:2a:ae:d7:1c:ac:de:eb:7b:4e:c4: 74:14:0b:28:d5:40:86:c7:34:84:b6:46:36:7e:e7:0a:fd:67: 47:bc:94:43:c0:8e:d5:4c:01:c0:46:7b:b7:18:e7:d9:8e:0d: e1:fc:85:e1:45:e8:5d:7b:c8:9e:04:bc:67:5a:39:97:3e:9b: 09:2e:db:59:d7:17:05:6b:df:2a:51:cf:69:e5:16:12:29:e8: 27:8c:e9:51:2d:09:a8:8c:1b:a7:0e:c0:d8:39:66:c3:f2:72: b6:d1:f4:65:a2:1f:a4:66:e6:71:b6:2f:50:cf:c9:20:67:d5: 0e:ff:eb:93:a4:25:d2:ae:3c:15:de:f2:82:4f:ae:d7:9c:e9: 74:c6:bf:d1:8f:08:75:d4:b7:ec:04:21:3f:c7:5e:c8:87:cb: 46:d2:95:40:88:3a:7d:82:7d:0a:fa:53:00:4b:47:f3:b2:21: ab:5c:4f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqnBC+RMTinmCtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZmYmQwMTktZThlMS00MjA0LTg0NGItZjE2NTRhODkx ZTBkMB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk ZWNmM2U1ZDMtOWNhMy00Yzc1LTliNWYtYWE0N2ZjYWEyZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUPHnzr/DJCdmzbRmW6PaPmF5/G4wuJlD1Y xao3hXgv9GopewjeuONs8/+XFr9jCs6I27qq4TQ6zfPt6RGrGDIFvdSOdBHBSbRp CGiXUG0PWiGebwGmzsK1tWYXBGnNAOwOMkLnU945NbLPSqdY8kPZF6JEa8qT2CwA qkC2gXki1lDGOEVtKhdMo6KPxlNSOh/xwg8ZYYqvKyEDsHkeAuAiAJD1abZaEkHr qLP61ivIcM2Ge+ax0sS9O5mNA12cTa3drfvVusAaw4bq/CNgUgAS3Do3Th9M1/uG JMAuid7KB00JsJSdXEgdQDh6N9d2ZTJ9FD+ur/NhRWsgbqtQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJRVp8KEhzl6xCznSLmawIRh6JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NmZi ZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1NGE4OTFlMGQvOTViYTFhZTEtNzA4MC0z OGFmLTg0ZTAtYjc5ZTc0ODRmNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTZmYmQwMTktZThlMS00MjA0LTg0 NGItZjE2NTRhODkxZTBkLzk2ZmJkMDE5LWU4ZTEtNDIwNC04NDRiLWYxNjU0YTg5 MWUwZC5jcmwwHwYDVR0jBBgwFoAUWzMbFDbtwlbSXSmRn8DrYFFNj5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85NmZiZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1 NGE4OTFlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM5XiRVpuUwp12Xm7X+LRsg5FGJSC1K8RXK3c0G8A3MeBVP1po6G5a8 djN60BgPFlHNgmFP3cEOkYLLcawIht3B07nmfal2XL50f/lJRjenKq7XHKze63tO xHQUCyjVQIbHNIS2RjZ+5wr9Z0e8lEPAjtVMAcBGe7cY59mODeH8heFF6F17yJ4E vGdaOZc+mwku21nXFwVr3ypRz2nlFhIp6CeM6VEtCaiMG6cOwNg5ZsPycrbR9GWi H6Rm5nG2L1DPySBn1Q7/65OkJdKuPBXe8oJPrtec6XTGv9GPCHXUt+wEIT/HXsiH y0bSlUCIOn2CfQr6UwBLR/OyIatcTwI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:31 2025 by rpki-client