$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa File: c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa (raw, json) Hash identifier: 1ojQzfvvaFrl9y7CaMlOQBNPJf5QywiSn8pVcjtMfpE= Subject key identifier: 4D:A4:D5:EC:06:7D:50:60:FB:BC:6C:25:D8:87:75:85:34:64:EA:03 Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584765A0F7C02AF2B36E2A247C00 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 401024 IP address blocks: 172.83.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f7:c0:2a:f2:b3:6e:2a:24:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=4d1259c9-e2da-45ae-b1fe-9c71193e4bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:2a:bd:ec:5d:f4:fd:2d:d5:1d:f9:1c:9b: 74:ea:2a:8c:45:b3:0f:af:ae:ab:85:81:1d:e1:f3: 54:89:48:a2:bb:d6:ec:85:ba:01:3f:12:e6:43:0e: 6f:be:d2:62:30:8d:79:b8:e0:52:fd:2b:5c:83:0d: b5:f0:d4:57:d0:eb:53:d4:31:7d:91:fb:eb:46:eb: f4:0a:b5:cf:73:99:30:47:05:c4:3d:44:da:96:88: fd:39:b3:22:70:74:77:fc:cf:28:c8:96:0f:83:8a: 46:36:f0:4f:73:bf:5b:09:43:f2:73:04:a0:27:ac: 41:52:56:58:f7:3f:36:f0:0b:3b:cc:15:66:dc:7d: 5a:11:db:74:44:ce:0a:d0:a5:83:b2:e9:db:75:e4: 30:e8:c7:ab:2c:a6:5a:d5:6f:4d:d4:78:37:48:b9: 3a:77:66:a9:3a:6b:42:92:ec:2e:f4:7e:6e:44:51: 69:48:99:3c:8c:99:71:80:77:b6:e5:e2:25:e6:95: 0b:6d:24:a7:bd:26:df:f7:5b:b6:b0:db:66:c0:f5: b1:3e:36:1d:c3:ab:99:da:c0:17:c6:15:de:c5:c0: 9b:03:d5:ca:e7:fd:fc:8d:47:c5:62:54:01:14:fc: 1a:8d:f5:f0:e7:44:ce:26:62:97:ef:76:0b:29:95: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:D5:EC:06:7D:50:60:FB:BC:6C:25:D8:87:75:85:34:64:EA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/c006c92f-a5fb-39d8-8272-7f5e2bff3f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 172.83.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b0:29:bb:48:02:4d:89:8e:67:74:e9:8b:34:8b:93:b9:b8: fa:ab:ab:9c:3d:d6:10:dc:f8:a5:5a:89:6a:86:11:8e:d5:4e: 70:4b:39:11:e7:6f:63:5e:12:f5:3c:0c:a8:cb:d5:77:f8:9e: eb:dc:de:95:33:68:9b:b1:e5:a8:26:7a:d8:88:06:fa:6c:c0: d8:5e:54:cf:a2:22:09:8a:6f:72:3d:fb:7e:ca:75:ac:ad:62: c2:ab:26:39:b7:71:a4:82:c5:9e:7c:49:21:5a:ba:93:50:0f: f4:5e:99:86:c8:24:d9:67:1c:08:e2:8d:55:74:53:5b:77:49: d4:76:49:60:c1:5f:39:c6:74:c0:1d:ae:d2:58:b6:e1:33:8f: e3:f6:84:ce:55:1c:f6:b4:28:c0:2d:4c:13:43:69:41:45:30: fe:24:95:24:97:1b:29:39:cb:ac:20:2d:d4:9b:1e:89:b8:a7: 31:b2:48:06:ca:4a:79:61:54:b2:be:6d:4b:95:0a:f0:b6:8a: b2:98:d2:c3:fc:c7:43:46:87:a7:fd:67:8d:85:0a:98:a1:54: ee:c2:e0:dc:97:c3:68:39:c2:9e:da:ce:2e:51:07:ec:4a:b0: 16:4e:e1:8a:b2:96:cf:58:9a:dd:16:5a:29:fd:94:ee:02:27: dc:33:86:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPfAKvKzbiokfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk NGQxMjU5YzktZTJkYS00NWFlLWIxZmUtOWM3MTE5M2U0YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwcqvexd9P0t1R35HJt06iqMRbMPr66rhYEd 4fNUiUiiu9bshboBPxLmQw5vvtJiMI15uOBS/Stcgw218NRX0OtT1DF9kfvrRuv0 CrXPc5kwRwXEPUTaloj9ObMicHR3/M8oyJYPg4pGNvBPc79bCUPycwSgJ6xBUlZY 9z828As7zBVm3H1aEdt0RM4K0KWDsunbdeQw6MerLKZa1W9N1Hg3SLk6d2apOmtC kuwu9H5uRFFpSJk8jJlxgHe25eIl5pULbSSnvSbf91u2sNtmwPWxPjYdw6uZ2sAX xhXexcCbA9XK5/38jUfFYlQBFPwajfXw50TOJmKX73YLKZU39wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2k1ewGfVBg+7xsJdiHdYU0ZOoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvYzAwNmM5MmYtYTVmYi0z OWQ4LTgyNzItN2Y1ZTJiZmYzZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCwKbtIAk2Jjmd06Ys0i5O5uPqrq5w91hDc+KVaiWqGEY7VTnBLORHn b2NeEvU8DKjL1Xf4nuvc3pUzaJux5agmetiIBvpswNheVM+iIgmKb3I9+37Kdayt YsKrJjm3caSCxZ58SSFaupNQD/RemYbIJNlnHAjijVV0U1t3SdR2SWDBXznGdMAd rtJYtuEzj+P2hM5VHPa0KMAtTBNDaUFFMP4klSSXGyk5y6wgLdSbHom4pzGySAbK SnlhVLK+bUuVCvC2irKY0sP8x0NGh6f9Z42FCpihVO7C4NyXw2g5wp7azi5RB+xK sBZO4Yqyls9Ymt0WWin9lO4CJ9wzhus= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:01 2024 by rpki-client on console-fra.rpki-client.org