$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa File: 0856a966-01ae-37fe-8009-b52a5f3f3096.roa (raw, json) Hash identifier: asmWZzIqpd4pY8UvWPDXctGbseWgTrks0XfgIHhw1rU= Subject key identifier: 08:07:4B:85:7E:57:55:36:B1:44:36:D8:FF:27:69:AB:97:A9:E3:DA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584793B12759CFC01E9AD0E34680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 7029 IP address blocks: 198.20.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:27:59:cf:c0:1e:9a:d0:e3:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=411525b7-0fa6-434a-9530-e8573cc89239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:e7:69:a8:79:13:76:8e:6e:27:23:a3:84: cd:3d:41:d4:4a:5d:53:6a:fc:7d:c7:7e:b8:e9:f9: eb:ab:d0:ab:9b:7f:29:33:08:9a:82:a6:0c:ca:77: 15:b8:62:18:e1:92:ca:ea:3e:43:fb:64:19:5e:47: 86:7e:67:57:14:8c:2e:80:07:1e:71:ff:c6:ec:5d: eb:bd:29:b3:05:17:6c:24:c8:28:48:5a:ab:b1:2f: c5:6b:50:ef:99:71:71:8e:ad:06:1f:f3:96:f8:90: a9:6f:95:f2:80:68:71:2f:4d:be:ce:fc:4f:b7:38: 13:a7:97:6f:9f:a8:93:d3:cc:ef:a0:95:00:2a:c1: 0b:8c:b7:74:85:57:61:9f:fd:74:0a:89:41:c3:61: 41:65:dc:a8:5b:f0:d6:f6:7a:09:a3:da:6f:e6:6b: 20:db:34:28:06:3c:67:fa:dc:de:11:1d:71:f8:d8: e5:a6:87:08:56:8b:d8:83:67:1a:d0:0b:6e:7c:63: a6:e9:97:4d:40:c4:15:d4:60:fb:df:67:2d:b4:bf: 8e:d5:b9:a3:24:47:61:8e:31:08:81:82:c2:d1:f8: 84:9b:76:88:7e:8a:2e:fb:81:5e:4b:fc:a1:4e:cc: 2c:44:86:ae:f0:eb:4b:e8:02:29:1b:61:d7:e5:a6: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:07:4B:85:7E:57:55:36:B1:44:36:D8:FF:27:69:AB:97:A9:E3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0856a966-01ae-37fe-8009-b52a5f3f3096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:f4:8a:23:37:2f:0f:fc:0c:8d:b5:f3:e4:2e:bf:64:07: a5:02:67:8c:9d:d7:cc:be:13:0e:03:08:9b:5c:2c:e7:fa:56: e6:b8:ae:b5:45:db:2a:fc:6c:48:2f:2d:7a:df:f6:b0:81:c9: 32:ed:fa:07:b2:b7:7e:d5:2c:90:c2:95:f5:91:33:02:7d:9e: 43:ec:52:ab:e8:b2:df:33:86:47:a9:01:aa:dd:6c:60:f1:81: 72:a2:ad:7c:d8:07:73:6d:6b:be:9f:36:c7:54:7d:df:ad:61: ec:24:7e:20:01:c6:f5:53:a7:e5:09:a2:e2:26:87:d4:32:90: c7:eb:2f:71:a7:b1:54:1a:6a:d1:6e:42:74:82:aa:89:97:88: 4f:92:a9:c7:d8:80:e7:8b:1c:2a:6f:9c:3a:64:bf:fa:df:7f: 82:f2:a1:fd:93:ca:d5:d4:de:c2:c7:42:54:2a:4f:22:59:1d: 47:6f:49:1a:dc:28:dc:4c:aa:54:a5:85:0c:34:b6:62:51:72: 3d:67:67:40:7e:c6:a9:e0:81:f9:78:4a:06:40:a4:2c:aa:32: 9d:50:fa:b1:1b:4e:14:90:22:c9:33:49:66:d4:c8:f6:a0:61: d6:33:42:e7:6d:9f:68:7b:f4:08:29:94:ac:22:a5:de:b0:01: 8e:47:ee:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsSdZz8AemtDjRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk NDExNTI1YjctMGZhNi00MzRhLTk1MzAtZTg1NzNjYzg5MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrznaah5E3aObicjo4TNPUHUSl1Tavx9x364 6fnrq9Crm38pMwiagqYMyncVuGIY4ZLK6j5D+2QZXkeGfmdXFIwugAcecf/G7F3r vSmzBRdsJMgoSFqrsS/Fa1DvmXFxjq0GH/OW+JCpb5XygGhxL02+zvxPtzgTp5dv n6iT08zvoJUAKsELjLd0hVdhn/10ColBw2FBZdyoW/DW9noJo9pv5msg2zQoBjxn +tzeER1x+NjlpocIVovYg2ca0AtufGOm6ZdNQMQV1GD732cttL+O1bmjJEdhjjEI gYLC0fiEm3aIfoou+4FeS/yhTswsRIau8OtL6AIpG2HX5aYCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgHS4V+V1U2sUQ22P8naauXqePaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDg1NmE5NjYtMDFhZS0z N2ZlLTgwMDktYjUyYTVmM2YzMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHT9IojNy8P/AyNtfPkLr9kB6UCZ4yd18y+Ew4DCJtcLOf6Vua4rrVF 2yr8bEgvLXrf9rCByTLt+geyt37VLJDClfWRMwJ9nkPsUqvost8zhkepAardbGDx gXKirXzYB3Nta76fNsdUfd+tYewkfiABxvVTp+UJouImh9QykMfrL3GnsVQaatFu QnSCqomXiE+SqcfYgOeLHCpvnDpkv/rff4Lyof2TytXU3sLHQlQqTyJZHUdvSRrc KNxMqlSlhQw0tmJRcj1nZ0B+xqnggfl4SgZApCyqMp1Q+rEbThSQIskzSWbUyPag YdYzQudtn2h79AgplKwipd6wAY5H7tM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org