$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa File: 7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json) Hash identifier: cGHeYLZCEd59c1thW0Cu7Mba6ChCiopJCkBUNBhDF44= Subject key identifier: 03:5E:7F:0E:CE:19:BE:C7:47:5F:D7:42:E3:D1:67:30:C7:FD:A4:12 Certificate issuer: /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Certificate serial: 010D0C9F432858478CB68AAAD52790F7100FB580 Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 198949 IP address blocks: 198.177.154.0/24 maxlen: 24 204.52.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8a:aa:d5:27:90:f7:10:0f:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=3a8a40df-bb7c-47b8-8e53-e79df8177fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:02:58:40:b7:74:fe:30:4d:5a:fc:c1:fe: b5:b5:53:46:b5:cb:e6:9d:de:19:37:e7:9c:6b:58: 16:41:98:a4:fb:a4:86:28:d2:64:29:a6:d0:53:1a: 14:99:e6:c7:0e:3e:be:bb:44:ab:ab:a8:61:5c:8b: 83:56:f5:61:3b:97:b8:cf:37:1a:91:1b:06:0e:9b: 08:bd:91:c3:02:68:c2:f1:c2:f9:b4:e8:30:97:4e: dd:fa:79:ef:66:ec:36:2a:db:52:bd:ae:1d:50:ca: 51:af:7c:72:51:54:f1:e5:26:00:a3:b9:1a:0a:ea: f8:84:73:30:1a:d1:5d:bf:22:fa:f4:97:8d:2c:17: 88:17:72:08:3a:0c:0c:a1:de:a7:85:b3:f0:30:22: 27:8d:47:b7:47:90:d3:4d:89:d0:cd:dc:df:67:4d: 52:38:aa:43:7c:be:09:37:c6:b1:6b:f0:28:da:6e: 8e:a8:05:a8:89:3a:fe:4e:9b:f0:2b:2d:13:c4:e3: b5:b9:e9:f5:e7:75:11:be:07:a3:34:be:2f:54:58: 1c:ff:02:b0:89:8e:d4:94:77:97:8a:38:6b:5a:59: 84:f4:77:77:de:f8:d7:82:be:99:9c:a0:d3:ed:a3: c1:25:6e:3d:0a:c9:39:56:e7:ed:b1:04:9e:8e:b4: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:7F:0E:CE:19:BE:C7:47:5F:D7:42:E3:D1:67:30:C7:FD:A4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl X509v3 Authority Key Identifier: keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer sbgp-ipAddrBlock: critical IPv4: 198.177.154.0/24 204.52.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a4:55:5a:94:b6:f0:c4:45:e5:e3:79:99:38:06:b7:69:7c: 6e:ef:be:40:4c:27:4b:e7:06:3a:02:1e:d4:28:29:6c:2e:09: 6b:35:f8:4f:fd:9f:a5:14:01:cd:a7:af:89:b2:90:18:6f:a6: 67:e3:9c:5e:07:b4:a4:98:85:71:6c:be:34:2c:b0:f3:ce:f3: c2:7b:ad:57:a7:b5:e1:c2:14:54:1a:f7:f5:52:c9:17:01:6a: 74:59:6b:91:fd:44:fe:f8:b4:b6:95:b5:e8:14:b2:05:ab:3b: d4:2e:c5:3d:83:99:70:26:3f:9a:5b:7a:e6:3f:8c:09:1d:f3: 08:bf:9f:38:74:8a:5e:f0:3b:ad:1e:c1:b5:1c:66:3e:33:46: aa:9c:d4:36:38:3d:be:ab:00:4e:f8:58:30:be:8c:ba:9a:75: 18:52:31:ae:62:46:f2:5e:8c:f4:2c:fb:40:a0:e2:c1:11:4d: f4:b5:d6:f9:8e:57:d1:f8:bd:fa:0f:cc:40:6b:c8:8c:8f:a0: ec:6f:83:37:8e:7a:67:15:3f:37:e0:66:28:3f:69:13:36:6c: 99:fa:b5:e3:48:5d:b1:08:a6:cf:73:51:63:d7:5a:91:9b:ca: ee:af:bd:c0:b7:de:cc:04:92:c4:5f:1b:d1:be:b2:25:ca:cf: 6e:96:63:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeMtoqq1SeQ9xAPtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj MmQxMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk M2E4YTQwZGYtYmI3Yy00N2I4LThlNTMtZTc5ZGY4MTc3ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmoCWEC3dP4wTVr8wf61tVNGtcvmnd4ZN+ec a1gWQZik+6SGKNJkKabQUxoUmebHDj6+u0Srq6hhXIuDVvVhO5e4zzcakRsGDpsI vZHDAmjC8cL5tOgwl07d+nnvZuw2KttSva4dUMpRr3xyUVTx5SYAo7kaCur4hHMw GtFdvyL69JeNLBeIF3IIOgwMod6nhbPwMCInjUe3R5DTTYnQzdzfZ01SOKpDfL4J N8axa/Ao2m6OqAWoiTr+TpvwKy0TxOO1uen153URvgejNL4vVFgc/wKwiY7UlHeX ijhrWlmE9Hd33vjXgr6ZnKDT7aPBJW49Csk5VuftsQSejrQgPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFANefw7OGb7HR1/XQuPRZzDH/aQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvNzUzOTQ1NmEtMWVkZS0z MGRiLWE1Y2YtZmUxNjA0MDJmODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3 YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw NGJkN2MyZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxrGaAwQA zDT8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK+kVVqUtvDEReXjeZk4BrdpfG7vvkBMJ0vnBjoCHtQoKWwu CWs1+E/9n6UUAc2nr4mykBhvpmfjnF4HtKSYhXFsvjQssPPO88J7rVenteHCFFQa 9/VSyRcBanRZa5H9RP74tLaVtegUsgWrO9QuxT2DmXAmP5pbeuY/jAkd8wi/nzh0 il7wO60ewbUcZj4zRqqc1DY4Pb6rAE74WDC+jLqadRhSMa5iRvJejPQs+0Cg4sER TfS11vmOV9H4vfoPzEBryIyPoOxvgzeOemcVPzfgZig/aRM2bJn6teNIXbEIps9z UWPXWpGbyu6vvcC33swEksRfG9G+siXKz26WY9g= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:21 2024 by rpki-client on console-fra.rpki-client.org