$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfef1f12-9c0b-37f2-817e-3a67387b6712.roa File: bfef1f12-9c0b-37f2-817e-3a67387b6712.roa (raw, json) Hash identifier: fCSfXoOUhbcVzbOF9XhryetdKWCGP7fEwh/D9+Qe4h8= Subject key identifier: 2D:30:E8:28:0A:FF:72:C8:BD:D2:81:B0:25:65:05:D4:39:85:78:2F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285847CFF48E154C0B887FDC20C708 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfef1f12-9c0b-37f2-817e-3a67387b6712.roa Signing time: Fri 08 Nov 2024 15:05:02 +0000 ROA not before: Fri 08 Nov 2024 15:05:02 +0000 ROA not after: Thu 06 Feb 2025 15:05:02 +0000 asID: 394165 IP address blocks: 198.85.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:f4:8e:15:4c:0b:88:7f:dc:20:c7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Nov 8 15:05:02 2024 GMT Not After : Feb 6 15:05:02 2025 GMT Subject: CN=0370b81e-2372-4508-bbc0-28cdb16db9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:c3:b7:db:9d:36:e9:d1:d7:fb:e3:1c:f9: 0a:8d:69:fe:ea:89:1b:bc:6c:8c:99:1e:68:24:61: 07:91:3a:49:e7:52:4b:a5:e9:9d:9a:a3:4c:52:76: c5:a2:2e:ef:25:4b:92:3b:a3:58:1e:9f:da:2f:2d: 34:28:46:01:8f:6b:51:7b:5f:96:d1:34:8f:2a:5b: 32:d5:bb:16:34:6b:37:1f:cd:d6:0f:2a:ad:96:a5: 6f:51:b6:82:fb:1e:d3:41:38:8a:c5:e8:91:f5:5d: 21:54:4f:29:0a:36:e7:81:c5:cf:3a:37:37:ef:83: e6:00:fc:53:d6:51:42:f8:4e:cb:a5:f3:87:1a:5f: 34:30:eb:ce:66:a5:2e:3b:8f:98:35:d2:59:57:d5: 74:8b:3e:a2:54:75:6e:1b:5f:42:1c:57:f7:85:4d: 5f:ac:e6:5d:50:e1:c1:2a:3e:08:3a:72:42:bd:1e: 17:23:24:69:cb:22:49:a5:a2:3c:b8:a0:d6:4a:27: 6c:e7:b3:06:cd:1b:78:5f:95:26:fd:66:3d:1c:ad: 35:7e:36:0e:c2:d3:7c:d4:91:b9:c4:7b:94:9c:01: e9:90:ff:5a:60:de:d0:26:a8:9d:7e:3f:f0:c0:ed: dd:c6:d3:b9:19:9f:16:e3:0c:1e:93:19:8e:61:05: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:30:E8:28:0A:FF:72:C8:BD:D2:81:B0:25:65:05:D4:39:85:78:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bfef1f12-9c0b-37f2-817e-3a67387b6712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bc:86:35:d4:91:6e:31:11:53:da:4c:17:70:73:33:ae:ae: fe:3b:23:de:3c:37:bf:22:3f:9c:1f:45:33:3f:a0:ea:0e:ad: 91:87:49:a3:e0:7b:fc:15:b1:35:f0:50:d8:11:a3:a7:2a:2b: 73:86:c9:86:98:06:03:dd:54:4c:dc:f7:5a:44:bc:56:36:5b: 8f:bc:df:ea:33:a6:0b:96:76:0a:2c:c4:9c:ff:23:92:b9:42: a6:be:75:2f:d5:33:10:44:78:4d:41:80:d7:25:81:6a:69:3b: c3:ce:fe:2c:fd:39:46:bc:75:93:2d:14:63:97:96:66:9a:06: ec:16:a6:45:e1:4e:cd:70:ee:b6:4a:6a:9d:c7:8f:ff:11:de: bd:05:d3:14:04:75:76:5f:72:ca:59:aa:9a:45:32:68:38:25: ee:8d:f1:51:44:36:76:2e:37:37:86:93:c8:e7:e5:e2:b8:b9: 56:90:0a:64:d7:48:ff:76:28:a1:ba:10:a1:83:6f:65:a4:cd: 21:8e:62:ed:5a:d7:9a:0f:9e:62:d3:1e:a2:12:38:f6:fd:dc: ee:8b:8d:a9:ff:7d:cd:f5:36:4f:ca:ab:6c:74:35:85:ce:24: 69:38:f2:d6:68:61:8d:9f:f8:0f:5d:be:26:c7:b1:0f:34:61: 65:78:aa:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9I4VTAuIf9wgxwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI0MTEwODE1MDUwMloXDTI1MDIwNjE1MDUwMlowLzEtMCsGA1UEAxMk MDM3MGI4MWUtMjM3Mi00NTA4LWJiYzAtMjhjZGIxNmRiOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc/Dt9udNunR1/vjHPkKjWn+6okbvGyMmR5o JGEHkTpJ51JLpemdmqNMUnbFoi7vJUuSO6NYHp/aLy00KEYBj2tRe1+W0TSPKlsy 1bsWNGs3H83WDyqtlqVvUbaC+x7TQTiKxeiR9V0hVE8pCjbngcXPOjc374PmAPxT 1lFC+E7LpfOHGl80MOvOZqUuO4+YNdJZV9V0iz6iVHVuG19CHFf3hU1frOZdUOHB Kj4IOnJCvR4XIyRpyyJJpaI8uKDWSids57MGzRt4X5Um/WY9HK01fjYOwtN81JG5 xHuUnAHpkP9aYN7QJqidfj/wwO3dxtO5GZ8W4wwekxmOYQVhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0w6CgK/3LIvdKBsCVlBdQ5hXgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYmZlZjFmMTItOWMwYi0z N2YyLTgxN2UtM2E2NzM4N2I2NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm8hjXUkW4xEVPaTBdwczOurv47I948N78iP5wfRTM/oOoOrZGHSaPg e/wVsTXwUNgRo6cqK3OGyYaYBgPdVEzc91pEvFY2W4+83+ozpguWdgosxJz/I5K5 Qqa+dS/VMxBEeE1BgNclgWppO8PO/iz9OUa8dZMtFGOXlmaaBuwWpkXhTs1w7rZK ap3Hj/8R3r0F0xQEdXZfcspZqppFMmg4Je6N8VFENnYuNzeGk8jn5eK4uVaQCmTX SP92KKG6EKGDb2WkzSGOYu1a15oPnmLTHqISOPb93O6Ljan/fc31Nk/Kq2x0NYXO JGk48tZoYY2f+A9dvibHsQ80YWV4qgM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org