$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: IFxiCthbmaXAsMf3WC1ulig3b8PpwWk70nuHZwV8nRw= Subject key identifier: 5D:30:B2:34:94:CC:60:D2:2F:E9:38:98:51:A1:BE:E3:25:FA:61:6E Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F43285847D569FBFC646119A62A43C000 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Sun 10 Nov 2024 14:00:37 +0000 ROA not before: Sun 10 Nov 2024 14:00:37 +0000 ROA not after: Sat 08 Feb 2025 14:00:37 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d5:69:fb:fc:64:61:19:a6:2a:43:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Nov 10 14:00:37 2024 GMT Not After : Feb 8 14:00:37 2025 GMT Subject: CN=8c204d95-e711-473a-a0f5-bf945f8f2cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:96:e7:d0:20:80:11:f1:fc:4b:e0:c6:db: ea:ab:47:18:0d:a3:58:0e:a8:a6:bb:55:0e:0b:39: 6a:4b:a5:a7:c0:b9:4e:6a:5f:90:35:02:35:47:d6: ce:18:9c:f2:b4:68:d0:c4:7f:3a:1a:60:d3:9e:7c: 11:b8:28:7e:ef:58:1c:7d:8a:ca:5f:5f:9d:98:db: 35:f9:2b:5c:2a:91:a9:84:6e:58:95:6d:a7:9d:d5: 29:8f:0c:33:b9:9a:ab:a0:bd:39:53:fe:fa:c3:00: 52:d2:39:28:9a:6c:34:a8:b2:9e:a5:6b:9e:c3:38: 97:05:30:67:5d:d4:02:fe:f4:ca:6b:f9:a5:e2:ad: 15:d9:a4:18:e8:51:b8:1c:9e:f0:78:c9:eb:45:0a: 64:83:30:3d:cb:43:45:a6:91:af:a7:9a:72:42:2e: 07:eb:76:70:28:ea:f6:d6:e3:fd:9f:40:9e:92:64: 64:98:ff:f1:95:b6:d6:35:cc:1c:5c:49:b6:27:45: 02:79:08:24:c1:61:f9:6d:e6:24:53:0b:ee:d9:80: 5f:a3:3b:88:8a:b7:95:29:45:41:ab:97:8f:41:ce: 5d:30:c5:5e:9b:fa:40:33:f5:ba:cd:d1:19:2e:9e: 9b:f2:ef:d1:10:4d:24:ee:e2:a3:73:6e:00:b2:6c: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:B2:34:94:CC:60:D2:2F:E9:38:98:51:A1:BE:E3:25:FA:61:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b7:6e:2a:de:c5:5e:7d:02:35:7b:cf:48:73:6c:44:a4:95: 5e:fc:9e:4d:51:7c:cc:84:df:73:03:89:5f:7a:e4:85:36:51: 39:be:6b:83:b2:c9:be:04:94:27:da:c4:b5:8e:eb:30:b0:d7: bc:24:a7:17:a4:5c:58:31:82:42:d9:fa:2c:89:5c:fd:60:fc: 33:c6:32:24:61:99:55:30:44:ac:01:df:0d:16:23:d0:b9:f6: a2:b6:0e:74:fa:44:83:a4:d2:38:17:28:13:cd:d6:1c:bf:ac: 6d:22:5f:5b:aa:89:ed:b7:d8:56:c5:2e:d2:42:f4:a0:e1:d6: c8:5a:96:4f:84:13:0d:98:42:60:92:eb:71:6e:bb:60:2d:d7: f5:17:3b:a8:4d:a3:f8:a6:3f:d4:89:be:4c:37:a1:26:2c:7d: 10:f7:42:a4:e1:ca:1e:2c:f3:d0:fa:65:dd:9d:4a:f1:36:9f: 4c:dd:70:96:af:7b:67:77:61:c6:7f:96:ca:e7:17:fa:d8:b2: 77:f8:dd:5c:0d:0d:73:95:ac:96:e6:21:49:b1:f4:48:b3:bb: 1b:90:9c:59:91:9a:5f:7b:99:d2:14:a9:a7:df:05:b1:c0:56: 0c:30:69:72:13:63:d2:41:e8:05:02:b4:c5:42:51:42:e4:be: ae:dd:25:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVafv8ZGEZpipDwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk OGMyMDRkOTUtZTcxMS00NzNhLWEwZjUtYmY5NDVmOGYyY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3+W59AggBHx/Evgxtvqq0cYDaNYDqimu1UO CzlqS6WnwLlOal+QNQI1R9bOGJzytGjQxH86GmDTnnwRuCh+71gcfYrKX1+dmNs1 +StcKpGphG5YlW2nndUpjwwzuZqroL05U/76wwBS0jkommw0qLKepWuewziXBTBn XdQC/vTKa/ml4q0V2aQY6FG4HJ7weMnrRQpkgzA9y0NFppGvp5pyQi4H63ZwKOr2 1uP9n0CekmRkmP/xlbbWNcwcXEm2J0UCeQgkwWH5beYkUwvu2YBfozuIireVKUVB q5ePQc5dMMVem/pAM/W6zdEZLp6b8u/REE0k7uKjc24AsmxKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wsjSUzGDSL+k4mFGhvuMl+mFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC63birexV59AjV7z0hzbESklV78nk1RfMyE33MDiV965IU2UTm+a4Oy yb4ElCfaxLWO6zCw17wkpxekXFgxgkLZ+iyJXP1g/DPGMiRhmVUwRKwB3w0WI9C5 9qK2DnT6RIOk0jgXKBPN1hy/rG0iX1uqie232FbFLtJC9KDh1shalk+EEw2YQmCS 63Fuu2At1/UXO6hNo/imP9SJvkw3oSYsfRD3QqThyh4s89D6Zd2dSvE2n0zdcJav e2d3YcZ/lsrnF/rYsnf43VwNDXOVrJbmIUmx9EizuxuQnFmRml97mdIUqaffBbHA VgwwaXITY9JB6AUCtMVCUULkvq7dJcE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:11 2024 by rpki-client on console-ams.rpki-client.org