$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa File: 127b112e-de96-3488-960b-f35714a24c3a.roa (raw, json) Hash identifier: iKL1RLKeMo98EmI2FlqwLQk5/sghycXZsUx1MziOsSw= Subject key identifier: 9E:9F:E3:12:65:78:82:D4:93:F7:A4:43:7B:CB:2B:E5:21:8E:52:D0 Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F43285847BAC6AE1B2A3533BC6CCC6390 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 216050 IP address blocks: 172.98.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:ae:1b:2a:35:33:bc:6c:cc:63:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=fa27b308-d51f-4f58-a2b6-bdbb08f759ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:61:30:63:27:f3:0b:b2:d7:be:f9:d4:8f: 4c:d9:a6:04:5d:70:14:d4:0c:61:56:25:72:cc:a3: 15:c8:25:25:55:7c:38:ac:db:60:01:72:a5:c4:66: 11:81:f9:d4:43:c5:3d:77:72:33:bf:f2:c7:77:5a: 7d:14:d7:1c:8d:43:95:c8:f8:56:08:6b:1a:b1:33: 97:28:ed:eb:5d:25:c4:8e:cc:04:bd:52:2e:b8:4a: d8:3e:d5:b6:be:11:68:a8:d5:93:77:25:e1:9a:9a: 3d:5b:ec:1d:0a:08:41:8f:0c:23:32:c1:4d:1f:6d: 58:4d:ad:b3:bf:81:2d:db:35:4f:4b:ca:0a:4e:fe: 0b:97:f5:e3:60:6d:f6:a3:45:d6:3e:25:0c:72:03: 5f:ab:44:f8:c1:d5:fb:bc:12:d9:cd:f5:c0:5e:d3: 81:c6:43:6f:96:1a:7d:47:b8:bd:4f:db:3e:6b:dc: 31:06:d8:bb:ca:09:c7:63:f3:8d:dd:75:92:6d:f3: 21:66:cf:dc:73:64:25:a4:c5:5c:d5:1c:7d:58:d5: 45:b0:7c:aa:58:a6:1b:b1:69:54:89:51:6c:88:dc: 41:00:9b:a4:15:27:79:54:da:e3:fe:e2:e8:0d:1f: 22:be:f7:8e:c4:cd:66:21:98:20:6e:d9:a3:86:e2: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:E3:12:65:78:82:D4:93:F7:A4:43:7B:CB:2B:E5:21:8E:52:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/127b112e-de96-3488-960b-f35714a24c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: 172.98.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1a:39:6d:40:9a:4d:6f:d6:00:e8:71:fc:81:ab:7b:db:ec: 1b:5e:f7:03:a3:15:d5:ab:9b:62:ff:01:3b:24:2a:0d:2c:82: 19:2b:2c:41:00:ae:da:14:02:94:c0:7e:b4:18:ff:93:84:67: da:ed:f1:d2:c3:0c:19:3f:f1:e1:a9:c6:39:f9:31:bf:0b:e4: 2f:fc:23:fb:0b:b6:d8:ca:63:17:1e:30:9c:3e:19:3b:5b:53: a9:44:4f:82:bf:f6:b5:1c:f4:3c:74:fd:51:df:14:81:27:aa: 49:a5:d8:8e:a8:e0:4c:30:ac:c0:07:48:5a:42:6d:1e:06:61: 3a:0b:22:88:41:c1:46:75:ec:12:85:69:91:86:2b:23:09:28: 1d:30:dd:28:75:c7:cf:a0:25:5d:90:a6:d8:17:8e:43:4c:3e: 7b:6e:59:67:ee:fd:7d:75:8c:3d:07:e5:c0:83:cc:d9:e2:c0: 7e:29:57:3c:53:62:55:cf:c5:eb:bc:f3:05:e6:13:99:5e:0e: 81:15:a7:05:9a:bf:73:3b:a9:0a:d3:14:32:46:d8:fe:65:fb: f8:d7:59:f9:25:1f:a1:f2:da:fd:af:a0:e0:c2:ae:fc:8e:4c: 30:fa:21:23:23:30:97:b2:30:ee:70:fb:3a:c5:0d:d8:48:20: a4:90:0a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xq4bKjUzvGzMY5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZmEyN2IzMDgtZDUxZi00ZjU4LWEyYjYtYmRiYjA4Zjc1OWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOhhMGMn8wuy17751I9M2aYEXXAU1AxhViVy zKMVyCUlVXw4rNtgAXKlxGYRgfnUQ8U9d3Izv/LHd1p9FNccjUOVyPhWCGsasTOX KO3rXSXEjswEvVIuuErYPtW2vhFoqNWTdyXhmpo9W+wdCghBjwwjMsFNH21YTa2z v4Et2zVPS8oKTv4Ll/XjYG32o0XWPiUMcgNfq0T4wdX7vBLZzfXAXtOBxkNvlhp9 R7i9T9s+a9wxBti7ygnHY/ON3XWSbfMhZs/cc2QlpMVc1Rx9WNVFsHyqWKYbsWlU iVFsiNxBAJukFSd5VNrj/uLoDR8ivveOxM1mIZggbtmjhuKsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6f4xJleILUk/ekQ3vLK+UhjlLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvMTI3YjExMmUtZGU5Ni0z NDg4LTk2MGItZjM1NzE0YTI0YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8aOW1Amk1v1gDocfyBq3vb7Bte9wOjFdWrm2L/ATskKg0sghkrLEEA rtoUApTAfrQY/5OEZ9rt8dLDDBk/8eGpxjn5Mb8L5C/8I/sLttjKYxceMJw+GTtb U6lET4K/9rUc9Dx0/VHfFIEnqkml2I6o4EwwrMAHSFpCbR4GYToLIohBwUZ17BKF aZGGKyMJKB0w3Sh1x8+gJV2QptgXjkNMPntuWWfu/X11jD0H5cCDzNniwH4pVzxT YlXPxeu88wXmE5leDoEVpwWav3M7qQrTFDJG2P5l+/jXWfklH6Hy2v2voODCrvyO TDD6ISMjMJeyMO5w+zrFDdhIIKSQCtc= -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:57 2024 by rpki-client on console-ams.rpki-client.org