$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa File: 40adc3e1-1982-3811-9bd9-58e5849782e8.roa (raw, json) Hash identifier: arPHFB5nMy1usQd1phzGJ9HswDxgPgC0dEXn2I6R37w= Subject key identifier: 9C:2F:0A:E9:31:CE:65:7A:FB:45:49:FF:73:CD:8E:5D:2C:DE:5A:11 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285846B02A7031C50EAEA11B43C5DC Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa Signing time: Sun 28 Jul 2024 13:00:37 +0000 ROA not before: Sun 28 Jul 2024 13:00:37 +0000 ROA not after: Sat 26 Oct 2024 13:00:37 +0000 asID: 9009 IP address blocks: 198.145.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Sep 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b0:2a:70:31:c5:0e:ae:a1:1b:43:c5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jul 28 13:00:37 2024 GMT Not After : Oct 26 13:00:37 2024 GMT Subject: CN=5dbde02e-1dfc-409f-a058-5da52b61e249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4d:8b:d7:55:78:85:a3:76:34:02:35:1e:fd: 11:b8:fc:ef:46:65:68:5a:18:32:01:79:2b:11:df: 17:f1:a5:ac:bd:a7:e5:56:9d:1c:fb:c1:17:13:f6: ce:86:14:46:49:8b:69:6c:14:b9:33:7c:8e:98:14: b4:06:90:e1:10:61:3a:d5:56:d1:6a:d0:ab:bc:e1: de:73:82:1e:59:80:68:3e:5e:d2:5a:78:c8:66:1f: 30:78:a9:f9:bf:71:c6:e0:57:c8:84:6e:6d:0c:4f: c0:6d:a2:85:3c:d2:5c:f7:59:ad:7e:cf:7a:a5:02: 7d:5d:d7:07:ed:f6:84:3e:85:b5:db:f2:60:61:1b: ee:ee:55:9f:0e:98:08:ff:0c:21:23:2e:dd:51:b6: ef:4b:af:be:14:da:43:27:11:5d:20:5d:30:de:f8: 9d:a0:30:a0:01:4e:18:2a:d7:e0:40:d7:71:1c:98: 2c:50:19:22:7e:4e:52:da:7c:19:59:e9:d8:78:09: 95:f5:9c:91:01:42:a5:51:04:81:bf:89:13:c8:d8: bb:3c:62:d7:1b:a1:76:4d:a7:77:ca:f6:7c:e0:1d: f9:9f:12:03:cc:7b:65:9e:20:cb:eb:6f:2f:01:4f: 03:e5:01:d2:19:bb:be:e7:52:99:c3:a8:2e:7f:bb: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:0A:E9:31:CE:65:7A:FB:45:49:FF:73:CD:8E:5D:2C:DE:5A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:af:f3:05:b5:cd:02:fa:c6:81:98:95:f9:b8:c6:ac:62:01: b8:01:a3:37:f5:23:1a:5a:24:19:df:0e:11:7e:5f:b7:de:86: 56:5a:1f:0c:bb:20:77:23:42:fc:83:90:cf:aa:a8:c7:b0:c9: 76:84:e1:d4:04:cb:ba:13:b6:06:00:e9:c2:d2:3b:be:f6:95: 75:d8:7d:7a:b6:89:73:14:03:12:96:1a:45:7f:d8:a5:ba:06: 51:f1:d4:92:ae:fc:42:c0:bd:61:b2:75:8d:56:f0:b0:d2:ec: 6e:8e:21:65:3d:23:cb:c6:19:c1:07:5a:44:81:f0:24:55:07: 36:a1:bf:c8:a6:4b:3e:f9:bd:61:d8:0e:46:55:ea:db:30:6a: 59:42:ea:e3:b4:84:86:10:67:55:86:8f:27:40:c1:6a:f3:6b: ec:e2:b9:b8:4d:06:75:18:ed:23:01:75:03:84:00:b2:53:76: 09:b9:4e:02:c2:bf:a8:91:ee:d9:40:a4:e9:6c:50:5d:17:a2: f0:72:06:c0:81:3b:98:f9:3e:31:a9:9c:fc:80:fa:e1:40:7f: 45:a2:22:f5:5e:53:39:9f:f1:ae:72:b0:1e:6d:0c:28:95:99: e9:d5:7c:01:26:d9:8c:2d:73:f2:1f:52:1a:c1:95:94:88:e4: fb:17:b5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEawKnAxxQ6uoRtDxdwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDcyODEzMDAzN1oXDTI0MTAyNjEzMDAzN1owLzEtMCsGA1UEAxMk NWRiZGUwMmUtMWRmYy00MDlmLWEwNTgtNWRhNTJiNjFlMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk2L11V4haN2NAI1Hv0RuPzvRmVoWhgyAXkr Ed8X8aWsvaflVp0c+8EXE/bOhhRGSYtpbBS5M3yOmBS0BpDhEGE61VbRatCrvOHe c4IeWYBoPl7SWnjIZh8weKn5v3HG4FfIhG5tDE/AbaKFPNJc91mtfs96pQJ9XdcH 7faEPoW12/JgYRvu7lWfDpgI/wwhIy7dUbbvS6++FNpDJxFdIF0w3vidoDCgAU4Y KtfgQNdxHJgsUBkifk5S2nwZWenYeAmV9ZyRAUKlUQSBv4kTyNi7PGLXG6F2Tad3 yvZ84B35nxIDzHtlniDL628vAU8D5QHSGbu+51KZw6guf7uVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwvCukxzmV6+0VJ/3PNjl0s3loRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDBhZGMzZTEtMTk4Mi0z ODExLTliZDktNThlNTg0OTc4MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2v8wW1zQL6xoGYlfm4xqxiAbgBozf1IxpaJBnfDhF+X7fehlZaHwy7 IHcjQvyDkM+qqMewyXaE4dQEy7oTtgYA6cLSO772lXXYfXq2iXMUAxKWGkV/2KW6 BlHx1JKu/ELAvWGydY1W8LDS7G6OIWU9I8vGGcEHWkSB8CRVBzahv8imSz75vWHY DkZV6tswallC6uO0hIYQZ1WGjydAwWrza+ziubhNBnUY7SMBdQOEALJTdgm5TgLC v6iR7tlApOlsUF0XovByBsCBO5j5PjGpnPyA+uFAf0WiIvVeUzmf8a5ysB5tDCiV menVfAEm2Ywtc/IfUhrBlZSI5PsXtSQ= -----END CERTIFICATE-----Generated at Sat Sep 14 19:07:48 2024 by rpki-client on console-fra.rpki-client.org