$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa File: e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json) Hash identifier: 6COGkF+2McVpiivJ3CWjghbOZqWz81/6IddW2pKeZyc= Subject key identifier: 70:AC:CA:BB:BD:96:07:DC:15:A0:1A:F4:BB:46:76:88:14:37:88:B6 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858474B1B4C5FE8A64D73C9640D00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 394437 IP address blocks: 198.35.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:4c:5f:e8:a6:4d:73:c9:64:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=a6550a6c-1d90-46be-a7ea-2d9690256d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:36:96:7a:51:00:d2:64:6f:4b:5b:72:a9: d3:f6:93:d8:c8:3c:ff:0f:be:dc:69:b0:e7:bf:ac: da:68:16:8a:4a:31:0d:68:28:d5:d1:4e:e3:29:61: 9f:30:a8:d5:03:6a:76:ca:91:22:02:ef:06:4a:64: fa:74:1a:ca:ac:04:50:e9:04:b7:be:b4:90:02:fe: 23:00:d8:b7:9c:fa:c1:56:d9:6c:20:dd:53:76:ad: bd:ee:1b:ea:e3:58:6d:eb:6c:21:1a:36:94:cf:4c: ab:50:13:37:50:7d:41:7e:03:20:09:f4:9b:08:be: 05:0e:73:31:17:db:72:c3:c2:b8:de:46:a8:aa:d5: e4:99:eb:9d:a7:00:c8:31:dd:07:0e:24:e4:e3:9c: 75:81:16:08:78:41:0d:d3:c3:3a:8e:af:32:eb:b3: cc:7f:85:b0:bc:b8:78:79:6c:4a:b5:6c:f7:b1:97: ca:63:56:20:db:bc:98:99:ac:44:85:46:50:50:e5: b7:17:96:a7:48:e4:d1:22:7c:64:45:19:6b:10:64: 40:07:ef:04:af:92:68:0d:e0:fc:71:db:f0:c8:91: 6b:62:22:05:29:04:72:61:67:e6:0f:ec:1a:9c:92: 94:01:58:7c:b3:16:11:61:0c:f5:8e:b7:d7:e9:03: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:CA:BB:BD:96:07:DC:15:A0:1A:F4:BB:46:76:88:14:37:88:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 198.35.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5b:2b:42:1f:a2:87:8a:5b:db:c8:6b:37:d8:0b:b5:6e:95: ab:5b:df:3d:96:19:bb:db:b3:87:15:c2:83:8e:0c:36:a7:5a: 53:9a:e0:ae:85:6e:c1:88:86:b8:22:03:b1:e4:e4:93:a1:40: 8e:7c:13:6e:41:7e:26:ad:9c:7a:5c:aa:07:e4:78:42:ff:46: be:46:bc:44:ae:24:84:16:7d:07:1f:5b:64:18:31:58:90:07: 96:ac:37:8b:cf:f5:d7:32:db:cd:b9:be:bc:21:ff:6c:c2:7b: de:2b:ac:3b:c4:eb:c9:e7:67:a2:85:c9:fe:0e:9a:43:f1:09: 67:01:09:9a:9e:d9:32:45:72:b9:97:d5:f7:87:5a:0c:51:e2: 08:9a:e3:d6:69:60:46:9e:fe:56:89:46:01:ad:95:38:d7:dc: f9:70:a0:14:62:14:e5:83:03:2a:ea:8a:45:85:f3:10:aa:fa: 0a:1e:89:06:0e:4f:ed:d3:2d:f5:c5:ae:cf:ed:f9:2b:09:ab: 38:55:56:f5:2f:07:2d:08:d9:50:ea:f6:cf:49:d9:46:6f:64: 0c:7f:28:13:fd:2e:1c:e3:3b:91:13:d0:43:04:d0:fc:b4:e7: 7d:38:5c:a3:7d:5d:aa:a3:29:93:f4:71:a7:1c:2c:cf:ca:c5: 5d:cb:88:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG0xf6KZNc8lkDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk YTY1NTBhNmMtMWQ5MC00NmJlLWE3ZWEtMmQ5NjkwMjU2ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2w2lnpRANJkb0tbcqnT9pPYyDz/D77cabDn v6zaaBaKSjENaCjV0U7jKWGfMKjVA2p2ypEiAu8GSmT6dBrKrARQ6QS3vrSQAv4j ANi3nPrBVtlsIN1Tdq297hvq41ht62whGjaUz0yrUBM3UH1BfgMgCfSbCL4FDnMx F9tyw8K43kaoqtXkmeudpwDIMd0HDiTk45x1gRYIeEEN08M6jq8y67PMf4WwvLh4 eWxKtWz3sZfKY1Yg27yYmaxEhUZQUOW3F5anSOTRInxkRRlrEGRAB+8Er5JoDeD8 cdvwyJFrYiIFKQRyYWfmD+wanJKUAVh8sxYRYQz1jrfX6QPHZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCsyru9lgfcFaAa9LtGdogUN4i2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvZTVmODQ1MWUtZmU1My0z ZDliLTg1YjgtYTA0Yjc4NjI3MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNbK0IfooeKW9vIazfYC7Vulatb3z2WGbvbs4cVwoOODDanWlOa4K6F bsGIhrgiA7Hk5JOhQI58E25BfiatnHpcqgfkeEL/Rr5GvESuJIQWfQcfW2QYMViQ B5asN4vP9dcy2825vrwh/2zCe94rrDvE68nnZ6KFyf4OmkPxCWcBCZqe2TJFcrmX 1feHWgxR4gia49ZpYEae/laJRgGtlTjX3PlwoBRiFOWDAyrqikWF8xCq+goeiQYO T+3TLfXFrs/t+SsJqzhVVvUvBy0I2VDq9s9J2UZvZAx/KBP9LhzjO5ET0EME0Py0 5304XKN9XaqjKZP0caccLM/KxV3LiAA= -----END CERTIFICATE-----Generated at Sun Nov 24 16:06:20 2024 by rpki-client on console-ams.rpki-client.org