$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa File: 431e93dd-5d2f-3db1-9c2a-936ab1931179.roa (raw, json) Hash identifier: NtzVrc6OfvZvbGcSjIVgg8ba+BGudFVX/L6YjoY4zCU= Subject key identifier: 34:CB:DF:F2:71:A9:27:35:61:91:50:A2:85:AA:9F:69:CC:6A:6E:73 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F43285845AB234E976C801ABBC772AF80 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa Signing time: Fri 26 Apr 2024 01:00:25 +0000 ROA not before: Fri 26 Apr 2024 01:00:25 +0000 ROA not after: Thu 25 Jul 2024 01:00:25 +0000 asID: 394316 IP address blocks: 198.150.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ab:23:4e:97:6c:80:1a:bb:c7:72:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Apr 26 01:00:25 2024 GMT Not After : Jul 25 01:00:25 2024 GMT Subject: CN=107d5998-c429-422a-bde4-e57511565ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:29:bd:2c:57:3c:92:74:a8:cb:a5:60:bb: cd:b4:0c:21:75:94:40:28:0b:d5:64:83:23:bb:cc: 65:75:77:00:08:18:f7:30:68:91:fe:39:07:d4:1d: 86:98:67:46:5e:8f:01:c6:9f:ae:2c:75:05:10:58: 09:a4:6c:0f:2d:22:7f:a1:6b:88:d0:52:86:1f:f8: 31:a2:c0:44:19:91:4b:b7:f4:c9:b0:c7:55:c7:f6: 0c:87:38:b7:21:85:56:2d:73:41:b9:b1:55:4a:cd: e1:52:c2:f0:04:e1:d7:f1:dc:7a:cb:bb:de:8d:23: ef:c2:a8:c9:ab:10:e3:ad:d2:53:4e:f4:5a:e4:85: 69:95:3b:20:04:9b:0e:53:20:56:c5:dc:60:8e:16: 9a:bd:6d:25:39:38:20:71:d6:d9:12:66:00:f4:06: 4c:f9:f7:b1:81:0f:ae:1a:06:b7:68:fa:cc:85:05: 95:ef:eb:a0:b0:41:b4:94:6b:fa:11:1e:68:e5:2d: 86:03:75:61:9c:a8:2c:9c:b4:8f:f5:9d:c7:0c:60: 7a:c1:75:cb:b8:58:4f:ce:3c:4b:34:2e:73:50:25: 9a:f5:a8:e9:ca:84:0b:07:f9:41:13:75:3c:d4:f1: c4:bf:89:ed:ce:0c:85:50:03:aa:e1:85:6c:3b:1e: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:DF:F2:71:A9:27:35:61:91:50:A2:85:AA:9F:69:CC:6A:6E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4f:bd:ec:ec:b9:87:5b:52:e6:6a:dd:f2:ab:76:70:0c:9b: 2e:59:40:34:0d:9f:ad:bd:ac:be:d0:f2:75:23:a3:8e:21:2a: 71:56:a4:58:47:72:08:99:b1:cc:c3:85:d3:f7:d6:94:02:f6: d2:9f:36:ae:08:4f:aa:e8:c1:25:3a:f5:40:ff:21:83:dc:27: 44:5d:39:cd:d1:6f:2b:54:86:38:72:35:c3:b7:5d:ce:0a:4e: 4e:d2:35:f9:a3:21:84:e3:3c:69:46:fc:16:a8:03:fb:0a:b0: ef:a2:73:b2:69:83:56:9d:15:b3:1e:28:d5:89:34:4a:3c:9c: 58:05:b8:1f:44:0d:2d:d0:e6:a3:7d:a9:f3:be:31:7c:62:d6: c0:06:16:de:93:4d:41:f7:7c:4f:75:53:f4:aa:24:9f:a6:03: 5c:95:08:a3:ad:77:26:89:25:a8:b8:ab:77:a3:5d:d5:1b:93: 4e:9b:e6:7d:97:70:9e:01:74:dc:39:ba:bf:15:72:0f:51:08: a5:ae:3d:93:d7:30:28:4d:8c:9f:85:2e:89:64:47:b9:0e:c3: 4c:f5:4a:8b:05:6b:f3:b5:23:e1:e9:ba:32:52:5c:a2:66:3a: 9a:a6:d7:51:87:c4:54:59:89:58:35:92:7c:a4:8c:7b:de:29: e9:ec:a0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI06XbIAau8dyr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MTA3ZDU5OTgtYzQyOS00MjJhLWJkZTQtZTU3NTExNTY1YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UEpvSxXPJJ0qMulYLvNtAwhdZRAKAvVZIMj u8xldXcACBj3MGiR/jkH1B2GmGdGXo8Bxp+uLHUFEFgJpGwPLSJ/oWuI0FKGH/gx osBEGZFLt/TJsMdVx/YMhzi3IYVWLXNBubFVSs3hUsLwBOHX8dx6y7vejSPvwqjJ qxDjrdJTTvRa5IVplTsgBJsOUyBWxdxgjhaavW0lOTggcdbZEmYA9AZM+fexgQ+u Gga3aPrMhQWV7+ugsEG0lGv6ER5o5S2GA3VhnKgsnLSP9Z3HDGB6wXXLuFhPzjxL NC5zUCWa9ajpyoQLB/lBE3U81PHEv4ntzgyFUAOq4YVsOx45OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTL3/JxqSc1YZFQooWqn2nMam5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvNDMxZTkzZGQtNWQyZi0z ZGIxLTljMmEtOTM2YWIxOTMxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFPvezsuYdbUuZq3fKrdnAMmy5ZQDQNn629rL7Q8nUjo44hKnFWpFhH cgiZsczDhdP31pQC9tKfNq4IT6rowSU69UD/IYPcJ0RdOc3RbytUhjhyNcO3Xc4K Tk7SNfmjIYTjPGlG/BaoA/sKsO+ic7Jpg1adFbMeKNWJNEo8nFgFuB9EDS3Q5qN9 qfO+MXxi1sAGFt6TTUH3fE91U/SqJJ+mA1yVCKOtdyaJJai4q3ejXdUbk06b5n2X cJ4BdNw5ur8Vcg9RCKWuPZPXMChNjJ+FLolkR7kOw0z1SosFa/O1I+HpujJSXKJm Opqm11GHxFRZiVg1knykjHveKensoOY= -----END CERTIFICATE-----Generated at Wed May 22 01:47:05 2024 by rpki-client on console-ams.rpki-client.org