$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: VE6YJXKvVRZgFTruY95GkvHchOX7DLQC1vpy8O20rAk= Subject key identifier: 54:76:B2:F8:CA:92:60:9F:B0:59:D2:99:D4:EF:FF:FC:1C:16:F9:E1 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858478CB6922EC62CDEB9031A6A00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:92:2e:c6:2c:de:b9:03:1a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=8a8837a9-ee1a-4e6a-bf60-578c2a8827ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:b6:54:f0:04:f7:37:d6:8d:12:aa:05:a4: 8f:25:53:f6:25:e6:7e:c4:29:0e:8b:d2:6f:92:77: 0e:06:15:df:ee:17:47:f7:43:b9:cc:28:9e:f0:a3: 52:eb:cb:28:5f:4f:ea:92:60:40:f3:2d:f2:18:78: 4e:69:fc:74:9f:32:27:09:f3:09:10:9b:73:43:37: d4:22:8e:39:3d:e4:21:91:d7:48:29:64:b6:d4:33: b4:81:07:80:1e:6f:44:81:a8:5e:a5:bc:c5:8f:20: cb:26:8c:dc:44:05:b7:79:05:8d:66:e8:ab:75:44: 95:fe:bd:01:e0:75:4c:38:06:ba:62:74:f7:b3:af: 6e:20:80:49:15:26:32:70:44:5b:c1:40:3c:6f:1f: 55:dd:5e:ec:4f:a1:3a:21:21:46:47:5c:51:ee:ac: b2:fc:8f:8c:48:f6:1d:bb:8b:4b:ce:8d:0e:dd:32: e5:ea:88:1f:40:8a:e2:3e:c2:99:0c:9f:14:7b:5d: 58:9a:d2:c7:19:72:9c:8c:7f:cf:c1:f2:65:06:52: a0:51:d2:6d:c4:4a:23:b1:6f:d9:44:ba:68:15:90: 91:42:9a:26:36:9c:67:66:70:2a:0c:0d:e5:d3:fa: 55:c6:34:1c:6c:dd:c7:0c:25:f6:de:c8:58:5b:7d: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:B2:F8:CA:92:60:9F:B0:59:D2:99:D4:EF:FF:FC:1C:16:F9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:14:21:e3:6c:fc:a1:2c:e1:df:f6:ad:c4:cb:04:20:ad:b1: 39:07:29:22:fa:be:db:f3:97:d4:3a:bf:85:5d:dc:b8:f2:37: 8e:a1:fe:76:c8:cb:5c:72:0f:8c:bc:92:b6:63:01:55:d4:6f: 31:ab:38:d6:aa:6a:01:1f:4a:d7:58:9a:3b:b1:f2:b2:2b:2c: e2:37:82:9b:f1:26:23:ab:c3:1f:11:ed:f4:5c:28:da:40:4d: ab:2d:20:37:af:63:a6:a0:e8:30:fe:d3:20:e9:23:f8:a8:49: ad:9e:ea:a7:42:50:75:29:07:df:15:b5:a8:16:11:34:ef:ca: 9f:b5:34:0d:4d:1e:df:77:76:12:0b:2e:95:90:09:cf:b2:d7: 1c:c5:4e:23:ca:df:fb:b3:9a:d1:4f:6c:e2:13:37:a0:81:da: 70:2b:7f:79:30:e5:c1:ea:2a:06:6f:0d:f4:57:d5:60:f0:1f: 2c:dd:b2:4f:cd:f1:df:a9:38:8e:93:32:83:26:de:b6:01:a1: d1:1c:9f:58:e6:fd:d2:e7:13:d0:fb:ee:02:e8:fa:5d:e2:79: 7d:4c:03:4a:0b:f5:3b:9f:73:bc:6e:d8:64:00:e2:67:12:b8: 9d:7d:32:d5:3d:cc:f3:13:4d:96:b1:12:5d:a1:fb:bd:4f:2c: a8:55:7d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpIuxizeuQMaagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk OGE4ODM3YTktZWUxYS00ZTZhLWJmNjAtNTc4YzJhODgyN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSe2VPAE9zfWjRKqBaSPJVP2JeZ+xCkOi9Jv kncOBhXf7hdH90O5zCie8KNS68soX0/qkmBA8y3yGHhOafx0nzInCfMJEJtzQzfU Io45PeQhkddIKWS21DO0gQeAHm9EgahepbzFjyDLJozcRAW3eQWNZuirdUSV/r0B 4HVMOAa6YnT3s69uIIBJFSYycERbwUA8bx9V3V7sT6E6ISFGR1xR7qyy/I+MSPYd u4tLzo0O3TLl6ogfQIriPsKZDJ8Ue11YmtLHGXKcjH/PwfJlBlKgUdJtxEojsW/Z RLpoFZCRQpomNpxnZnAqDA3l0/pVxjQcbN3HDCX23shYW3360wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR2svjKkmCfsFnSmdTv//wcFvnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIUIeNs/KEs4d/2rcTLBCCtsTkHKSL6vtvzl9Q6v4Vd3LjyN46h/nbI y1xyD4y8krZjAVXUbzGrONaqagEfStdYmjux8rIrLOI3gpvxJiOrwx8R7fRcKNpA TastIDevY6ag6DD+0yDpI/ioSa2e6qdCUHUpB98VtagWETTvyp+1NA1NHt93dhIL LpWQCc+y1xzFTiPK3/uzmtFPbOITN6CB2nArf3kw5cHqKgZvDfRX1WDwHyzdsk/N 8d+pOI6TMoMm3rYBodEcn1jm/dLnE9D77gLo+l3ieX1MA0oL9Tufc7xu2GQA4mcS uJ19MtU9zPMTTZaxEl2h+71PLKhVfWY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:32 2024 by rpki-client on console-fra.rpki-client.org