$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa File: 958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json) Hash identifier: zmycK0lYDBwxVZ0I8FwvWv4hvItdXrBA3gU25i0Zw5o= Subject key identifier: 46:B4:E1:98:5E:F8:67:E1:21:A7:1A:04:18:30:D4:90:DD:9B:F3:50 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F432858471FD5DC006C6B98FA95D75C00 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 56274 IP address blocks: 198.208.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:dc:00:6c:6b:98:fa:95:d7:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=cae56399-fce3-465f-ab3c-752dadeeb06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:9d:ed:f8:14:cc:db:6e:36:66:db:7a:0e: ce:dc:c3:f1:33:b5:38:4d:66:53:11:1f:31:ff:0b: 38:2d:b8:4e:c7:81:f6:52:74:dd:31:c2:62:ac:2d: 44:3d:75:f9:a1:e9:67:d2:07:37:44:30:04:28:2d: f0:0d:ad:71:10:0c:62:c3:88:24:3b:68:30:23:ad: 0b:99:54:d3:38:cc:78:70:c3:bf:d1:78:bf:e3:ae: 26:bc:70:6e:9a:13:3e:ee:34:8c:32:1a:52:8d:41: df:17:dc:94:00:e5:07:70:2d:3a:b7:5b:21:ef:03: 2a:70:fa:42:66:ef:ea:88:ee:3a:69:97:dc:f9:1a: d2:53:13:e7:97:7d:1e:e1:ce:86:2a:0a:46:a2:47: f9:bb:de:86:66:4c:98:99:c4:28:2b:cb:c4:b3:14: 70:5a:84:11:9a:35:17:de:72:68:60:3d:62:99:f0: ac:7c:f4:d9:03:46:6e:99:ef:98:84:36:e9:10:da: 1a:e0:93:ae:d4:80:c1:6e:1d:00:98:a0:33:26:56: 74:99:2c:63:a0:45:5b:94:f2:82:c0:8a:ed:84:7f: 5e:fb:ae:3c:8f:c3:8b:56:1f:14:da:43:86:bb:fd: 30:6d:51:cf:1e:aa:98:f3:b3:fa:69:37:78:37:71: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:E1:98:5E:F8:67:E1:21:A7:1A:04:18:30:D4:90:DD:9B:F3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:e5:cb:37:d5:15:a7:ae:87:99:cb:fb:da:18:8d:3a:7d: 72:cd:b6:a5:d3:f8:89:aa:2b:b4:60:4d:31:f8:0f:fd:e7:07: 33:0e:4a:96:ac:66:b7:d5:e2:d0:5c:b1:a8:e2:3b:69:d6:fe: 72:fa:4d:55:3a:66:db:d3:d5:27:dd:55:c0:9e:07:ff:25:84: 9b:d5:f5:0b:cd:6b:79:54:05:76:1f:a4:14:ed:05:4a:73:76: f3:ff:ad:c9:ee:d0:e0:a3:9d:ee:ad:df:87:7c:54:3e:e4:a2: f7:f8:70:b5:db:2b:0e:ba:bd:77:f9:a2:c4:7e:b0:15:a9:04: 74:ff:9f:39:14:a5:bf:da:75:cf:f8:c1:1a:91:f5:75:20:91: a7:f2:ca:a3:26:cd:f1:d0:da:f3:46:1e:51:5d:95:fe:c6:8a: 8f:6c:f0:b0:84:e4:51:95:7c:b8:61:a3:49:98:df:e9:42:23: 64:90:6e:78:8b:c4:45:ad:08:6c:6a:33:a6:09:b0:e7:fe:a7: 5d:2d:9c:15:14:b6:f0:fd:35:34:38:9c:b7:f1:1c:20:b9:38: eb:6b:eb:94:1a:0f:b5:5d:09:80:29:af:19:5d:5b:5d:04:17: 4a:79:19:67:2e:27:48:36:4d:26:95:e6:42:c7:44:82:50:34: 53:6f:6e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1dwAbGuY+pXXXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2FlNTYzOTktZmNlMy00NjVmLWFiM2MtNzUyZGFkZWViMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty2d7fgUzNtuNmbbeg7O3MPxM7U4TWZTER8x /ws4LbhOx4H2UnTdMcJirC1EPXX5oeln0gc3RDAEKC3wDa1xEAxiw4gkO2gwI60L mVTTOMx4cMO/0Xi/464mvHBumhM+7jSMMhpSjUHfF9yUAOUHcC06t1sh7wMqcPpC Zu/qiO46aZfc+RrSUxPnl30e4c6GKgpGokf5u96GZkyYmcQoK8vEsxRwWoQRmjUX 3nJoYD1imfCsfPTZA0Zume+YhDbpENoa4JOu1IDBbh0AmKAzJlZ0mSxjoEVblPKC wIrthH9e+648j8OLVh8U2kOGu/0wbVHPHqqY87P6aTd4N3F43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa04Zhe+GfhIacaBBgw1JDdm/NQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCA5cs31RWnroeZy/vaGI06fXLNtqXT+ImqK7RgTTH4D/3nBzMOSpas ZrfV4tBcsajiO2nW/nL6TVU6ZtvT1SfdVcCeB/8lhJvV9QvNa3lUBXYfpBTtBUpz dvP/rcnu0OCjne6t34d8VD7kovf4cLXbKw66vXf5osR+sBWpBHT/nzkUpb/adc/4 wRqR9XUgkafyyqMmzfHQ2vNGHlFdlf7Gio9s8LCE5FGVfLhho0mY3+lCI2SQbniL xEWtCGxqM6YJsOf+p10tnBUUtvD9NTQ4nLfxHCC5OOtr65QaD7VdCYAprxldW10E F0p5GWcuJ0g2TSaV5kLHRIJQNFNvbgI= -----END CERTIFICATE-----Generated at Sun Nov 24 15:26:56 2024 by rpki-client on console-fra.rpki-client.org