$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa File: b38f9546-1b60-3c50-9434-3b0f45b90b58.roa (raw, json) Hash identifier: leYupphjVBm82CiIqSdkEZReY/9y6sShP5R68+8hYxs= Subject key identifier: E5:81:68:42:99:5B:05:97:78:87:1B:81:AA:28:B0:D7:FA:6D:AF:02 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285847B64F820F9530B7267CCB4280 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa Signing time: Wed 30 Oct 2024 10:37:16 +0000 ROA not before: Wed 30 Oct 2024 10:37:16 +0000 ROA not after: Tue 28 Jan 2025 11:37:16 +0000 asID: 400866 IP address blocks: 198.44.161.0/24 maxlen: 24 198.44.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:4f:82:0f:95:30:b7:26:7c:cb:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 30 10:37:16 2024 GMT Not After : Jan 28 11:37:16 2025 GMT Subject: CN=ca2d6f1e-01fd-4339-8c40-9fc3c6175d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:ca:b4:70:03:df:50:9c:67:c4:0a:9b:fb: fa:bf:fb:2c:1c:aa:ef:ab:01:e7:df:e3:35:7e:07: d7:d5:ed:63:44:8a:05:cb:50:72:d0:e0:04:cb:b6: 7e:39:03:f7:a0:ab:af:84:35:5c:7c:cf:86:61:42: 51:6d:6e:62:d8:45:d1:09:89:81:b6:81:13:63:69: e6:02:24:11:c8:f0:03:8d:5d:63:0a:74:ef:a2:99: 35:a6:43:8c:2f:d8:d6:5a:33:b7:ec:15:f0:bb:38: dd:15:e8:7a:ad:12:c1:91:db:98:50:0b:f7:5a:bc: 2b:a4:c4:31:53:f1:83:10:3b:72:70:06:3c:05:2c: 2f:8b:ec:04:19:ae:3e:58:9c:0b:37:b7:ed:56:71: a6:6e:db:d3:d7:56:01:6d:0f:07:a9:13:a9:98:b0: f6:84:0d:e4:27:57:1a:d1:e2:f2:2a:cc:8b:97:f5: da:f8:cc:47:49:19:06:d2:4e:a1:ae:fc:d1:2c:ae: 1b:8b:0e:d9:cd:b4:14:35:b3:5a:c4:56:d6:bf:f4: b2:2a:a3:f7:ac:5b:2f:36:b3:54:75:63:54:d4:b3: e7:e3:07:f7:64:9d:c3:8e:fb:71:38:34:02:44:81: 77:87:11:3a:8d:80:44:c1:5a:94:d0:70:f7:46:df: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:68:42:99:5B:05:97:78:87:1B:81:AA:28:B0:D7:FA:6D:AF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.161.0-198.44.162.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:98:a1:71:03:a1:70:04:c0:11:25:cf:35:c5:11:3e:52:ea: c0:ed:6c:49:b2:3b:2d:65:8e:3b:a3:db:aa:e9:b2:c7:77:c5: 72:b7:26:51:69:b0:70:44:a9:71:ba:00:56:71:69:de:fd:79: 90:86:fa:07:a2:58:49:4d:ad:a2:27:0c:23:32:ee:31:ba:df: 19:21:a6:4a:3f:93:ee:62:d9:fe:df:7d:23:36:f9:24:42:ff: eb:e4:6d:66:94:10:1b:ea:fe:45:10:d5:65:a9:f5:0c:27:7d: cc:6b:8f:26:1c:4f:a6:61:bc:63:ef:ab:9a:4a:19:21:96:74: 9b:da:8d:31:97:32:33:7d:3e:62:b9:0c:1f:cc:c1:8d:72:b5: 1e:d7:57:c5:d0:1b:f7:3e:37:e4:b6:2a:a6:ce:15:f5:b1:bc: 21:e2:4f:09:22:f9:21:a4:a2:40:76:0f:62:3d:55:06:e1:a6: 5d:a9:60:a6:23:50:2c:d1:65:27:b1:22:7d:d5:bd:a2:8d:30: 2f:b7:45:26:3e:d4:89:e5:70:c0:5b:60:9d:96:4c:f8:a7:e9: 49:bd:58:1a:87:a3:6c:67:b0:1c:86:02:e1:3d:fa:03:70:52: 4a:56:9f:ea:8b:e4:04:db:b1:45:d1:e7:a7:cb:a6:86:56:77: e6:9b:e0:49 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEe2T4IPlTC3JnzLQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI0MTAzMDEwMzcxNloXDTI1MDEyODExMzcxNlowLzEtMCsGA1UEAxMk Y2EyZDZmMWUtMDFmZC00MzM5LThjNDAtOWZjM2M2MTc1ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTKtHAD31CcZ8QKm/v6v/ssHKrvqwHn3+M1 fgfX1e1jRIoFy1By0OAEy7Z+OQP3oKuvhDVcfM+GYUJRbW5i2EXRCYmBtoETY2nm AiQRyPADjV1jCnTvopk1pkOML9jWWjO37BXwuzjdFeh6rRLBkduYUAv3WrwrpMQx U/GDEDtycAY8BSwvi+wEGa4+WJwLN7ftVnGmbtvT11YBbQ8HqROpmLD2hA3kJ1ca 0eLyKsyLl/Xa+MxHSRkG0k6hrvzRLK4biw7ZzbQUNbNaxFbWv/SyKqP3rFsvNrNU dWNU1LPn4wf3ZJ3DjvtxODQCRIF3hxE6jYBEwVqU0HD3Rt85twIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOWBaEKZWwWXeIcbgaoosNf6ba8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjM4Zjk1NDYtMWI2MC0z YzUwLTk0MzQtM2IwZjQ1YjkwYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGLKED BADGLKIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXpihcQOhcATAESXPNcURPlLqwO1sSbI7LWWOO6Pbqumy x3fFcrcmUWmwcESpcboAVnFp3v15kIb6B6JYSU2toicMIzLuMbrfGSGmSj+T7mLZ /t99Izb5JEL/6+RtZpQQG+r+RRDVZan1DCd9zGuPJhxPpmG8Y++rmkoZIZZ0m9qN MZcyM30+YrkMH8zBjXK1HtdXxdAb9z435LYqps4V9bG8IeJPCSL5IaSiQHYPYj1V BuGmXalgpiNQLNFlJ7EifdW9oo0wL7dFJj7UieVwwFtgnZZM+KfpSb1YGoejbGew HIYC4T36A3BSSlaf6ovkBNuxRdHnp8umhlZ35pvgSQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org