$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: bSg4EShxxB3+g2iMbcbacErtiklzGFi1ofkW/KsdTgQ= Subject key identifier: 7C:08:C0:E8:FF:53:29:AF:E7:04:0B:20:03:A6:E7:A7:E1:05:4B:4D Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F432858474420B64AAA8BB7C537E6F840 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Thu 19 Sep 2024 13:00:42 +0000 ROA not before: Thu 19 Sep 2024 13:00:42 +0000 ROA not after: Wed 18 Dec 2024 14:00:42 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:20:b6:4a:aa:8b:b7:c5:37:e6:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Sep 19 13:00:42 2024 GMT Not After : Dec 18 14:00:42 2024 GMT Subject: CN=a154741a-33ff-4cd3-81b0-b2630cd4a275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:14:45:9a:3e:33:1b:8e:5e:86:bc:23:82: 56:92:a8:a2:fb:54:16:98:98:d0:47:7f:03:89:74: e9:3c:be:65:2d:de:cf:7b:6d:80:c8:d5:13:d5:35: 55:49:5a:c3:db:68:c2:be:4f:67:3a:87:90:41:f0: e2:9a:c8:54:f3:7e:3e:27:9c:d3:5a:0d:3f:17:93: 8a:23:36:68:64:00:7a:3f:3c:8b:02:0a:88:a1:a1: d6:20:62:2f:c4:16:c9:ce:9b:69:28:04:50:c2:8c: 26:f1:b8:d0:8b:45:a3:4d:31:f8:02:b3:75:da:27: ad:cd:0b:f7:c3:26:1b:05:e2:0c:2d:b6:5d:9d:84: b1:c1:84:52:41:a0:c7:97:1b:0b:c4:83:19:66:6f: 45:de:99:c9:15:81:ea:be:eb:4e:c0:fd:3f:ad:f1: 6d:76:c7:f0:0f:43:f0:9d:91:bc:eb:02:f7:7e:c6: 4c:44:87:81:1c:0a:34:ab:ba:05:1d:b6:c8:32:1d: dc:6c:e2:4d:70:b0:07:21:48:60:6f:99:ee:a6:53: 1c:44:d7:ad:08:75:6c:ee:d3:67:1b:8c:57:3c:98: 91:36:d7:a8:5c:44:85:a1:75:0c:56:a1:b0:d6:7f: 5d:2a:d0:b2:42:22:71:78:ca:57:03:fb:99:f4:23: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:C0:E8:FF:53:29:AF:E7:04:0B:20:03:A6:E7:A7:E1:05:4B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:24:84:76:1f:22:f9:d6:62:94:6a:ba:cb:98:5e:09:e4:2a: 90:c9:d9:ca:47:5a:99:31:7a:9a:12:0a:74:4b:e6:ce:84:71: e2:ae:70:31:5d:8b:58:d5:ed:1a:11:a4:35:66:f1:47:ea:b1: 95:07:65:f9:81:51:dd:ec:cf:a8:f7:b1:cb:32:fe:99:31:10: 38:dc:1d:95:80:bc:35:f1:f9:a1:3a:12:fe:4d:b9:6b:b2:f5: b5:46:bd:d1:eb:33:e1:40:ed:da:b9:9b:23:06:f2:d9:be:c1: 9e:c6:f0:57:cb:68:a9:20:ce:bd:54:83:62:22:da:7d:68:b2: bd:05:6c:9b:78:d9:26:03:94:cb:e5:85:c6:ec:1e:09:b7:b1: ff:66:60:9c:18:30:e4:c6:64:5c:ff:8a:50:38:b3:8b:6d:61: 9e:ed:bd:26:f5:18:27:3e:3a:c8:d7:bc:a3:6b:78:c8:23:7c: e8:e5:e6:bd:75:e6:8e:1a:bb:92:d3:88:1e:58:4a:7a:e2:c7: 93:48:d2:84:f5:d7:2d:67:07:24:c7:87:5b:0f:be:7a:e1:d2: 45:7a:98:fc:6c:61:bf:39:20:fc:cb:c7:de:7e:41:a4:72:62: 3e:6c:92:05:39:e5:83:c9:e4:ea:7c:c6:a7:f1:a9:bd:e5:08: c3:7b:cb:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEILZKqou3xTfm+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk YTE1NDc0MWEtMzNmZi00Y2QzLTgxYjAtYjI2MzBjZDRhMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVIURZo+MxuOXoa8I4JWkqii+1QWmJjQR38D iXTpPL5lLd7Pe22AyNUT1TVVSVrD22jCvk9nOoeQQfDimshU834+J5zTWg0/F5OK IzZoZAB6PzyLAgqIoaHWIGIvxBbJzptpKARQwowm8bjQi0WjTTH4ArN12ietzQv3 wyYbBeIMLbZdnYSxwYRSQaDHlxsLxIMZZm9F3pnJFYHqvutOwP0/rfFtdsfwD0Pw nZG86wL3fsZMRIeBHAo0q7oFHbbIMh3cbOJNcLAHIUhgb5nuplMcRNetCHVs7tNn G4xXPJiRNteoXESFoXUMVqGw1n9dKtCyQiJxeMpXA/uZ9CM1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwIwOj/Uymv5wQLIAOm56fhBUtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMkhHYfIvnWYpRqusuYXgnkKpDJ2cpHWpkxepoSCnRL5s6EceKucDFd i1jV7RoRpDVm8UfqsZUHZfmBUd3sz6j3scsy/pkxEDjcHZWAvDXx+aE6Ev5NuWuy 9bVGvdHrM+FA7dq5myMG8tm+wZ7G8FfLaKkgzr1Ug2Ii2n1osr0FbJt42SYDlMvl hcbsHgm3sf9mYJwYMOTGZFz/ilA4s4ttYZ7tvSb1GCc+OsjXvKNreMgjfOjl5r11 5o4au5LTiB5YSnrix5NI0oT11y1nByTHh1sPvnrh0kV6mPxsYb85IPzLx95+QaRy Yj5skgU55YPJ5Op8xqfxqb3lCMN7yyI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org