$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa File: 04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa (raw, json) Hash identifier: bjcqPA/0OK499n6KbT+JPEXoNPPJy9+Uh4590bc90W4= Subject key identifier: 41:55:BB:A7:90:8E:A4:AB:91:A6:46:30:EB:33:0B:45:52:6C:E7:B8 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584754E0E96723A7E2AF7B934500 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 22925 IP address blocks: 198.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:e9:67:23:a7:e2:af:7b:93:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=8db2ee3a-3049-4257-9712-56967781c364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:36:e6:7d:8a:66:8b:eb:c7:e6:e4:32:b8: 1c:09:9c:39:06:63:a4:85:83:11:96:52:cd:84:1d: 5e:30:c7:4e:83:a8:3a:01:a1:04:76:09:06:7c:2a: fd:bf:04:96:56:4a:5a:83:77:cb:d8:fd:59:65:81: ce:ee:24:e7:b0:4f:10:ab:12:7f:65:14:0f:1a:38: 91:05:47:fe:6c:d8:7d:f5:fb:31:a4:4e:1b:29:7a: d2:81:4b:4e:76:5a:a3:47:92:31:61:fd:e7:d4:a0: 31:fd:64:3e:d9:29:3d:db:ae:a3:a3:29:9b:8d:92: e4:6e:46:5b:bc:7c:0c:3b:a7:5a:89:ca:9e:ae:3f: e5:58:e9:72:f5:e6:3a:06:6d:42:55:6c:81:6c:09: 49:26:a6:2b:29:18:91:b7:82:f1:6b:eb:60:e7:6e: d3:ab:a9:1a:d1:d8:ff:ab:b4:a4:04:4c:88:c6:1f: 77:79:98:c0:70:5b:22:fa:79:0e:c8:95:ea:c8:d8: 69:46:be:11:3a:d3:1c:53:53:bb:ff:c0:a7:a3:90: fe:95:c5:df:92:02:1b:31:71:69:de:21:d0:b2:f2: a7:8d:25:e0:b9:3b:d0:d7:ce:69:4a:a6:4f:6c:af: b8:99:ef:93:70:26:ea:d9:3d:e5:5e:c6:71:15:1a: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:55:BB:A7:90:8E:A4:AB:91:A6:46:30:EB:33:0B:45:52:6C:E7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ad:ce:9d:13:98:09:c7:10:63:b9:74:1f:44:3f:49:0c:f7: 08:d1:d0:46:c2:04:48:05:d8:a9:43:aa:46:f8:aa:2e:68:ed: 43:13:fd:07:b0:89:dd:3d:86:6b:1f:d5:0f:67:d4:f1:2c:a2: 6d:4a:39:68:1d:01:70:65:1f:3f:71:6c:e6:b8:2c:8f:97:26: 3b:74:06:9a:17:c6:8f:3e:61:f1:4d:7e:f2:8b:86:71:4d:f2: d7:ec:bd:44:26:d2:e3:c6:ed:1b:c6:85:3f:73:00:e7:4d:12: 54:a2:7e:b7:1c:0c:db:2b:62:38:13:28:d1:f9:8b:41:34:fe: b5:77:b5:9c:d5:e7:62:7f:8d:ca:76:70:d5:4e:67:02:1a:b1: ef:ef:56:cb:9f:f0:54:35:7f:8d:b4:54:27:30:c9:7d:58:12: 53:3a:f7:6e:a7:2d:e8:3b:76:25:e3:65:49:ee:15:a8:6c:42: f4:bf:7b:4c:0c:ad:e9:f6:24:08:20:2b:f5:9e:65:90:b9:20: 80:d2:8d:3e:44:4f:f5:d6:aa:69:bc:02:dd:58:92:5a:d0:b8: 7a:32:da:0d:fc:90:b4:e2:11:12:d5:f9:49:1a:4a:c9:45:60: 69:80:e4:7a:55:b5:07:5f:d3:15:37:e3:eb:d0:0d:6d:a0:42: 68:d8:32:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4OlnI6fir3uTRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OGRiMmVlM2EtMzA0OS00MjU3LTk3MTItNTY5Njc3ODFjMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdo25n2KZovrx+bkMrgcCZw5BmOkhYMRllLN hB1eMMdOg6g6AaEEdgkGfCr9vwSWVkpag3fL2P1ZZYHO7iTnsE8QqxJ/ZRQPGjiR BUf+bNh99fsxpE4bKXrSgUtOdlqjR5IxYf3n1KAx/WQ+2Sk9266joymbjZLkbkZb vHwMO6daicqerj/lWOly9eY6Bm1CVWyBbAlJJqYrKRiRt4Lxa+tg527Tq6ka0dj/ q7SkBEyIxh93eZjAcFsi+nkOyJXqyNhpRr4ROtMcU1O7/8Cno5D+lcXfkgIbMXFp 3iHQsvKnjSXguTvQ185pSqZPbK+4me+TcCbq2T3lXsZxFRqqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFVu6eQjqSrkaZGMOszC0VSbOe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMDRjNjI0MWUtM2E3ZS0z ZjliLWE1MWQtZTljMjA0MzhjYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxs8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJStzp0TmAnHEGO5dB9EP0kM9wjR0EbCBEgF2KlDqkb4qi5o7UMT/Qew id09hmsf1Q9n1PEsom1KOWgdAXBlHz9xbOa4LI+XJjt0BpoXxo8+YfFNfvKLhnFN 8tfsvUQm0uPG7RvGhT9zAOdNElSifrccDNsrYjgTKNH5i0E0/rV3tZzV52J/jcp2 cNVOZwIase/vVsuf8FQ1f420VCcwyX1YElM6926nLeg7diXjZUnuFahsQvS/e0wM ren2JAggK/WeZZC5IIDSjT5ET/XWqmm8At1YklrQuHoy2g38kLTiERLV+UkaSslF YGmA5HpVtQdf0xU34+vQDW2gQmjYMtA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:40:11 2024 by rpki-client on console-ams.rpki-client.org