$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa File: a6d9c75c-5577-314d-80e9-b351715ba777.roa (raw, json) Hash identifier: ZZ+heupJXc+lsRzc7BGGhxNUyDXfZfztpsZtDSee3Q0= Subject key identifier: AC:AC:E3:58:7B:12:F7:CB:74:71:13:CA:C9:80:84:C8:76:87:07:85 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858474F4B70DD754B98D2DA4BFC00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 13926 IP address blocks: 192.200.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:70:dd:75:4b:98:d2:da:4b:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=897a48f1-9015-4b50-99fa-87233b8a682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:e8:98:8a:22:f1:ce:23:cb:21:f0:2e:68: 9d:9a:0f:e7:c3:fa:fa:64:27:74:19:bb:f3:52:31: 8a:7d:88:60:9f:57:3c:2f:d5:32:28:ec:07:18:22: 76:f0:f5:b9:82:50:0e:7a:56:9d:7a:00:1a:77:c3: d9:93:5b:d8:ae:1a:e5:0a:54:4c:cd:ab:8e:85:47: 62:be:ad:ed:05:e2:65:8a:d9:e1:0d:6a:c2:bd:55: ef:5d:13:ab:3d:d2:f2:54:f8:bf:13:c2:5a:88:4f: f8:71:18:39:ca:b8:20:1b:6a:7c:71:e5:99:84:91: 91:0b:75:d3:ab:37:de:f4:f2:88:da:af:17:d6:72: 1f:c9:05:d0:8c:3c:4f:49:a7:a6:cc:fa:54:0b:a6: 4a:95:6e:8a:4f:05:6d:e6:e5:c3:4e:ee:51:c2:54: e3:54:97:08:d3:4b:bc:5e:59:c5:db:f6:d6:5c:ac: 7c:66:b9:ec:05:22:79:82:ae:95:1e:79:cb:62:c8: 8c:41:d6:c6:70:2a:e2:9a:28:13:72:0c:74:19:e3: 99:b5:37:70:81:d9:03:b4:36:20:da:fe:ce:ed:e2: 5b:b4:3c:b6:ca:4f:1a:42:7c:55:a7:05:6f:0d:af: a1:6e:c1:f1:f9:b6:bb:44:4b:ea:5f:d5:59:ac:b7: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:E3:58:7B:12:F7:CB:74:71:13:CA:C9:80:84:C8:76:87:07:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 192.200.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:bf:5c:43:c2:28:4a:ed:0b:90:64:d3:db:5d:f7:2c:8a: 57:08:a5:07:fe:e8:1a:37:16:b0:32:42:20:db:87:52:b3:d1: 4e:f3:94:6b:4a:a7:eb:46:18:aa:ee:09:c4:d4:e6:23:aa:54: 48:da:7a:90:89:6b:a1:f9:83:4a:e2:d6:72:21:cb:c1:7f:70: f8:d2:43:6f:85:2c:ab:ed:13:90:8e:43:80:bc:8e:6f:bd:93: 9e:49:f0:e8:70:0c:70:1a:ff:9c:dd:73:53:a8:55:e4:9f:6f: 6e:6a:8d:dd:cd:3c:7b:77:b2:85:18:73:50:78:ec:b6:35:9c: b5:48:79:d4:a0:f9:b4:9c:eb:9f:fa:5b:b3:0f:ce:c4:06:e3: 8f:34:a9:c8:18:ab:b7:2c:2b:2d:5d:24:ed:37:44:84:bb:d0: 06:ff:49:68:96:dd:e2:c7:74:26:a6:ad:39:7a:04:7e:3d:d4: 89:04:54:72:22:a0:ec:a6:77:f4:0a:4a:0a:b3:1d:de:48:60: 65:5b:6c:9a:e5:0a:74:10:12:d7:07:78:e5:ef:af:5f:73:53: b5:35:e0:05:5e:40:04:4e:32:c6:56:93:ee:0c:a9:a4:88:2c: 7a:de:89:97:51:58:1f:4f:4b:24:d2:bb:92:d9:c2:6a:48:94: 18:48:75:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3DddUuY0tpL/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ODk3YTQ4ZjEtOTAxNS00YjUwLTk5ZmEtODcyMzNiOGE2ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OfomIoi8c4jyyHwLmidmg/nw/r6ZCd0Gbvz UjGKfYhgn1c8L9UyKOwHGCJ28PW5glAOeladegAad8PZk1vYrhrlClRMzauOhUdi vq3tBeJlitnhDWrCvVXvXROrPdLyVPi/E8JaiE/4cRg5yrggG2p8ceWZhJGRC3XT qzfe9PKI2q8X1nIfyQXQjDxPSaemzPpUC6ZKlW6KTwVt5uXDTu5RwlTjVJcI00u8 XlnF2/bWXKx8ZrnsBSJ5gq6VHnnLYsiMQdbGcCrimigTcgx0GeOZtTdwgdkDtDYg 2v7O7eJbtDy2yk8aQnxVpwVvDa+hbsHx+ba7REvqX9VZrLcHgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKys41h7EvfLdHETysmAhMh2hweFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYTZkOWM3NWMtNTU3Ny0z MTRkLTgwZTktYjM1MTcxNWJhNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRCv1xDwihK7QuQZNPbXfcsilcIpQf+6Bo3FrAyQiDbh1Kz0U7zlGtK p+tGGKruCcTU5iOqVEjaepCJa6H5g0ri1nIhy8F/cPjSQ2+FLKvtE5COQ4C8jm+9 k55J8OhwDHAa/5zdc1OoVeSfb25qjd3NPHt3soUYc1B47LY1nLVIedSg+bSc65/6 W7MPzsQG4480qcgYq7csKy1dJO03RIS70Ab/SWiW3eLHdCamrTl6BH491IkEVHIi oOymd/QKSgqzHd5IYGVbbJrlCnQQEtcHeOXvr19zU7U14AVeQAROMsZWk+4MqaSI LHreiZdRWB9PSyTSu5LZwmpIlBhIdZk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org