$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa File: 3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa (raw, json) Hash identifier: VKaaInnKjaxE6uCmKajpESSmE70+9+ZN4i0HQBS1XYI= Subject key identifier: 26:6C:17:2C:40:F0:A3:EF:C6:21:2B:93:C5:2B:48:10:DA:5F:CF:44 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F43285847DDCA0D179A6168600008E540 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa Signing time: Wed 13 Nov 2024 14:00:39 +0000 ROA not before: Wed 13 Nov 2024 14:00:39 +0000 ROA not after: Tue 11 Feb 2025 14:00:39 +0000 asID: 18013 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:ca:0d:17:9a:61:68:60:00:08:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Nov 13 14:00:39 2024 GMT Not After : Feb 11 14:00:39 2025 GMT Subject: CN=531115dc-f09a-4c3d-b333-dd2119ea0f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:6b:ca:f6:5e:10:ae:52:81:6d:0e:20:d2: eb:9f:b7:f6:cc:69:96:75:18:85:e7:0b:e4:53:d2: 7e:18:f1:93:55:c9:9b:68:db:aa:cc:4e:fc:9f:e2: 4a:cc:eb:b4:ce:99:79:72:ec:e6:ae:6b:39:24:5f: 66:a7:18:31:69:a0:a9:19:b8:81:55:b2:cc:c4:63: 63:57:5c:94:2c:6c:11:aa:68:c5:d6:4c:ea:01:cf: 7e:74:e8:b9:97:28:32:77:40:dc:cb:09:5f:a1:d3: 39:fb:b9:df:ae:e0:03:e4:20:86:2b:d8:5e:2a:4a: 5a:e3:33:fe:b4:52:cc:8e:07:9b:38:0f:d9:5a:a1: 0a:3b:47:a6:81:38:4e:6c:31:1e:b6:8c:80:13:e1: b8:01:fc:37:48:9c:45:64:35:df:cc:0c:43:cd:6c: 13:46:0d:5f:85:a0:e6:34:e3:c4:1a:9e:3d:79:60: 54:3a:a1:9d:28:68:5a:06:c3:23:6a:6b:d3:f7:a5: f5:26:6c:89:1f:e7:32:f6:c8:b7:33:df:18:00:f6: 5d:a5:51:14:ff:d0:67:e8:53:ab:49:0c:ac:85:03: 0b:1b:e5:c6:64:79:34:bb:59:28:0c:75:6e:13:3d: 4f:93:20:0b:a2:94:7f:dd:24:65:cf:50:91:e5:71: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:17:2C:40:F0:A3:EF:C6:21:2B:93:C5:2B:48:10:DA:5F:CF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8a:fb:f7:13:c4:df:c1:a7:33:a4:2a:f3:b2:56:bd:6a:3f: 0c:92:ae:69:6f:b9:37:fc:ac:6c:76:02:fe:05:c8:3f:93:82: 17:6b:9b:00:d7:f3:99:93:1d:4f:7e:74:69:46:d8:e6:dd:26: 47:fd:45:16:0f:1d:e2:78:ed:33:c4:d0:90:5f:f9:3a:60:94: 74:2b:39:4e:a6:8b:9d:10:7f:bb:b1:93:79:53:14:98:25:ec: 41:b4:89:77:18:1b:d9:e0:63:37:1c:1d:d0:a3:1b:a6:c1:b4: 75:e3:ce:55:d5:d2:2b:66:cc:9b:45:a9:f4:4a:f1:41:76:d6: 9c:a2:55:35:95:d9:7e:84:e4:48:75:f0:4e:72:69:4b:60:ef: 0d:af:85:8d:8c:88:4a:dc:e9:b4:6e:51:d9:a4:d1:15:59:c7: 07:9a:5e:18:af:57:53:d6:d7:9c:3b:bc:e2:aa:4f:a9:db:29: 8a:21:89:10:66:eb:89:3a:81:35:8f:c7:37:db:77:fe:78:a2: 65:ce:64:69:63:66:23:c1:d9:a3:88:e1:6f:2f:54:3d:5d:ea: eb:3f:86:83:97:88:21:78:72:83:11:b3:1d:a8:b6:c7:87:12: 9c:a8:d1:e2:2c:f3:4d:eb:7a:5f:69:3f:0a:b5:31:7e:31:36: c0:48:0c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdyg0XmmFoYAAI5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI0MTExMzE0MDAzOVoXDTI1MDIxMTE0MDAzOVowLzEtMCsGA1UEAxMk NTMxMTE1ZGMtZjA5YS00YzNkLWIzMzMtZGQyMTE5ZWEwZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG1ryvZeEK5SgW0OINLrn7f2zGmWdRiF5wvk U9J+GPGTVcmbaNuqzE78n+JKzOu0zpl5cuzmrms5JF9mpxgxaaCpGbiBVbLMxGNj V1yULGwRqmjF1kzqAc9+dOi5lygyd0DcywlfodM5+7nfruAD5CCGK9heKkpa4zP+ tFLMjgebOA/ZWqEKO0emgThObDEetoyAE+G4Afw3SJxFZDXfzAxDzWwTRg1fhaDm NOPEGp49eWBUOqGdKGhaBsMjamvT96X1JmyJH+cy9si3M98YAPZdpVEU/9Bn6FOr SQyshQMLG+XGZHk0u1koDHVuEz1PkyALopR/3SRlz1CR5XEBEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZsFyxA8KPvxiErk8UrSBDaX89EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvM2EyMzNiOWEtZGIzMC0z OTQzLWEzMGMtNGMwZmUwZDJkZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKK+/cTxN/BpzOkKvOyVr1qPwySrmlvuTf8rGx2Av4FyD+TghdrmwDX 85mTHU9+dGlG2ObdJkf9RRYPHeJ47TPE0JBf+TpglHQrOU6mi50Qf7uxk3lTFJgl 7EG0iXcYG9ngYzccHdCjG6bBtHXjzlXV0itmzJtFqfRK8UF21pyiVTWV2X6E5Eh1 8E5yaUtg7w2vhY2MiErc6bRuUdmk0RVZxweaXhivV1PW15w7vOKqT6nbKYohiRBm 64k6gTWPxzfbd/54omXOZGljZiPB2aOI4W8vVD1d6us/hoOXiCF4coMRsx2otseH Epyo0eIs803rel9pPwq1MX4xNsBIDLw= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org