$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa File: 23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa (raw, json) Hash identifier: Ja0RvBrLrSJWmQlVJ6v7t8o1xtuZUaN0aduPNnodoQ4= Subject key identifier: 8C:B2:EE:9E:EB:CE:A3:80:36:21:86:4D:C2:2D:AA:83:C5:5E:53:99 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285847A0A6B605AA1A3BAECF1C2D80 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa Signing time: Tue 22 Oct 2024 16:25:11 +0000 ROA not before: Tue 22 Oct 2024 16:25:11 +0000 ROA not after: Mon 20 Jan 2025 17:25:11 +0000 asID: 55286 IP address blocks: 198.89.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:a6:b6:05:aa:1a:3b:ae:cf:1c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Oct 22 16:25:11 2024 GMT Not After : Jan 20 17:25:11 2025 GMT Subject: CN=68f9a0aa-2e13-4dd8-a3e7-7c1b492aacc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:b0:55:d0:d8:d5:72:bb:9a:f4:a6:08:70: 7f:2a:b4:ab:27:eb:23:41:66:49:68:82:9f:c1:a5: 47:df:81:48:3b:b8:a3:df:61:ba:a1:ca:ff:75:54: 3d:05:e4:3c:f5:7e:14:51:7a:0e:f7:83:d7:08:f7: 54:0e:11:96:95:10:4f:ae:f5:6f:62:f3:a2:c3:bc: 82:ac:39:a7:f0:c2:7e:35:0d:31:a4:da:ca:90:61: 6a:63:58:5d:5f:70:a7:0f:70:ce:66:ac:0b:0f:d3: b8:80:57:68:f7:2c:08:27:7a:5e:25:6b:5f:ee:35: c9:55:6b:02:4e:5f:54:bc:11:01:4d:f6:0d:f3:1a: a0:59:15:16:af:b7:8b:b3:02:03:c7:9f:93:74:b6: 48:12:d5:ad:5a:6b:a0:18:f9:8e:e4:c5:35:50:93: ba:67:34:56:80:55:4c:8d:6c:8f:0e:f5:f4:46:da: c4:83:4d:da:ff:b6:b6:31:19:87:8c:d8:7c:0d:25: be:09:ce:18:f0:f8:e2:6d:e7:7d:2e:7f:0e:59:ac: a3:e6:f7:c2:ca:6a:93:32:ec:a0:ac:09:58:6c:20: e4:01:11:71:e7:0f:f0:4e:73:c8:89:ff:ad:13:b6: 0b:08:ab:95:f4:cb:1f:4f:2e:f7:7a:75:7c:65:dc: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:EE:9E:EB:CE:A3:80:36:21:86:4D:C2:2D:AA:83:C5:5E:53:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f8:02:41:7e:ad:fe:40:cc:3b:b3:64:16:e3:36:c5:aa:b2: e9:3b:17:4a:fa:98:6c:23:1b:8e:c0:f2:31:8a:6c:ed:ae:03: f4:35:fa:a1:06:e1:cf:80:3f:25:19:89:89:c2:bb:58:b4:64: bc:7f:85:a8:67:88:1e:33:da:74:89:f1:0b:d2:69:f3:cf:02: f7:9a:fc:7f:87:ff:69:5e:f9:d2:80:f7:c7:62:ba:0c:bf:b5: af:58:d3:dc:ab:70:bd:23:39:4a:45:dc:53:c5:3d:55:60:ae: bc:bf:f0:72:a0:9f:5a:20:e6:54:2c:7b:9d:23:38:80:7b:14: ef:81:34:e1:f6:64:9a:db:5e:85:57:97:97:6e:3f:14:58:a7: 74:53:ac:bb:3d:40:c5:1e:6b:04:d1:3c:51:91:a7:b8:7d:8c: 91:d7:e7:a4:d8:4b:c4:5b:19:fb:6f:47:56:4a:14:3a:9d:4d: 15:6d:f5:39:dc:01:b8:b9:95:de:7b:16:83:94:36:15:b3:bb: 09:81:ad:d4:70:fa:e1:1f:c9:45:0c:1f:b9:b4:26:03:d0:75: aa:55:dd:6d:3c:78:ad:3f:f6:a5:4f:6f:dd:3e:10:83:51:6d: f0:5d:5d:4b:fc:e5:74:0b:e1:e9:fc:1f:20:d2:6a:8f:c1:aa: bc:a9:5d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegprYFqho7rs8cLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MTAyMjE2MjUxMVoXDTI1MDEyMDE3MjUxMVowLzEtMCsGA1UEAxMk NjhmOWEwYWEtMmUxMy00ZGQ4LWEzZTctN2MxYjQ5MmFhY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynCwVdDY1XK7mvSmCHB/KrSrJ+sjQWZJaIKf waVH34FIO7ij32G6ocr/dVQ9BeQ89X4UUXoO94PXCPdUDhGWlRBPrvVvYvOiw7yC rDmn8MJ+NQ0xpNrKkGFqY1hdX3CnD3DOZqwLD9O4gFdo9ywIJ3peJWtf7jXJVWsC Tl9UvBEBTfYN8xqgWRUWr7eLswIDx5+TdLZIEtWtWmugGPmO5MU1UJO6ZzRWgFVM jWyPDvX0RtrEg03a/7a2MRmHjNh8DSW+Cc4Y8Pjibed9Ln8OWayj5vfCymqTMuyg rAlYbCDkARFx5w/wTnPIif+tE7YLCKuV9MsfTy73enV8ZdwhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyy7p7rzqOANiGGTcItqoPFXlOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjNlMWI0MzItYjhkYi0z NWUzLWJiM2YtMTg4ZjVkYjc2Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxll8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD4AkF+rf5AzDuzZBbjNsWqsuk7F0r6mGwjG47A8jGKbO2uA/Q1+qEG 4c+APyUZiYnCu1i0ZLx/hahniB4z2nSJ8QvSafPPAvea/H+H/2le+dKA98diugy/ ta9Y09yrcL0jOUpF3FPFPVVgrry/8HKgn1og5lQse50jOIB7FO+BNOH2ZJrbXoVX l5duPxRYp3RTrLs9QMUeawTRPFGRp7h9jJHX56TYS8RbGftvR1ZKFDqdTRVt9Tnc Abi5ld57FoOUNhWzuwmBrdRw+uEfyUUMH7m0JgPQdapV3W08eK0/9qVPb90+EINR bfBdXUv85XQL4en8HyDSao/BqrypXUk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:26 2024 by rpki-client on console-fra.rpki-client.org