$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa File: 323c2fc7-9009-33ce-aa09-64b232426f68.roa (raw, json) Hash identifier: uWDCU+RDWHESSTbBoi/4iCFzD4sbaBoNAg+5i9DolVk= Subject key identifier: 58:E1:82:ED:4D:51:D9:5E:38:81:E8:CD:8E:47:C6:53:74:86:93:04 Certificate issuer: /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Certificate serial: 010D0C9F43285847ED24BCBDBC6A3CDE72895C60 Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 398999 IP address blocks: 172.98.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:bc:bd:bc:6a:3c:de:72:89:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=d4c16d70-f0cc-49c0-b153-b386e94e7a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:da:33:44:50:08:71:a4:3d:4c:9b:bc:6f: e8:c3:ae:5b:c2:a8:02:01:6c:a4:27:a2:46:66:f0: 56:3f:91:3f:89:8e:3a:0c:fe:82:b3:2e:b6:50:50: 91:4b:38:2b:0e:16:bd:5b:d7:45:c0:52:c7:fe:94: 14:76:51:8c:b0:7d:df:55:f4:f8:dd:19:8b:4c:b7: 31:85:99:ae:06:51:c0:b7:fd:69:f3:04:7e:72:61: fb:c7:e4:91:ec:a2:37:0b:21:0e:d8:63:3f:ac:2b: 51:1d:53:36:0f:d7:18:c7:c4:42:e0:00:45:97:1a: e8:bc:b5:9a:01:21:ea:26:85:17:f6:d4:56:cc:81: 21:22:07:16:b8:fb:f3:a4:0d:54:fe:65:c0:39:9c: 2a:9b:1e:9d:e9:8c:9d:68:74:63:3a:a7:a4:b6:5d: a5:86:dd:4a:fb:56:73:b3:8f:75:38:99:c8:db:9e: 42:d8:ef:54:5a:68:30:5c:4b:08:8b:d1:d6:e5:49: e4:8d:2a:85:2c:d1:97:16:fa:18:99:6f:af:c8:93: f5:86:3a:40:f1:4f:f4:f7:bb:f8:77:94:13:5c:64: f9:c9:be:2d:cc:02:12:3c:a9:2a:1e:24:bc:cc:b1: 26:1d:1c:91:1f:4f:7f:22:ae:e5:6c:a2:6b:ad:62: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:82:ED:4D:51:D9:5E:38:81:E8:CD:8E:47:C6:53:74:86:93:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl X509v3 Authority Key Identifier: keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer sbgp-ipAddrBlock: critical IPv4: 172.98.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:48:be:eb:43:c9:c9:10:e6:d9:8c:bc:59:ee:ed:c5:a3:cf: 12:6c:a9:a3:77:b8:46:ce:1d:3b:5d:d4:62:6d:e9:cf:87:5f: ed:18:26:6f:28:f5:a2:45:28:01:c7:1c:34:55:76:2a:b8:0a: 2a:84:37:6d:80:54:e1:53:96:63:4e:4d:e6:d6:98:0c:5c:57: a2:6c:96:89:7f:da:f0:fc:2a:ca:d7:8c:81:dc:75:3f:9e:d8: 2f:39:b2:75:2c:7a:cd:81:a7:ed:1c:37:4d:7e:c4:cc:4d:92: 0b:4e:c3:19:62:69:cc:25:ba:c9:bb:50:58:fd:d5:91:77:fa: 9c:f8:47:ad:36:ae:a3:72:e8:b5:dc:c0:10:7b:1e:8e:1e:dc: 9f:a2:be:ef:2b:f1:cc:93:65:bd:4c:b2:17:1d:cc:9a:5c:41: 3b:b3:be:85:4b:6e:cc:36:7a:0f:f4:3d:2a:41:fe:30:d5:b2: 9b:c5:65:d2:61:de:35:3b:76:2a:3f:bf:01:79:df:2e:bc:de: 8d:20:d8:7c:48:d9:69:37:d0:0e:e5:b9:48:2b:a0:da:09:9f: 9f:67:6c:39:20:9b:fd:48:af:85:d6:47:ee:c4:25:38:be:d2: 29:1d:71:e9:10:0d:2a:ea:32:aa:61:95:5f:16:48:c1:b5:3f: 65:b3:3d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLy9vGo83nKJXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj Nzc4MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZDRjMTZkNzAtZjBjYy00OWMwLWIxNTMtYjM4NmU5NGU3YTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eXaM0RQCHGkPUybvG/ow65bwqgCAWykJ6JG ZvBWP5E/iY46DP6Csy62UFCRSzgrDha9W9dFwFLH/pQUdlGMsH3fVfT43RmLTLcx hZmuBlHAt/1p8wR+cmH7x+SR7KI3CyEO2GM/rCtRHVM2D9cYx8RC4ABFlxrovLWa ASHqJoUX9tRWzIEhIgcWuPvzpA1U/mXAOZwqmx6d6YydaHRjOqektl2lht1K+1Zz s491OJnI255C2O9UWmgwXEsIi9HW5UnkjSqFLNGXFvoYmW+vyJP1hjpA8U/097v4 d5QTXGT5yb4tzAISPKkqHiS8zLEmHRyRH09/Iq7lbKJrrWK1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjhgu1NUdleOIHozY5HxlN0hpMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvMzIzYzJmYzctOTAwOS0z M2NlLWFhMDktNjRiMjMyNDI2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5 MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJIvutDyckQ5tmMvFnu7cWjzxJsqaN3uEbOHTtd1GJt6c+HX+0YJm8o 9aJFKAHHHDRVdiq4CiqEN22AVOFTlmNOTebWmAxcV6Jslol/2vD8KsrXjIHcdT+e 2C85snUses2Bp+0cN01+xMxNkgtOwxliacwlusm7UFj91ZF3+pz4R602rqNy6LXc wBB7Ho4e3J+ivu8r8cyTZb1MshcdzJpcQTuzvoVLbsw2eg/0PSpB/jDVspvFZdJh 3jU7dio/vwF53y683o0g2HxI2Wk30A7luUgroNoJn59nbDkgm/1Ir4XWR+7EJTi+ 0ikdcekQDSrqMqphlV8WSMG1P2WzPYU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org