$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa File: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json) Hash identifier: BGpIUKgqGAPqaSzhYKLp6MI3Hl00+1CBHfm1IrWKyKg= Subject key identifier: 5D:C9:EE:F3:2D:5A:BC:EC:65:07:D2:FB:53:6E:E3:D8:AA:E2:70:BC Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F432858474B1B4B870EB79BCB94A79380 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 40583 IP address blocks: 198.236.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:4b:87:0e:b7:9b:cb:94:a7:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=c8501faa-2d25-4060-934c-3eb696067ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:b2:b8:55:e0:31:95:06:e9:e8:a6:ac:fd: f1:39:15:f6:cf:90:17:dc:d9:cb:3e:41:b9:0e:31: 92:43:17:19:f5:73:41:6a:c3:47:5a:d0:91:a9:07: 24:ff:77:0a:c8:b9:b2:1d:b3:ae:06:c3:b3:bc:ba: b1:66:45:42:61:f1:b4:0d:f7:7c:b8:66:87:c0:dc: 1c:15:b0:f5:09:44:71:f9:23:7e:7b:17:a3:17:64: cb:b4:d7:cf:49:b6:cb:c8:b2:11:16:98:4f:10:6d: c1:8e:3c:66:7c:59:87:a2:60:c1:27:d9:8e:e2:0e: 37:33:23:b6:e7:c2:6d:16:75:48:f8:51:34:5a:b8: 51:23:cf:d2:84:4f:e7:eb:3d:2a:ae:6a:21:27:6a: e0:3c:33:e5:ab:e7:f9:ed:a9:49:19:54:2b:c8:83: 2c:2f:01:02:53:4f:89:a1:fa:b6:87:d1:db:8c:d6: 71:b8:30:eb:47:bb:15:10:97:a3:4d:47:6d:84:70: a3:17:25:ac:20:26:28:27:04:12:ea:95:0c:0c:60: 46:7d:d2:6d:ed:9c:2b:b6:9a:5d:03:ad:f2:19:5c: 09:37:a8:77:6e:0a:ea:60:08:16:40:12:01:68:4e: 94:81:21:c9:a2:f2:65:a4:5f:fc:48:af:d3:b1:34: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:EE:F3:2D:5A:BC:EC:65:07:D2:FB:53:6E:E3:D8:AA:E2:70:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: 198.236.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c2:aa:d9:66:40:11:32:a9:da:b0:9a:dc:99:1e:66:5c:62: bc:b6:05:2c:de:56:12:8f:f5:5c:50:0e:05:6b:9c:16:5d:79: 20:d8:f2:1e:ee:19:17:db:2f:99:04:d8:a5:6c:7e:a6:25:93: 70:0b:af:11:24:d0:81:90:a0:ca:aa:1a:82:69:fd:8a:bf:c7: 20:ba:33:e5:63:c1:85:f2:eb:e4:7e:49:db:1a:6d:b8:50:76: 46:0e:34:27:24:46:78:70:94:81:48:fb:f1:d0:56:68:9d:2e: f9:94:69:6d:da:00:cc:d1:38:eb:2c:49:cc:cc:d3:79:72:0b: 49:bb:c3:7a:de:ec:41:06:05:09:e5:62:f8:ee:13:35:84:93: 07:78:6c:97:74:e6:60:28:62:0e:84:86:ba:ac:a9:f2:f2:27: c0:a9:8a:bd:23:a0:4e:bf:ae:a5:ad:3a:4e:5e:e4:0b:3b:9e: b3:0a:04:de:b2:81:e6:7e:44:94:12:8f:7a:b9:6d:02:7d:8d: c8:04:be:bb:52:32:3c:be:cf:a8:b8:31:fa:ee:29:67:a8:93: 84:ed:ec:97:c9:65:f1:ea:79:36:90:5e:f1:f3:14:cf:3e:23: ef:d3:de:be:08:de:91:bc:47:b3:93:67:ca:fe:a8:eb:6a:04: 22:ba:88:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG0uHDreby5Snk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk Yzg1MDFmYWEtMmQyNS00MDYwLTkzNGMtM2ViNjk2MDY3YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KqyuFXgMZUG6eimrP3xORX2z5AX3NnLPkG5 DjGSQxcZ9XNBasNHWtCRqQck/3cKyLmyHbOuBsOzvLqxZkVCYfG0Dfd8uGaHwNwc FbD1CURx+SN+exejF2TLtNfPSbbLyLIRFphPEG3BjjxmfFmHomDBJ9mO4g43MyO2 58JtFnVI+FE0WrhRI8/ShE/n6z0qrmohJ2rgPDPlq+f57alJGVQryIMsLwECU0+J ofq2h9HbjNZxuDDrR7sVEJejTUdthHCjFyWsICYoJwQS6pUMDGBGfdJt7Zwrtppd A63yGVwJN6h3bgrqYAgWQBIBaE6UgSHJovJlpF/8SK/TsTSgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3J7vMtWrzsZQfS+1Nu49iq4nC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrCqtlmQBEyqdqwmtyZHmZcYry2BSzeVhKP9VxQDgVrnBZdeSDY8h7u GRfbL5kE2KVsfqYlk3ALrxEk0IGQoMqqGoJp/Yq/xyC6M+VjwYXy6+R+SdsabbhQ dkYONCckRnhwlIFI+/HQVmidLvmUaW3aAMzROOssSczM03lyC0m7w3re7EEGBQnl YvjuEzWEkwd4bJd05mAoYg6EhrqsqfLyJ8Cpir0joE6/rqWtOk5e5As7nrMKBN6y geZ+RJQSj3q5bQJ9jcgEvrtSMjy+z6i4MfruKWeok4Tt7JfJZfHqeTaQXvHzFM8+ I+/T3r4I3pG8R7OTZ8r+qOtqBCK6iOY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org