$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa File: 5b047369-1853-3c0b-830c-d67137c9c298.roa (raw, json) Hash identifier: Q6hOQrcZ9chZJWk01M5aKyBlfwZvOYneTK2wDnU85yU= Subject key identifier: 58:EA:DF:5B:5B:4E:C6:3D:BD:C3:1E:7F:F6:30:A5:35:B0:AA:D8:C7 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F43285847A07A4822BE9FC1FC9765A700 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa Signing time: Tue 22 Oct 2024 14:55:40 +0000 ROA not before: Tue 22 Oct 2024 14:55:40 +0000 ROA not after: Mon 20 Jan 2025 15:55:40 +0000 asID: 59 IP address blocks: 198.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:7a:48:22:be:9f:c1:fc:97:65:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Oct 22 14:55:40 2024 GMT Not After : Jan 20 15:55:40 2025 GMT Subject: CN=27361b77-df6e-4955-a4f5-ba712f13a696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:29:ad:cb:43:4d:25:af:cf:10:db:56:4c: 6b:d7:21:b2:26:2e:f3:4a:89:da:4a:78:85:61:67: 89:6f:a4:c3:30:45:43:c6:ce:11:4e:34:22:10:6b: 86:5f:e0:7a:72:cd:66:d7:45:f2:fb:eb:2f:bd:ab: 2e:0c:42:2a:35:40:a8:10:97:4f:d6:d8:0c:0f:ee: ab:f7:07:7b:e1:f6:4a:43:ef:de:76:bd:ea:e3:43: 93:55:b0:75:04:68:f2:08:fc:e8:b0:73:1d:ae:ac: 61:8a:d4:90:ae:14:62:cc:19:1a:8d:4e:0c:22:65: f1:8a:52:30:6f:8c:74:5e:89:36:6c:3c:00:5a:54: a8:e1:ac:97:7e:57:29:69:9f:7f:3e:4d:cc:71:b5: 79:af:d6:58:cc:46:9a:2f:64:23:25:88:e3:90:c8: e3:ce:e0:82:5b:62:27:50:52:7c:ce:34:29:59:e8: e0:67:f3:03:f0:17:0e:a2:0f:40:f0:e9:5c:c5:30: 7a:6f:5f:76:b3:62:0c:7b:44:bc:7f:82:e7:ff:7a: 0d:03:cb:a7:ce:34:a1:86:99:d1:30:6a:43:c5:fd: f3:7d:26:ac:2f:07:93:9e:12:fe:a3:35:56:f1:2c: e7:01:54:84:a1:39:1b:17:fd:a5:16:a9:bc:1c:5d: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EA:DF:5B:5B:4E:C6:3D:BD:C3:1E:7F:F6:30:A5:35:B0:AA:D8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.51.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0c:76:c9:26:5f:77:7c:cd:b1:20:ec:0e:72:59:17:71:2f: f9:2d:c0:fa:e8:76:79:9e:be:8b:3d:b7:44:98:9b:62:3f:f2: 8e:12:b8:dd:c7:a9:6a:7e:02:8d:ee:22:d7:eb:f0:42:fc:d8: bd:da:f9:af:5b:a9:7c:bf:58:40:26:e8:fd:de:40:19:88:84: 88:34:d0:01:ba:80:2d:3e:6f:a9:fd:10:f2:3b:c5:4e:32:b1: 38:fd:b4:42:5e:dc:06:69:16:d2:a7:e0:ea:7a:b4:01:4d:fa: 4d:f7:7e:25:31:01:6a:a8:70:b7:a4:0f:96:51:f2:2f:c6:6c: e9:d7:c9:f6:fe:34:c0:74:f8:6f:11:69:2e:84:c2:55:77:4a: d2:c4:1c:17:9d:d5:61:91:f1:8c:41:34:b0:60:0a:63:5c:c0: 97:16:88:3b:dc:90:13:70:be:6a:7e:63:8b:1f:d3:a1:dc:7f: 85:f6:bf:0f:93:4c:a1:ca:6e:63:51:94:75:f1:ae:b2:60:b7: 0c:8f:f3:33:43:5c:e9:d1:8c:da:d3:7c:ab:18:97:70:5c:80: 8c:11:3b:23:a5:7a:d1:53:b2:42:ee:10:02:96:5b:95:2d:78: ad:8c:b6:9e:1d:a1:a1:73:9c:34:9e:f1:66:47:45:8a:55:02: cf:00:29:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegekgivp/B/JdlpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI0MTAyMjE0NTU0MFoXDTI1MDEyMDE1NTU0MFowLzEtMCsGA1UEAxMk MjczNjFiNzctZGY2ZS00OTU1LWE0ZjUtYmE3MTJmMTNhNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAQprctDTSWvzxDbVkxr1yGyJi7zSonaSniF YWeJb6TDMEVDxs4RTjQiEGuGX+B6cs1m10Xy++svvasuDEIqNUCoEJdP1tgMD+6r 9wd74fZKQ+/edr3q40OTVbB1BGjyCPzosHMdrqxhitSQrhRizBkajU4MImXxilIw b4x0Xok2bDwAWlSo4ayXflcpaZ9/Pk3McbV5r9ZYzEaaL2QjJYjjkMjjzuCCW2In UFJ8zjQpWejgZ/MD8BcOog9A8OlcxTB6b192s2IMe0S8f4Ln/3oNA8unzjShhpnR MGpDxf3zfSasLweTnhL+ozVW8SznAVSEoTkbF/2lFqm8HF3zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjq31tbTsY9vcMef/YwpTWwqtjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNWIwNDczNjktMTg1My0z YzBiLTgzMGMtZDY3MTM3YzljMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIMdskmX3d8zbEg7A5yWRdxL/ktwProdnmevos9t0SYm2I/8o4SuN3H qWp+Ao3uItfr8EL82L3a+a9bqXy/WEAm6P3eQBmIhIg00AG6gC0+b6n9EPI7xU4y sTj9tEJe3AZpFtKn4Op6tAFN+k33fiUxAWqocLekD5ZR8i/GbOnXyfb+NMB0+G8R aS6EwlV3StLEHBed1WGR8YxBNLBgCmNcwJcWiDvckBNwvmp+Y4sf06Hcf4X2vw+T TKHKbmNRlHXxrrJgtwyP8zNDXOnRjNrTfKsYl3BcgIwROyOletFTskLuEAKWW5Ut eK2Mtp4doaFznDSe8WZHRYpVAs8AKTs= -----END CERTIFICATE-----Generated at Sun Nov 24 16:04:17 2024 by rpki-client on console-ams.rpki-client.org