$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa File: 40adc3e1-1982-3811-9bd9-58e5849782e8.roa (raw, json) Hash identifier: Kq4sZNxPnP9x6AVBANmjVuF825PMa650xdTS6+amN1c= Subject key identifier: 8C:6F:11:6D:1F:5D:E3:B6:95:47:76:01:9F:09:33:EA:56:6E:4D:83 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858478F812507094DED732B341280 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 9009 IP address blocks: 198.145.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:25:07:09:4d:ed:73:2b:34:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=8e6692a5-453c-497d-995e-23dceeed2653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:46:4c:f5:a7:e3:a2:f8:8e:0d:81:33:e2: b9:a0:02:63:ca:75:ce:43:7a:e5:c2:a2:5c:87:6c: c2:4a:ab:8b:c7:1f:a9:3b:d8:40:b6:3c:be:0c:35: 9b:4d:69:69:1d:6d:7a:90:74:19:bb:6a:27:1e:33: 11:0b:ae:75:ee:5b:2b:88:55:6b:30:2c:42:45:d2: 46:84:ae:e4:d7:85:c9:c3:e3:06:50:6a:6f:3a:03: c9:b5:7d:03:d1:c9:60:98:40:1d:f8:4f:21:4e:1b: a4:f5:5e:37:ff:83:88:9c:dd:15:46:c4:1a:55:74: 13:02:54:af:bd:ce:a6:e7:88:d4:b2:f7:2c:cd:81: 2e:a5:40:2b:aa:ef:7a:96:f7:bf:ae:17:74:e5:a0: 3e:5b:a9:f4:27:00:72:b4:34:7b:f3:47:d4:7f:bb: 9f:9d:ba:b6:6c:4a:6e:66:ab:b5:f4:a5:82:e0:26: 1b:ed:eb:4e:87:d1:6c:f2:d7:95:4a:fa:85:2a:6a: 94:eb:0a:19:15:1d:83:0e:ea:d0:0d:bc:1d:65:82: 29:54:d4:3a:31:94:12:33:46:24:6c:3b:67:c4:1c: f3:37:68:64:18:8a:26:2c:4f:53:d2:f2:a4:a8:c8: 68:d4:a0:58:7a:76:3e:fa:f8:aa:28:65:3c:d5:19: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6F:11:6D:1F:5D:E3:B6:95:47:76:01:9F:09:33:EA:56:6E:4D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:c4:1b:9d:b5:45:1e:83:db:b4:69:2a:8a:6c:b5:37:21:11: 0c:1c:de:ec:91:95:f8:f1:33:12:f3:68:a0:bf:98:63:f0:60: af:27:50:66:5c:cd:23:30:bb:88:fe:7f:71:f6:b3:9c:14:01: da:44:94:b1:e0:f9:7d:22:c5:8f:ea:cc:c9:41:c5:bc:e7:c4: b2:8c:93:01:ae:f6:89:16:87:1f:38:a0:45:20:9d:01:46:ec: 09:64:96:01:e0:5d:ee:54:f2:2c:cb:0a:27:0d:01:24:fb:b3: 5d:d4:84:84:7b:d3:40:15:e9:ce:7d:4f:bb:78:d5:47:96:15: 1b:d0:d9:ca:0d:dd:b7:64:2c:99:1f:c0:6d:7d:8b:52:b9:e9: 58:9f:9f:8e:63:b7:6f:27:b1:07:da:86:80:06:1c:f9:23:5d: 89:0c:b6:62:61:9f:4b:20:2e:7e:ba:be:4d:d0:f1:96:a5:f3: cb:22:85:55:5e:0b:4f:ed:bb:ca:72:7a:f5:fd:fd:a4:6b:7a: e9:63:a0:ad:78:0d:de:ab:ce:d5:bb:1d:6c:86:b6:51:6b:95: 43:42:4a:46:73:27:ab:6a:ad:28:eb:0c:8b:1a:d3:eb:aa:24: 64:10:ba:e8:9b:c8:ae:a5:f1:ca:b9:02:c0:8d:68:1a:ef:d7: 68:2a:12:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgSUHCU3tcys0EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk OGU2NjkyYTUtNDUzYy00OTdkLTk5NWUtMjNkY2VlZWQyNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrxGTPWn46L4jg2BM+K5oAJjynXOQ3rlwqJc h2zCSquLxx+pO9hAtjy+DDWbTWlpHW16kHQZu2onHjMRC6517lsriFVrMCxCRdJG hK7k14XJw+MGUGpvOgPJtX0D0clgmEAd+E8hThuk9V43/4OInN0VRsQaVXQTAlSv vc6m54jUsvcszYEupUArqu96lve/rhd05aA+W6n0JwBytDR780fUf7ufnbq2bEpu Zqu19KWC4CYb7etOh9Fs8teVSvqFKmqU6woZFR2DDurQDbwdZYIpVNQ6MZQSM0Yk bDtnxBzzN2hkGIomLE9T0vKkqMho1KBYenY++viqKGU81RkQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxvEW0fXeO2lUd2AZ8JM+pWbk2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDBhZGMzZTEtMTk4Mi0z ODExLTliZDktNThlNTg0OTc4MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLEG521RR6D27RpKopstTchEQwc3uyRlfjxMxLzaKC/mGPwYK8nUGZc zSMwu4j+f3H2s5wUAdpElLHg+X0ixY/qzMlBxbznxLKMkwGu9okWhx84oEUgnQFG 7AlklgHgXe5U8izLCicNAST7s13UhIR700AV6c59T7t41UeWFRvQ2coN3bdkLJkf wG19i1K56Vifn45jt28nsQfahoAGHPkjXYkMtmJhn0sgLn66vk3Q8Zal88sihVVe C0/tu8pyevX9/aRreuljoK14Dd6rztW7HWyGtlFrlUNCSkZzJ6tqrSjrDIsa0+uq JGQQuuibyK6l8cq5AsCNaBrv12gqEuE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org