$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa File: dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa (raw, json) Hash identifier: AD8pEMMGsF42u6G2vEANK4vSs7+lPgdEIeEdX6pp0w4= Subject key identifier: 05:CC:70:C0:46:69:00:BC:D8:68:1D:D4:38:F6:FD:12:0D:46:4C:75 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847C8D9D08E2ECAD9D66B229180 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 1239 IP address blocks: 198.67.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:d0:8e:2e:ca:d9:d6:6b:22:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=6c14d367-0579-445e-8e02-7dfa7ceb2053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:18:f5:10:15:a8:9b:fd:a4:6b:c5:1f:69: 60:18:6f:42:4e:9b:e0:51:18:8f:8f:c3:8f:dd:ae: cd:17:29:42:b5:2a:44:b3:f9:a3:05:7d:26:3c:64: cc:31:d6:77:03:83:bb:ae:f5:ab:09:dc:45:5f:3a: b5:36:5c:3b:dd:59:b4:a2:53:17:c8:75:da:3a:10: ea:12:05:ee:06:ec:3b:6d:16:be:ac:18:17:4a:11: 70:6b:44:c9:db:ab:bb:3c:47:25:46:29:a2:58:e6: b5:aa:c4:34:ed:0c:66:85:cd:4a:bd:8a:75:13:2f: a1:9b:91:3b:4c:4c:0f:8c:05:81:e4:7e:c6:d5:c3: ec:0d:90:35:37:5d:47:0e:c6:1e:10:83:07:df:fd: 64:62:89:5f:d8:39:12:d2:24:53:81:d2:5e:c5:03: 3a:ee:9c:d5:d5:71:c3:a7:fa:25:50:b9:45:8a:54: 5f:27:de:0b:bc:2e:9c:eb:f1:b5:f3:8a:a2:a1:59: 86:58:63:9b:35:95:71:62:b9:2f:46:e8:0f:2f:89: ee:16:62:a3:12:42:85:67:0a:cd:16:4f:ae:65:fc: 2d:49:9e:b0:da:43:ce:6e:c2:91:6a:b0:47:cb:2c: 67:80:b9:c3:9d:d6:bc:cf:21:0d:f9:fa:9b:b6:c6: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CC:70:C0:46:69:00:BC:D8:68:1D:D4:38:F6:FD:12:0D:46:4C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d2:da:e1:40:94:5d:a7:2f:c8:0b:04:dd:35:23:ab:97:1c: aa:be:6b:da:16:4c:1d:35:de:92:eb:2f:99:98:28:1d:5d:3e: 44:a7:e1:25:21:93:73:cd:48:ca:14:f0:76:b1:20:99:99:1f: 40:06:81:62:a6:bb:8b:a2:80:6e:bf:5f:b7:3a:f7:73:35:7e: e5:81:3e:cd:17:bf:43:ff:0c:87:bd:a6:b2:c9:6a:63:36:da: 2a:5a:6a:49:80:82:b2:1b:33:f5:6f:29:ac:10:39:9c:91:e5: b6:90:f8:d1:ad:1c:25:9d:1b:a1:c1:22:83:bd:f6:0e:27:ec: 5a:1c:3e:8c:d4:cd:5f:79:bc:34:a7:2b:1f:85:e7:2e:8c:d0: 70:5f:d6:75:2f:93:84:58:55:9d:af:e4:2e:3d:fc:fe:c9:00: 90:00:bd:8c:5c:9a:b9:b1:f2:51:dd:9d:a5:69:bb:c8:40:07: e1:04:12:83:37:64:ce:c0:41:e4:68:f5:a0:ca:fc:27:0c:7b: 5e:20:72:d6:ee:0f:75:26:c5:8a:c4:c0:70:50:ce:bd:83:46: f1:4d:18:b4:c8:e9:f1:4d:d0:fc:75:e7:f3:2e:83:b7:6c:54: 04:e2:d7:d9:d7:29:c6:c0:67:56:32:74:b4:ca:95:63:73:41: f9:d7:3b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2dCOLsrZ1msikYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NmMxNGQzNjctMDU3OS00NDVlLThlMDItN2RmYTdjZWIyMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKUY9RAVqJv9pGvFH2lgGG9CTpvgURiPj8OP 3a7NFylCtSpEs/mjBX0mPGTMMdZ3A4O7rvWrCdxFXzq1Nlw73Vm0olMXyHXaOhDq EgXuBuw7bRa+rBgXShFwa0TJ26u7PEclRimiWOa1qsQ07Qxmhc1KvYp1Ey+hm5E7 TEwPjAWB5H7G1cPsDZA1N11HDsYeEIMH3/1kYolf2DkS0iRTgdJexQM67pzV1XHD p/olULlFilRfJ94LvC6c6/G184qioVmGWGObNZVxYrkvRugPL4nuFmKjEkKFZwrN Fk+uZfwtSZ6w2kPObsKRarBHyyxngLnDnda8zyEN+fqbtsZr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXMcMBGaQC82Ggd1Dj2/RINRkx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGQ0MGRiNTUtZWVlMy0z ZGZhLWI3OTYtN2Y1OWI1YmRkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLS2uFAlF2nL8gLBN01I6uXHKq+a9oWTB013pLrL5mYKB1dPkSn4SUh k3PNSMoU8HaxIJmZH0AGgWKmu4uigG6/X7c693M1fuWBPs0Xv0P/DIe9prLJamM2 2ipaakmAgrIbM/VvKawQOZyR5baQ+NGtHCWdG6HBIoO99g4n7FocPozUzV95vDSn Kx+F5y6M0HBf1nUvk4RYVZ2v5C49/P7JAJAAvYxcmrmx8lHdnaVpu8hAB+EEEoM3 ZM7AQeRo9aDK/CcMe14gctbuD3UmxYrEwHBQzr2DRvFNGLTI6fFN0Px15/Mug7ds VATi19nXKcbAZ1YydLTKlWNzQfnXOzI= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:29 2024 by rpki-client on console-ams.rpki-client.org