$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: LVpIBKrEffMPGqSWJT8IYO/XuQWRX0gN9m521KrDSe0= Subject key identifier: F3:BD:AE:3D:09:20:F0:DA:37:0D:46:90:DF:14:4E:77:6D:66:CE:D5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584782F0FB35EDB65B1D2ECB6400 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Sat 12 Oct 2024 01:00:32 +0000 ROA not before: Sat 12 Oct 2024 01:00:32 +0000 ROA not after: Fri 10 Jan 2025 02:00:32 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:f0:fb:35:ed:b6:5b:1d:2e:cb:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 12 01:00:32 2024 GMT Not After : Jan 10 02:00:32 2025 GMT Subject: CN=da06d03e-83f6-473f-a8f9-be3777a24677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:5e:aa:4d:39:2e:ff:8a:b4:e1:24:59:ee: 1f:16:fb:00:71:1f:5f:05:64:0a:09:f1:b1:47:bd: c9:61:c9:e4:e1:c7:99:15:c0:b3:d6:32:5f:f7:b8: af:70:9f:7a:6e:37:27:08:8f:fb:2f:3f:17:4f:55: 0b:a3:04:b0:4f:60:d4:15:d6:7f:14:7e:a2:4d:89: 06:77:05:95:59:4f:4f:cd:21:c1:3f:4d:7a:53:7b: 99:00:0b:f2:74:d5:a0:1c:e1:29:a6:f2:f2:6e:af: 67:27:a6:c4:f8:cb:d6:53:89:3f:0a:55:e0:97:4f: 67:52:a5:3a:70:33:79:da:7e:07:80:61:65:20:c3: 00:c5:90:4b:3d:fc:2c:92:67:92:e8:85:56:21:39: d6:14:50:ad:9f:f0:19:80:8c:cc:a8:d7:dc:8b:c4: de:23:fb:fa:22:bd:43:6b:e6:0e:ca:1e:36:ca:cc: 00:d8:6b:cf:ce:93:0f:fc:66:94:85:07:11:7e:71: 09:20:13:f8:0b:3f:b2:16:a6:91:f1:5e:d7:a4:62: 7e:41:a2:60:5b:57:56:a9:c2:9e:29:22:54:97:3a: 5b:34:73:9e:7d:a8:9e:e4:51:f4:ac:4d:45:1b:64: 06:85:d1:0a:e0:61:3e:68:30:66:43:d4:af:15:a1: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BD:AE:3D:09:20:F0:DA:37:0D:46:90:DF:14:4E:77:6D:66:CE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e8:a0:96:c1:ad:af:75:a7:7f:8b:f8:d6:06:86:66:6d:fa: 80:ef:41:1f:8f:6f:bd:12:6f:18:f7:b4:0d:38:36:63:59:32: 13:3d:7a:ed:78:60:62:98:0b:b8:a8:2a:55:90:ea:09:bb:f3: 55:18:61:81:52:bb:6c:51:8c:31:f1:38:52:cd:7b:00:2e:76: b6:9a:c5:43:44:a0:35:10:9d:bd:10:e1:44:3a:76:81:53:c8: 49:f0:30:75:1a:ab:63:73:ba:b9:1c:a1:a1:2c:71:6c:ff:9a: 74:8d:5f:21:00:ea:54:2b:f6:cc:db:89:c3:1f:49:79:98:b5: 92:a2:c0:9e:4c:5c:65:5d:fa:4c:ad:50:4d:29:0e:14:61:1f: 2d:04:a4:a9:82:a9:d3:10:94:ea:90:ad:b7:a5:98:e4:58:49: 3a:61:d0:2a:34:73:8f:f1:84:d2:a6:b7:ba:6b:88:03:a9:d5: 23:99:91:8d:28:11:23:bf:d3:5b:c7:7f:7b:1a:32:4d:12:02: 78:7a:92:a8:02:9f:ee:a1:45:7e:59:08:09:be:72:86:bf:2c: db:49:fe:0b:55:36:57:95:93:e8:6b:80:88:28:53:a1:19:bc: 78:e6:db:df:80:80:9f:e5:7a:0c:8f:d0:11:0d:1b:70:d4:8b: 18:d2:d5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeC8Ps17bZbHS7LZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGEwNmQwM2UtODNmNi00NzNmLWE4ZjktYmUzNzc3YTI0Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovZeqk05Lv+KtOEkWe4fFvsAcR9fBWQKCfGx R73JYcnk4ceZFcCz1jJf97ivcJ96bjcnCI/7Lz8XT1ULowSwT2DUFdZ/FH6iTYkG dwWVWU9PzSHBP016U3uZAAvydNWgHOEppvLybq9nJ6bE+MvWU4k/ClXgl09nUqU6 cDN52n4HgGFlIMMAxZBLPfwskmeS6IVWITnWFFCtn/AZgIzMqNfci8TeI/v6Ir1D a+YOyh42yswA2GvPzpMP/GaUhQcRfnEJIBP4Cz+yFqaR8V7XpGJ+QaJgW1dWqcKe KSJUlzpbNHOefaie5FH0rE1FG2QGhdEK4GE+aDBmQ9SvFaF7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO9rj0JIPDaNw1GkN8UTndtZs7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvooJbBra91p3+L+NYGhmZt+oDvQR+Pb70Sbxj3tA04NmNZMhM9eu14 YGKYC7ioKlWQ6gm781UYYYFSu2xRjDHxOFLNewAudraaxUNEoDUQnb0Q4UQ6doFT yEnwMHUaq2NzurkcoaEscWz/mnSNXyEA6lQr9szbicMfSXmYtZKiwJ5MXGVd+kyt UE0pDhRhHy0EpKmCqdMQlOqQrbelmORYSTph0Co0c4/xhNKmt7priAOp1SOZkY0o ESO/01vHf3saMk0SAnh6kqgCn+6hRX5ZCAm+coa/LNtJ/gtVNleVk+hrgIgoU6EZ vHjm29+AgJ/legyP0BENG3DUixjS1R4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org