$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3d7ee82c-20a7-32cd-a54b-9aa7a8e25b08.roa File: 3d7ee82c-20a7-32cd-a54b-9aa7a8e25b08.roa (raw, json) Hash identifier: yMKMpm37FYxejEQRwUr5zZcO0BqZVbQWuniqlNju/6c= Subject key identifier: 5B:9D:A5:EB:05:5D:D2:E6:9C:E3:E2:88:2C:CC:7B:23:E2:6B:17:49 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F432858476B3641EBF88B78D2E95E509C Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3d7ee82c-20a7-32cd-a54b-9aa7a8e25b08.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 395963 IP address blocks: 198.150.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:41:eb:f8:8b:78:d2:e9:5e:50:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=a3c4d489-e471-4d87-a26a-fe4c73872cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:1f:a3:39:74:53:6d:7f:fc:67:cf:d7:9a: 69:be:e0:ee:de:34:d0:8d:c8:27:0b:f4:6a:50:56: 1f:34:b7:35:b4:ce:6a:20:74:8d:25:36:7b:db:3b: 9b:2d:49:8c:76:c3:66:19:72:99:12:9a:a2:60:80: 79:62:b9:d3:ea:6b:7d:cc:4f:1d:ab:55:47:3b:19: f4:ae:86:83:76:d4:f8:26:1b:65:5c:27:c0:40:a3: 1d:6e:f5:3c:23:18:d9:e6:44:b1:84:74:b7:d3:d9: 01:47:8d:24:06:4f:0b:c5:cd:f7:45:fe:dd:86:36: 74:ad:56:c3:0e:84:de:46:6b:22:5d:f0:a8:1e:f7: 2d:b8:7e:65:a8:63:60:2f:be:48:20:01:4c:fd:2f: 92:94:5b:8e:d0:2c:6a:01:09:30:28:fe:fa:c8:51: c2:f9:1d:5d:3b:46:52:66:9e:60:6c:aa:67:f4:9c: 34:cb:85:7d:b6:1c:75:48:da:6f:a1:8d:5d:d7:9b: 40:16:ad:46:e6:ee:37:fc:a8:5f:cc:4a:24:d0:74: 1c:67:8d:ab:62:82:2c:cb:55:23:00:29:a5:88:90: 9b:84:4f:4b:2b:6c:61:7a:aa:20:5d:41:ff:49:0d: 8d:e0:2d:da:09:fb:27:5d:d3:25:fd:5f:59:5b:c1: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:A5:EB:05:5D:D2:E6:9C:E3:E2:88:2C:CC:7B:23:E2:6B:17:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3d7ee82c-20a7-32cd-a54b-9aa7a8e25b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5b:e6:b7:c7:a5:b6:74:c1:9e:27:99:b0:60:10:40:61:6c: 47:86:4a:72:4b:7c:36:9e:3b:75:51:7c:ee:16:d1:00:af:61: cd:d3:89:dd:30:b3:7a:40:a3:cd:b2:7f:89:b8:df:72:f7:61: 04:06:16:3c:9a:32:1a:81:64:93:c2:c7:45:af:5e:06:7f:ff: 73:a2:09:08:9d:ea:52:7b:da:38:04:a8:77:0c:51:b7:80:49: f2:ff:72:d0:97:cc:3c:22:dc:ea:5b:02:fc:b5:dd:e8:4a:87: e5:34:a0:41:57:25:ad:42:4e:f9:e1:04:0a:57:a7:83:d1:4f: ea:9b:e3:5f:d4:c8:95:9c:c4:5d:80:db:d5:04:a5:98:50:32: f7:94:6e:11:8b:6a:82:13:f7:d2:34:ae:23:23:0c:20:c0:88: e9:36:b1:0c:fc:b4:80:01:1b:34:25:87:34:62:9f:e5:b3:16: cf:82:ff:ce:7a:96:a1:4c:e2:50:92:a5:02:3a:2f:7e:8e:52: 17:18:2b:7e:c4:bc:27:a7:09:c6:15:16:29:bd:61:8d:d9:c9: f1:24:98:1e:3d:ab:a5:44:86:42:79:fb:f8:2d:3c:bb:0b:35: 0c:a5:ed:72:36:fa:32:44:e0:bd:f1:f3:fb:53:d7:2d:51:5e: 2b:bb:28:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNkHr+It40uleUJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk YTNjNGQ0ODktZTQ3MS00ZDg3LWEyNmEtZmU0YzczODcyY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo0fozl0U21//GfP15ppvuDu3jTQjcgnC/Rq UFYfNLc1tM5qIHSNJTZ72zubLUmMdsNmGXKZEpqiYIB5YrnT6mt9zE8dq1VHOxn0 roaDdtT4JhtlXCfAQKMdbvU8IxjZ5kSxhHS309kBR40kBk8Lxc33Rf7dhjZ0rVbD DoTeRmsiXfCoHvctuH5lqGNgL75IIAFM/S+SlFuO0CxqAQkwKP76yFHC+R1dO0ZS Zp5gbKpn9Jw0y4V9thx1SNpvoY1d15tAFq1G5u43/KhfzEok0HQcZ42rYoIsy1Uj ACmliJCbhE9LK2xheqogXUH/SQ2N4C3aCfsnXdMl/V9ZW8EjPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFudpesFXdLmnOPiiCzMeyPiaxdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvM2Q3ZWU4MmMtMjBhNy0z MmNkLWE1NGItOWFhN2E4ZTI1YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJb5rfHpbZ0wZ4nmbBgEEBhbEeGSnJLfDaeO3VRfO4W0QCvYc3Tid0w s3pAo82yf4m433L3YQQGFjyaMhqBZJPCx0WvXgZ//3OiCQid6lJ72jgEqHcMUbeA SfL/ctCXzDwi3OpbAvy13ehKh+U0oEFXJa1CTvnhBApXp4PRT+qb41/UyJWcxF2A 29UEpZhQMveUbhGLaoIT99I0riMjDCDAiOk2sQz8tIABGzQlhzRin+WzFs+C/856 lqFM4lCSpQI6L36OUhcYK37EvCenCcYVFim9YY3ZyfEkmB49q6VEhkJ5+/gtPLsL NQyl7XI2+jJE4L3x8/tT1y1RXiu7KLI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org