$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa File: 431e93dd-5d2f-3db1-9c2a-936ab1931179.roa (raw, json) Hash identifier: sNA55ieJuon2CskQHsvmNYaEb7F3UV4yYa0xbgf6NIo= Subject key identifier: 67:D5:EA:BA:55:BC:5D:0E:61:9F:FA:8F:E9:A6:71:F3:E1:E3:7C:79 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F432858476B3646BD421CBFDC0E9222E0 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 394316 IP address blocks: 198.150.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:46:bd:42:1c:bf:dc:0e:92:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=3c4d2ddf-9c25-4a9e-8cb7-e2a8090f0a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:22:67:ad:97:38:86:80:4a:88:cf:92:44: 03:2c:dd:b4:92:30:67:7c:7b:6e:ca:d3:9b:7d:1e: 90:f0:6b:91:15:15:d3:e3:7e:dc:3f:da:68:6a:68: 11:b4:02:66:ed:6b:fc:20:42:c5:b1:9f:64:e4:29: e7:f1:1b:eb:f7:a2:82:9a:d0:60:04:3d:a0:d5:d4: 81:1d:2b:c9:79:81:39:b1:2a:ec:ec:a5:bf:06:d6: 57:03:97:bc:ef:c5:b3:40:b5:8e:10:1e:88:0a:dc: 63:d1:c3:a1:9c:01:2f:52:4e:42:3c:b3:21:a6:fe: 7e:e4:94:24:ed:25:29:cd:53:89:b0:a0:16:3d:15: 57:6b:2e:89:87:10:20:00:d4:3d:f3:84:03:42:cd: d0:ba:40:b3:33:0a:3f:87:34:5e:be:47:69:b6:ed: 56:4a:c3:74:79:19:9d:fa:9c:1d:61:d9:1b:34:1a: 22:ed:f1:10:3d:ca:bc:93:44:ae:7d:01:a9:ff:34: 35:d6:75:14:a6:50:f7:ba:36:8e:f8:66:62:84:8e: 93:28:7e:7c:08:16:a6:a7:1c:c3:8f:c6:a1:06:f0: be:38:3b:65:9a:64:a2:1c:73:77:1e:ef:95:1f:16: a1:d6:a1:fa:03:72:74:60:91:6a:6e:0d:ca:0f:f2: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D5:EA:BA:55:BC:5D:0E:61:9F:FA:8F:E9:A6:71:F3:E1:E3:7C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d2:13:b4:03:57:60:20:cc:00:5b:eb:32:c6:7c:b0:c6:73: b1:03:39:83:ed:bc:8e:56:ef:c6:23:08:20:21:4d:23:82:c0: 0b:b9:5d:13:85:e9:ad:74:88:d7:3a:ec:9f:93:c9:fd:fb:7c: bc:33:8f:a9:98:69:d2:4c:6f:a7:64:a2:7b:a3:9f:03:e3:7e: 04:07:76:da:e9:3d:4f:9c:69:6b:7c:9d:3c:6b:7d:f9:3a:e6: 41:56:6d:02:ba:5d:17:0a:76:ba:cb:e9:89:6c:cb:69:c8:cf: f1:1e:21:3b:ab:2e:5c:a4:15:ae:a3:6e:82:25:a1:3b:44:03: 89:aa:21:11:45:22:4c:97:f4:f1:7c:62:af:cc:dd:8e:1b:56: 47:8f:4d:73:96:69:c4:3e:23:52:f3:70:e9:41:60:25:71:ae: a4:76:2a:13:e5:bd:f1:55:7b:05:6a:3f:cc:66:ab:24:3a:dc: 83:71:e9:6b:96:0f:25:db:bd:36:ae:83:22:83:a1:00:15:b6: a0:41:54:cb:3e:f0:01:50:8f:54:28:ee:51:64:14:12:f5:b8: 9e:3c:9a:80:dc:06:d1:ba:83:03:2c:56:71:2c:a9:84:fa:21: ec:47:8a:13:b2:3b:9d:39:81:d5:60:1d:1e:73:ab:73:f7:e7: b8:d8:6f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNka9Qhy/3A6SIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk M2M0ZDJkZGYtOWMyNS00YTllLThjYjctZTJhODA5MGYwYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37IiZ62XOIaASojPkkQDLN20kjBnfHtuytOb fR6Q8GuRFRXT437cP9poamgRtAJm7Wv8IELFsZ9k5Cnn8Rvr96KCmtBgBD2g1dSB HSvJeYE5sSrs7KW/BtZXA5e878WzQLWOEB6ICtxj0cOhnAEvUk5CPLMhpv5+5JQk 7SUpzVOJsKAWPRVXay6JhxAgANQ984QDQs3QukCzMwo/hzRevkdptu1WSsN0eRmd +pwdYdkbNBoi7fEQPcq8k0SufQGp/zQ11nUUplD3ujaO+GZihI6TKH58CBampxzD j8ahBvC+ODtlmmSiHHN3Hu+VHxah1qH6A3J0YJFqbg3KD/LKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfV6rpVvF0OYZ/6j+mmcfPh43x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvNDMxZTkzZGQtNWQyZi0z ZGIxLTljMmEtOTM2YWIxOTMxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7SE7QDV2AgzABb6zLGfLDGc7EDOYPtvI5W78YjCCAhTSOCwAu5XROF 6a10iNc67J+Tyf37fLwzj6mYadJMb6dkonujnwPjfgQHdtrpPU+caWt8nTxrffk6 5kFWbQK6XRcKdrrL6Ylsy2nIz/EeITurLlykFa6jboIloTtEA4mqIRFFIkyX9PF8 Yq/M3Y4bVkePTXOWacQ+I1LzcOlBYCVxrqR2KhPlvfFVewVqP8xmqyQ63INx6WuW DyXbvTaugyKDoQAVtqBBVMs+8AFQj1Qo7lFkFBL1uJ48moDcBtG6gwMsVnEsqYT6 IexHihOyO505gdVgHR5zq3P357jYb2o= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org