$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: tFXA7K0foWKLYZUrx8i1z4vCyJsC58ow6qDWFNNnMVQ= Subject key identifier: 9F:96:46:0C:91:AC:CE:9F:BC:0C:9C:15:AC:36:62:F0:92:7D:1C:FE Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F43285847E094BB8B376DB337ABBBA938 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:bb:8b:37:6d:b3:37:ab:bb:a9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=03153140-efcd-4993-9134-50bf93585f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:39:f3:f5:cc:70:65:75:bb:cd:c5:27:60: d1:9a:40:ad:0f:a8:1a:0a:e6:cb:e3:ce:e7:51:df: 15:d0:d4:4a:34:71:a3:29:45:cc:0c:6c:30:0f:d5: e3:4c:1f:da:87:ba:8d:55:93:70:67:9f:cd:0d:81: 5f:c8:cf:1b:55:16:53:0e:7f:91:69:fe:ba:69:55: b6:2c:7e:8e:38:15:30:fc:d8:49:9b:be:49:a2:d6: 57:f0:38:31:11:1b:5b:a1:3b:5b:38:57:9c:6f:85: 56:19:15:29:15:57:00:76:3a:e1:2a:69:38:4b:a7: 10:71:34:11:a0:ea:8e:29:2c:22:f0:a3:bb:72:80: eb:5a:e1:a4:df:ea:40:d7:67:5e:42:36:51:94:58: 37:67:30:90:c1:6f:b6:cc:d6:cc:66:f2:80:93:f3: 39:9f:22:44:23:84:c5:b8:da:0c:dd:a9:f0:8b:32: ed:14:fc:f1:fc:12:02:d5:7f:c1:e1:00:8d:a5:f8: 2e:2a:bd:a3:f4:27:bc:7a:ab:f3:8e:39:01:89:01: b3:c1:6a:84:3b:cb:2a:76:38:cb:fb:15:89:a1:1d: 02:35:47:c2:5b:88:de:4d:87:cb:8e:1d:35:eb:da: 72:bd:6f:ed:89:18:ae:ff:23:39:94:91:34:73:01: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:96:46:0C:91:AC:CE:9F:BC:0C:9C:15:AC:36:62:F0:92:7D:1C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f1:f9:d2:e4:4e:3b:dd:c0:6a:ee:fc:d8:24:6c:25:86:28: 46:35:73:d8:b9:12:67:75:6d:67:29:5b:12:19:d5:ac:3b:0b: b0:2f:7d:53:62:2c:73:b9:5a:86:64:68:a8:88:7b:2a:30:2b: 3c:7a:da:93:6e:ec:62:d1:dc:ee:1b:c1:09:0e:96:27:b6:01: e5:be:24:51:0f:16:9c:ce:43:79:83:ea:70:72:75:24:98:34: c8:c4:70:94:88:93:7d:35:46:93:7f:ae:14:4d:24:b0:95:8d: 15:ad:fc:ce:f2:33:6a:25:b1:dd:40:a3:e3:76:c5:bf:83:ca: 90:02:dc:3e:78:77:49:92:02:9c:46:89:60:73:4c:c5:80:8a: e4:6b:94:81:d8:6a:95:c2:82:dc:1d:2a:9e:6e:43:b3:13:76: 05:0a:2c:4e:8b:c9:88:d8:0c:5d:04:55:f7:4f:c2:28:3a:a5: 72:c5:68:81:21:6f:87:30:41:77:a9:cb:07:3b:b4:85:9a:41: 01:98:94:17:15:11:e5:fd:74:85:1d:f6:9c:c5:03:d1:d4:d2: 82:6f:9d:2c:5e:49:7c:96:35:f5:66:dd:49:78:5b:3b:d6:1e: 9f:4e:e8:55:58:e0:17:c0:26:7d:b6:d2:af:24:2f:73:a4:75: 03:41:f5:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEfglLuLN22zN6u7qTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MDMxNTMxNDAtZWZjZC00OTkzLTkxMzQtNTBiZjkzNTg1ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWM58/XMcGV1u83FJ2DRmkCtD6gaCubL487n Ud8V0NRKNHGjKUXMDGwwD9XjTB/ah7qNVZNwZ5/NDYFfyM8bVRZTDn+Raf66aVW2 LH6OOBUw/NhJm75JotZX8DgxERtboTtbOFecb4VWGRUpFVcAdjrhKmk4S6cQcTQR oOqOKSwi8KO7coDrWuGk3+pA12deQjZRlFg3ZzCQwW+2zNbMZvKAk/M5nyJEI4TF uNoM3anwizLtFPzx/BIC1X/B4QCNpfguKr2j9Ce8eqvzjjkBiQGzwWqEO8sqdjjL +xWJoR0CNUfCW4jeTYfLjh0169pyvW/tiRiu/yM5lJE0cwGGfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ+WRgyRrM6fvAycFaw2YvCSfRz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCE8fnS5E473cBq7vzYJGwlhihGNXPYuRJn dW1nKVsSGdWsOwuwL31TYixzuVqGZGioiHsqMCs8etqTbuxi0dzuG8EJDpYntgHl viRRDxaczkN5g+pwcnUkmDTIxHCUiJN9NUaTf64UTSSwlY0VrfzO8jNqJbHdQKPj dsW/g8qQAtw+eHdJkgKcRolgc0zFgIrka5SB2GqVwoLcHSqebkOzE3YFCixOi8mI 2AxdBFX3T8IoOqVyxWiBIW+HMEF3qcsHO7SFmkEBmJQXFRHl/XSFHfacxQPR1NKC b50sXkl8ljX1Zt1JeFs71h6fTuhVWOAXwCZ9ttKvJC9zpHUDQfUH -----END CERTIFICATE-----Generated at Sun Nov 24 15:30:12 2024 by rpki-client on console-fra.rpki-client.org