$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json) Hash identifier: JOcJA0atuKjvEXmdOvB4CGeI3CHfjYM+47hnUS6Bg6w= Subject key identifier: EA:39:18:89:85:04:A7:A1:96:AE:08:76:3E:D0:36:87:51:14:02:BA Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F432858474445A69E46501703C6FB85D8 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa Signing time: Thu 19 Sep 2024 14:15:15 +0000 ROA not before: Thu 19 Sep 2024 14:15:15 +0000 ROA not after: Wed 18 Dec 2024 15:15:15 +0000 asID: 32762 IP address blocks: 198.96.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:45:a6:9e:46:50:17:03:c6:fb:85:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Sep 19 14:15:15 2024 GMT Not After : Dec 18 15:15:15 2024 GMT Subject: CN=796d2179-9a51-440f-b65d-f43044d8a0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:55:d5:a0:1d:51:e3:2d:63:b8:9a:3c:8c: fd:18:49:03:53:6c:ed:a6:15:f9:8f:5f:cc:0b:ea: d6:e1:fb:f3:47:af:a8:4c:16:08:49:5c:d6:12:fb: 5a:87:5b:84:c0:b3:3e:fe:0e:c6:4b:e8:7c:d1:70: 81:55:02:28:a9:dd:0f:98:4c:26:97:01:f5:1d:6f: d5:d2:9a:9d:50:da:d8:71:24:e5:24:de:bc:5a:31: e9:ce:97:a8:1f:34:23:82:0f:85:17:a2:7b:18:d7: 9a:8c:66:30:e7:d7:ad:a7:7e:36:d6:42:e6:db:97: 1d:ea:7b:c1:a7:d9:70:b3:9c:cb:ae:b0:96:73:af: e2:bc:10:9c:8e:c0:97:16:27:b9:5d:dd:e7:5e:2d: df:d0:9c:95:6a:74:8a:eb:40:d8:8e:28:2e:20:5b: d4:64:f6:49:af:40:c8:10:3a:1e:18:20:bf:d9:6a: 16:e3:85:31:1d:73:18:e3:37:5d:ca:b8:bd:6c:b7: 6c:71:90:51:cc:7c:5d:af:40:5e:4f:ef:b2:97:67: d3:35:3e:26:3b:40:96:5f:44:e0:3a:7e:79:a9:c6: 60:03:0c:4f:3d:6d:82:c1:d6:df:e9:2d:fc:df:bd: 93:94:b4:c1:08:d4:d6:ef:09:4e:ad:22:a9:80:8f: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:18:89:85:04:A7:A1:96:AE:08:76:3E:D0:36:87:51:14:02:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 198.96.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9a:a3:ff:09:6f:64:de:05:de:e0:ff:3f:3c:82:40:d8:f9: b3:82:e5:4a:56:c3:94:33:45:c9:69:a4:fe:df:bb:56:db:20: 07:cf:de:c0:9e:2f:8b:ff:69:ca:04:ef:05:15:54:a8:fd:0f: be:cb:26:ee:b7:26:33:60:fd:3f:05:e6:b7:ac:20:b3:57:84: 39:15:67:6b:9e:b3:d9:c1:3f:54:f9:b2:da:3d:00:d1:ce:eb: 09:8f:e4:f5:79:8a:dc:0b:e3:b3:04:d3:bb:bf:ff:17:bd:f0: 93:01:a9:a6:22:f7:a2:2f:7f:5d:e9:ab:eb:4d:4b:04:97:39: d8:83:f3:b2:9e:f3:54:a5:e1:78:80:f7:7c:a6:d7:7c:c3:ef: db:c2:98:81:37:96:ae:7f:0e:a2:aa:85:de:a7:d3:72:40:cd: 2a:ef:31:6b:6c:e2:6d:22:0f:20:d7:aa:29:a0:bb:54:76:1e: 40:b0:49:64:5f:70:c5:48:3c:03:f6:23:60:50:e6:23:bc:54: fa:74:0b:63:59:16:70:54:63:b6:b3:29:d5:30:73:15:22:25: 82:7d:44:30:c1:12:11:08:f2:9c:6a:c2:90:66:2e:f3:dc:fa: de:2c:76:68:1e:2e:a6:d0:0c:56:07:cd:d0:d4:d9:ac:0b:41: fb:36:71:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdERaaeRlAXA8b7hdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI0MDkxOTE0MTUxNVoXDTI0MTIxODE1MTUxNVowLzEtMCsGA1UEAxMk Nzk2ZDIxNzktOWE1MS00NDBmLWI2NWQtZjQzMDQ0ZDhhMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11V1aAdUeMtY7iaPIz9GEkDU2ztphX5j1/M C+rW4fvzR6+oTBYISVzWEvtah1uEwLM+/g7GS+h80XCBVQIoqd0PmEwmlwH1HW/V 0pqdUNrYcSTlJN68WjHpzpeoHzQjgg+FF6J7GNeajGYw59etp3421kLm25cd6nvB p9lws5zLrrCWc6/ivBCcjsCXFie5Xd3nXi3f0JyVanSK60DYjiguIFvUZPZJr0DI EDoeGCC/2WoW44UxHXMY4zddyri9bLdscZBRzHxdr0BeT++yl2fTNT4mO0CWX0Tg On55qcZgAwxPPW2Cwdbf6S38372TlLTBCNTW7wlOrSKpgI+IvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo5GImFBKehlq4Idj7QNodRFAK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvY2IyZmRlZjMtNjlkMy0z M2YxLWEyNzYtMGViZjBjMjIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWao/8Jb2TeBd7g/z88gkDY+bOC5UpWw5QzRclppP7fu1bbIAfP3sCe L4v/acoE7wUVVKj9D77LJu63JjNg/T8F5resILNXhDkVZ2ues9nBP1T5sto9ANHO 6wmP5PV5itwL47ME07u//xe98JMBqaYi96Ivf13pq+tNSwSXOdiD87Ke81Sl4XiA 93ym13zD79vCmIE3lq5/DqKqhd6n03JAzSrvMWts4m0iDyDXqimgu1R2HkCwSWRf cMVIPAP2I2BQ5iO8VPp0C2NZFnBUY7azKdUwcxUiJYJ9RDDBEhEI8pxqwpBmLvPc +t4sdmgeLqbQDFYHzdDU2awLQfs2cZw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org