$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa File: 2021ca11-bb53-3b76-82ac-95fa09e690a3.roa (raw, json) Hash identifier: y3FXMoAJJPbe64a1FRVlzxlp6CexwIvRHKKjjmqkhcU= Subject key identifier: A5:06:CC:C0:15:B6:03:8B:2F:24:D2:48:99:64:39:DF:DA:B4:87:11 Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584744407F84593580DE644CF240 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa Signing time: Thu 19 Sep 2024 14:04:52 +0000 ROA not before: Thu 19 Sep 2024 14:04:52 +0000 ROA not after: Wed 18 Dec 2024 15:04:52 +0000 asID: 32762 IP address blocks: 192.197.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:40:7f:84:59:35:80:de:64:4c:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Sep 19 14:04:52 2024 GMT Not After : Dec 18 15:04:52 2024 GMT Subject: CN=9b942e9d-86d8-4006-a4c1-296bfdddb800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:46:fa:5a:3c:32:b7:af:46:95:e8:7c:39: 50:2a:1f:43:68:16:06:08:87:a7:b1:2c:b4:e3:80: be:95:4f:1c:31:58:39:ca:52:5e:4c:0d:c1:2a:06: 38:ac:91:3e:26:5a:32:fa:e4:38:4d:c3:11:d9:97: ca:d4:bf:5b:14:48:49:09:a9:45:1d:f0:ae:9f:1b: 30:08:5b:fc:aa:83:e8:91:2f:2e:c0:a3:fe:7c:08: 78:30:b2:00:5e:c4:78:b8:4d:97:05:6f:2c:3d:e2: db:6b:ce:54:9c:df:76:88:ec:27:d1:c6:6a:e8:a2: 12:ef:ca:65:02:c2:ab:86:7b:ed:7e:ec:fe:08:06: 55:29:55:4f:7e:3b:91:69:5e:86:31:d9:8b:f9:5a: 23:d0:6d:8c:0f:13:57:02:b4:d6:c7:7e:81:b1:7d: c8:9a:6b:af:7e:f0:07:95:eb:a1:3e:a1:23:c6:e0: 0e:b7:d2:05:39:6f:fa:6b:92:e8:92:48:46:74:0b: b2:bb:cb:43:41:35:72:2d:77:40:51:52:d0:16:4a: 1e:a3:57:9d:fc:ea:49:40:4b:f6:5d:72:47:89:bd: 82:1b:1d:b1:ac:7c:95:0e:13:67:15:f8:f2:6d:f3: e1:9c:59:c7:9c:fb:1e:26:01:37:95:0b:c6:e6:2c: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:06:CC:C0:15:B6:03:8B:2F:24:D2:48:99:64:39:DF:DA:B4:87:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:78:c5:0d:b5:dc:a3:77:3e:1e:4b:32:5e:ee:9f:28:d4:d2: 0b:48:9d:5e:06:c1:10:30:b7:bc:4b:29:07:01:47:28:15:e3: 69:9b:ad:89:6b:8d:85:0a:94:88:ba:75:47:9e:b5:37:8e:8e: e9:b6:1f:c7:16:76:f9:33:8c:ab:b1:84:23:b7:e3:a8:88:55: 89:f4:4a:b3:b3:45:14:c7:38:17:e9:89:e8:85:dd:5d:71:3f: 70:82:b0:31:5e:28:de:bd:f7:1b:56:65:12:71:6d:e8:66:0d: 83:85:ee:33:0d:9b:13:21:b7:4a:cb:3e:d8:98:f9:bd:ee:9b: 46:c4:cc:a8:a6:ee:59:64:53:2b:57:84:83:c3:a2:20:35:8b: af:e6:e9:b6:03:8a:8e:e7:55:61:1e:f5:a5:8c:8b:11:fb:8b: b9:cb:0d:5a:d6:20:50:fd:fa:46:97:18:86:de:95:fa:e7:c3: 82:11:68:cd:da:58:fb:73:14:57:96:71:f9:2c:0b:d5:da:e8: af:a1:83:90:08:48:88:be:b0:6a:1c:b5:8f:b6:92:bd:72:74: 58:43:49:f6:24:a4:4e:19:c4:54:05:cd:b6:f1:e3:1e:c8:66: 7b:5e:ac:43:8e:84:c3:d1:62:9b:4d:5b:31:3b:e3:37:5b:f3: e3:2a:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEQH+EWTWA3mRM8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI0MDkxOTE0MDQ1MloXDTI0MTIxODE1MDQ1MlowLzEtMCsGA1UEAxMk OWI5NDJlOWQtODZkOC00MDA2LWE0YzEtMjk2YmZkZGRiODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvhG+lo8MrevRpXofDlQKh9DaBYGCIensSy0 44C+lU8cMVg5ylJeTA3BKgY4rJE+Jloy+uQ4TcMR2ZfK1L9bFEhJCalFHfCunxsw CFv8qoPokS8uwKP+fAh4MLIAXsR4uE2XBW8sPeLba85UnN92iOwn0cZq6KIS78pl AsKrhnvtfuz+CAZVKVVPfjuRaV6GMdmL+Voj0G2MDxNXArTWx36BsX3ImmuvfvAH leuhPqEjxuAOt9IFOW/6a5LokkhGdAuyu8tDQTVyLXdAUVLQFkoeo1ed/OpJQEv2 XXJHib2CGx2xrHyVDhNnFfjybfPhnFnHnPseJgE3lQvG5ixQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUGzMAVtgOLLyTSSJlkOd/atIcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMjAyMWNhMTEtYmI1My0z Yjc2LTgyYWMtOTVmYTA5ZTY5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt4xQ213KN3Ph5LMl7unyjU0gtInV4GwRAwt7xLKQcBRygV42mbrYlr jYUKlIi6dUeetTeOjum2H8cWdvkzjKuxhCO346iIVYn0SrOzRRTHOBfpieiF3V1x P3CCsDFeKN699xtWZRJxbehmDYOF7jMNmxMht0rLPtiY+b3um0bEzKim7llkUytX hIPDoiA1i6/m6bYDio7nVWEe9aWMixH7i7nLDVrWIFD9+kaXGIbelfrnw4IRaM3a WPtzFFeWcfksC9Xa6K+hg5AISIi+sGoctY+2kr1ydFhDSfYkpE4ZxFQFzbbx4x7I ZnterEOOhMPRYptNWzE74zdb8+MqOog= -----END CERTIFICATE-----Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org