$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json) Hash identifier: WEZW7nwvNFjztkS46JbcwX983LAWrpKf6E/vxB/b33o= Subject key identifier: 89:77:5A:1C:1A:9F:98:FE:FD:62:5D:30:28:26:F1:FE:07:CC:3D:44 Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F43285847AB6C0334F93D3977A01ECCC0 Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 202013 IP address blocks: 198.161.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:03:34:f9:3d:39:77:a0:1e:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=09b8495b-eaa4-4513-95cb-940d569f2c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:10:a1:62:ef:8c:ef:21:be:98:2e:f3:83: 56:3d:b2:a2:df:1c:7e:a8:8d:05:e5:93:dd:da:47: 1f:54:04:8a:93:aa:7e:84:7d:1b:f2:30:85:09:39: 87:c5:1d:40:b0:bf:ab:d6:65:2c:38:9e:97:1c:a4: 3b:9f:be:a2:5e:fa:ea:87:1f:14:25:06:7a:da:c8: b1:3c:0f:bc:6c:f5:ce:56:80:14:97:01:b4:5f:8e: 43:4f:d8:3e:8c:de:09:7a:bb:08:1e:01:f6:a5:77: 3b:5e:49:a6:00:0c:aa:5d:f8:fc:cb:f4:e8:2f:08: 9e:90:58:8e:94:fb:e5:2f:28:b7:8f:ee:e5:12:81: 7c:ab:88:cd:bd:78:4d:af:91:47:ce:a5:92:e2:92: 7a:75:f9:5b:6a:06:90:c2:dd:b7:d0:27:34:85:33: 72:08:8a:1a:0f:50:dd:e8:92:44:4f:81:a2:ca:40: 84:ca:0d:5b:f4:bb:cf:5a:76:11:cb:29:44:f7:a6: ce:f4:93:20:96:7c:04:23:05:d5:67:03:30:8b:19: c0:e5:2a:c6:53:b3:ac:40:97:a9:26:af:35:36:0c: 93:68:dc:e4:96:fb:2a:a5:4a:2d:b2:a1:eb:43:42: ac:1c:6a:76:ec:a7:38:e2:30:4b:57:e6:e2:3a:28: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:5A:1C:1A:9F:98:FE:FD:62:5D:30:28:26:F1:FE:07:CC:3D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f7:b8:41:1c:69:d3:ee:e0:69:fe:59:0a:45:9d:c9:5b:e9: f0:55:aa:cc:b2:ec:f5:4e:52:48:b9:e0:ff:69:2f:f8:17:65: eb:fa:b9:a7:9e:38:d6:1b:e0:8e:99:bb:f9:64:2a:8f:49:93: 69:7b:be:84:8e:17:84:9c:50:c7:ee:bf:62:58:3b:81:99:79: b4:2d:a6:bc:61:9d:8a:34:86:38:7a:d0:0f:06:96:70:7a:54: b2:b2:4f:9e:1a:da:97:0e:ce:ab:8a:85:e1:b8:19:63:44:87: 7e:5e:4d:2b:d2:10:f9:32:61:5f:a6:68:d2:68:44:27:55:f0: 05:f0:7e:ab:f4:8e:a1:87:db:60:86:8e:8f:4f:25:2b:7c:5e: c6:82:1e:50:55:86:22:51:3c:31:bc:3b:f9:fb:6f:ce:3f:c3: f9:0f:1c:24:b5:17:a5:a7:67:c5:81:2d:e1:c5:ec:dd:bc:7b: ec:01:cf:5f:ca:9a:82:4f:98:d1:c8:11:00:e6:9a:04:c6:ca: cc:b9:93:cd:37:92:7b:c1:15:c9:dc:f2:79:49:33:29:1c:af: ac:7c:bd:d8:53:92:4c:74:41:53:49:9f:48:5b:c1:56:f3:0c: 68:aa:78:2f:95:bb:b7:a4:50:93:e2:94:22:12:c6:64:ef:b3: a4:01:27:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAM0+T05d6AezMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MDliODQ5NWItZWFhNC00NTEzLTk1Y2ItOTQwZDU2OWYyYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gMQoWLvjO8hvpgu84NWPbKi3xx+qI0F5ZPd 2kcfVASKk6p+hH0b8jCFCTmHxR1AsL+r1mUsOJ6XHKQ7n76iXvrqhx8UJQZ62six PA+8bPXOVoAUlwG0X45DT9g+jN4JersIHgH2pXc7XkmmAAyqXfj8y/ToLwiekFiO lPvlLyi3j+7lEoF8q4jNvXhNr5FHzqWS4pJ6dflbagaQwt230Cc0hTNyCIoaD1Dd 6JJET4GiykCEyg1b9LvPWnYRyylE96bO9JMglnwEIwXVZwMwixnA5SrGU7OsQJep Jq81NgyTaNzklvsqpUotsqHrQ0KsHGp27Kc44jBLV+biOihetwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl3Whwan5j+/WJdMCgm8f4HzD1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZGEyOGNmMDAtOGY4Yi0z OTUzLWE1MGItNDA2YWFjM2E0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz3uEEcadPu4Gn+WQpFnclb6fBVqsyy7PVOUki54P9pL/gXZev6uaee ONYb4I6Zu/lkKo9Jk2l7voSOF4ScUMfuv2JYO4GZebQtprxhnYo0hjh60A8GlnB6 VLKyT54a2pcOzquKheG4GWNEh35eTSvSEPkyYV+maNJoRCdV8AXwfqv0jqGH22CG jo9PJSt8XsaCHlBVhiJRPDG8O/n7b84/w/kPHCS1F6WnZ8WBLeHF7N28e+wBz1/K moJPmNHIEQDmmgTGysy5k803knvBFcnc8nlJMykcr6x8vdhTkkx0QVNJn0hbwVbz DGiqeC+Vu7ekUJPilCISxmTvs6QBJ68= -----END CERTIFICATE-----Generated at Mon Nov 25 16:26:32 2024 by rpki-client on console-ams.rpki-client.org