$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa File: 4958a300-389c-3447-9137-eb63e47ab7a1.roa (raw, json) Hash identifier: JU63KToM9YG3kjAr5wEUxnT/OllsC2S/PbAsfeikOTo= Subject key identifier: 8D:29:21:F8:FD:73:1D:0D:06:DE:D8:14:A0:8C:AA:78:5D:E0:65:2A Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858477EC108D6CF010E931E6CF160 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 262287 IP address blocks: 198.145.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:08:d6:cf:01:0e:93:1e:6c:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=b6cf0ff7-5726-4aa5-8718-bd39c0601da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3f:24:a8:3c:b0:82:7f:60:95:3c:f7:34:37: 08:b6:0b:1b:e0:cd:58:61:a0:1c:f3:1e:ae:26:e5: 98:66:3b:2f:b0:da:ac:70:e9:3d:e9:34:47:aa:5f: 3e:4f:8d:c0:cc:1d:54:cc:f3:1c:55:2f:c7:eb:95: e8:f8:9e:ab:4a:34:a1:d3:b9:73:77:6a:9f:c3:b2: c2:e8:cc:cb:e2:fd:ff:fb:1b:2a:cb:6d:ef:3a:ca: 04:d4:da:9c:47:a1:c5:e3:a3:bc:9b:b3:b9:a2:17: 1f:bd:23:00:b7:6c:40:d0:c1:70:fa:fd:5f:23:6b: a8:c3:2c:c8:54:5d:96:33:9b:e3:9a:e0:16:76:07: e5:90:60:55:06:b7:01:99:26:72:2d:59:98:5c:a2: 88:bf:6d:5b:b0:7d:0b:80:6c:78:6a:62:cc:c8:bc: 40:5c:88:1a:ca:2e:ec:c0:b8:f5:70:df:0a:1b:50: 7f:57:cb:09:17:df:0a:0d:f9:de:39:b3:88:9f:5a: b9:54:78:71:4d:bc:2e:35:87:5f:81:83:77:f2:cb: 9d:14:b8:c1:be:74:a6:42:b1:5d:41:b6:7b:99:11: b7:22:24:b8:01:7b:da:3f:e9:13:7c:ef:dd:79:79: 66:62:f2:bf:e7:2f:2f:12:75:1d:4d:7c:f3:e3:a5: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:21:F8:FD:73:1D:0D:06:DE:D8:14:A0:8C:AA:78:5D:E0:65:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f0:b6:d3:d4:bc:ee:32:08:a0:b8:e4:69:2c:c7:d3:d1:20: e4:77:6b:6a:f6:b8:4a:85:ff:50:32:4c:89:35:8c:36:bd:f0: 40:da:c5:8e:75:04:23:b4:f7:26:f0:55:05:ec:95:34:98:66: d7:ef:dc:1b:fe:52:90:b0:5f:0d:65:c6:ef:bc:2b:2c:2f:bc: 99:9c:fc:f5:b8:74:f1:df:c7:f6:80:f3:c0:9c:a6:07:6f:be: 03:3b:44:bd:4c:da:01:7c:35:56:4f:05:bc:5a:0b:fa:5a:40: fb:73:3a:51:f9:c7:8d:2e:0c:89:36:85:ea:bc:c5:49:de:b0: 71:6c:d7:b6:f6:8a:15:bd:fb:b8:82:f8:82:68:99:42:7d:b1: dd:17:5f:35:75:01:a2:09:87:b4:95:b5:56:6e:70:1a:92:2e: 8c:b5:5c:94:b5:65:41:7c:32:d1:0b:43:11:9b:9b:36:c0:9a: bf:4f:73:02:be:12:b9:cb:f4:89:cb:e2:12:a8:05:fd:1e:1a: 4b:3a:02:7f:94:bc:0d:24:bb:49:6e:da:8b:90:5e:f0:33:54: 6f:31:de:6a:53:93:5f:1e:c5:0f:e3:9b:3d:4d:f1:26:3d:e0: 1c:11:9d:a8:00:5f:d6:bf:9f:1c:5a:94:9a:ea:f9:3f:a0:0f: 3c:13:49:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQjWzwEOkx5s8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk YjZjZjBmZjctNTcyNi00YWE1LTg3MTgtYmQzOWMwNjAxZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j8kqDywgn9glTz3NDcItgsb4M1YYaAc8x6u JuWYZjsvsNqscOk96TRHql8+T43AzB1UzPMcVS/H65Xo+J6rSjSh07lzd2qfw7LC 6MzL4v3/+xsqy23vOsoE1NqcR6HF46O8m7O5ohcfvSMAt2xA0MFw+v1fI2uowyzI VF2WM5vjmuAWdgflkGBVBrcBmSZyLVmYXKKIv21bsH0LgGx4amLMyLxAXIgayi7s wLj1cN8KG1B/V8sJF98KDfneObOIn1q5VHhxTbwuNYdfgYN38sudFLjBvnSmQrFd QbZ7mRG3IiS4AXvaP+kTfO/deXlmYvK/5y8vEnUdTXzz46XfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0pIfj9cx0NBt7YFKCMqnhd4GUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDk1OGEzMDAtMzg5Yy0z NDQ3LTkxMzctZWI2M2U0N2FiN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7wttPUvO4yCKC45Gksx9PRIOR3a2r2uEqF/1AyTIk1jDa98EDaxY51 BCO09ybwVQXslTSYZtfv3Bv+UpCwXw1lxu+8KywvvJmc/PW4dPHfx/aA88Ccpgdv vgM7RL1M2gF8NVZPBbxaC/paQPtzOlH5x40uDIk2heq8xUnesHFs17b2ihW9+7iC +IJomUJ9sd0XXzV1AaIJh7SVtVZucBqSLoy1XJS1ZUF8MtELQxGbmzbAmr9PcwK+ ErnL9InL4hKoBf0eGks6An+UvA0ku0lu2ouQXvAzVG8x3mpTk18exQ/jmz1N8SY9 4BwRnagAX9a/nxxalJrq+T+gDzwTScY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org