$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa File: 4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json) Hash identifier: lvmTfWKLTi5YhgouT7uTA1PbR5hHylETy+KDP+wqxMg= Subject key identifier: 04:CB:1E:43:1E:F7:AE:52:A8:27:71:08:25:D5:D5:95:BC:8B:D8:60 Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F43285847C05C160672AAACD0E91BC0C0 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa Signing time: Sun 03 Nov 2024 01:00:36 +0000 ROA not before: Sun 03 Nov 2024 01:00:36 +0000 ROA not after: Sat 01 Feb 2025 02:00:36 +0000 asID: 18540 IP address blocks: 198.148.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:5c:16:06:72:aa:ac:d0:e9:1b:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Nov 3 01:00:36 2024 GMT Not After : Feb 1 02:00:36 2025 GMT Subject: CN=c2c01e63-d322-4cfa-8920-ec35eeb3dd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:55:73:67:09:00:00:40:ae:95:80:50:aa: 1e:b0:a7:d0:03:b1:0e:34:98:7a:d1:81:21:f4:16: dc:fb:f1:b7:1a:17:01:3b:f2:78:ff:76:2c:83:ab: 2b:0b:c6:6d:69:d9:df:c5:35:5a:c9:92:05:31:c0: 47:b2:d8:1e:30:7e:fa:cb:bb:01:93:98:ec:3b:23: e5:38:9d:85:d8:d7:e7:9f:97:ba:2b:f2:9e:1d:7c: f0:24:a1:b5:00:3d:c7:4a:46:8f:82:a9:bd:89:d9: 5c:86:f2:10:02:0e:f8:f9:84:d7:53:f2:9f:6e:2a: de:4a:a1:d6:69:52:c5:3e:44:73:f5:a4:af:b6:d3: 6f:03:7f:04:1e:ff:ce:25:aa:6e:b5:e2:78:11:9e: 62:f0:52:a8:f7:48:1e:80:dd:02:6e:e7:01:59:03: 1c:b0:8f:a8:3a:79:d5:7e:ce:37:4d:02:4a:f8:44: 05:14:74:62:f9:fa:72:ef:e9:22:25:7f:2d:fd:aa: 54:24:42:b5:7e:63:ce:00:9a:26:eb:0e:db:a2:41: 0f:db:c3:00:50:20:e6:28:bf:cc:4c:5e:5c:f6:9f: 12:d6:39:14:7e:f9:a3:cb:a8:1c:56:f1:53:67:6e: 95:43:e9:a2:fe:67:e9:ee:cd:75:66:8a:a4:64:b7: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:1E:43:1E:F7:AE:52:A8:27:71:08:25:D5:D5:95:BC:8B:D8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:87:8a:da:7e:ad:ac:10:8a:63:3a:09:e2:fa:7e:44:d8:27: cb:3f:4d:35:5b:e9:25:4f:83:a5:ce:a2:ce:68:21:b7:b4:da: f7:fe:01:51:b2:5c:71:49:f4:8b:da:d8:db:96:b6:fe:6a:99: 42:78:17:4a:91:e6:f2:54:80:44:1a:70:25:84:22:3e:36:4a: cc:4f:27:63:aa:2c:db:39:55:1a:23:52:2f:2a:5e:40:48:8e: ff:52:81:1b:1b:68:99:e2:f3:15:00:3c:e1:03:7e:ad:92:39: bd:8b:0c:32:51:08:80:65:4a:09:54:0a:2f:44:14:6f:5b:a6: c6:6a:56:a8:9f:d5:50:74:77:19:e6:41:ce:ea:71:f9:4a:1d: c9:b3:69:3b:59:21:ed:22:f3:e8:2e:05:27:7e:64:83:04:50: 19:77:20:4f:ef:a4:48:ff:78:c1:06:b6:d9:ae:5a:e8:7e:e3: 31:bb:63:47:c3:a9:92:f8:22:24:95:f5:6c:b6:e7:bb:e7:b5: 8b:6e:3e:88:28:f9:e1:49:30:c0:a2:5d:33:64:75:a1:c4:5a: 9a:43:05:67:53:7e:4e:d0:54:7e:83:1d:46:b7:d1:7e:9b:f1: 74:22:a3:ca:1f:c8:3f:f9:30:c3:26:b3:9e:72:46:53:36:22: 4a:b5:48:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfAXBYGcqqs0OkbwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI0MTEwMzAxMDAzNloXDTI1MDIwMTAyMDAzNlowLzEtMCsGA1UEAxMk YzJjMDFlNjMtZDMyMi00Y2ZhLTg5MjAtZWMzNWVlYjNkZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRVc2cJAABArpWAUKoesKfQA7EONJh60YEh 9Bbc+/G3GhcBO/J4/3Ysg6srC8ZtadnfxTVayZIFMcBHstgeMH76y7sBk5jsOyPl OJ2F2Nfnn5e6K/KeHXzwJKG1AD3HSkaPgqm9idlchvIQAg74+YTXU/KfbireSqHW aVLFPkRz9aSvttNvA38EHv/OJaputeJ4EZ5i8FKo90gegN0CbucBWQMcsI+oOnnV fs43TQJK+EQFFHRi+fpy7+kiJX8t/apUJEK1fmPOAJom6w7bokEP28MAUCDmKL/M TF5c9p8S1jkUfvmjy6gcVvFTZ26VQ+mi/mfp7s11ZoqkZLcNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATLHkMe965SqCdxCCXV1ZW8i9hgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNGMxNjBkY2YtZWQzMy0z ODM3LTg5ZTYtYTVkOTIzOTQ2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Hitp+rawQimM6CeL6fkTYJ8s/TTVb6SVPg6XOos5oIbe02vf+AVGy XHFJ9Iva2NuWtv5qmUJ4F0qR5vJUgEQacCWEIj42SsxPJ2OqLNs5VRojUi8qXkBI jv9SgRsbaJni8xUAPOEDfq2SOb2LDDJRCIBlSglUCi9EFG9bpsZqVqif1VB0dxnm Qc7qcflKHcmzaTtZIe0i8+guBSd+ZIMEUBl3IE/vpEj/eMEGttmuWuh+4zG7Y0fD qZL4IiSV9Wy257vntYtuPogo+eFJMMCiXTNkdaHEWppDBWdTfk7QVH6DHUa30X6b 8XQio8ofyD/5MMMms55yRlM2Ikq1SBk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:23 2024 by rpki-client on console-ams.rpki-client.org