$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa File: 5b09870e-a712-3eab-8443-890377b3a362.roa (raw, json) Hash identifier: FoGDiBYFua5o4Bwc34CW8YG/YDLDKf1xNXUujB/H0A0= Subject key identifier: 3A:72:B7:DE:4A:5D:44:E4:C5:79:AF:78:A5:EE:D3:3F:D9:EA:8F:52 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858478F812522AD02EF6720A2A680 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 9009 IP address blocks: 198.145.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:25:22:ad:02:ef:67:20:a2:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=bcbe5629-a15a-475a-9b73-e8d68221fb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:78:fa:62:a3:1e:7a:cf:0b:04:6f:76:05: 82:ca:31:a0:6c:b2:f4:61:f6:55:77:e6:24:10:a8: b4:63:fd:09:50:60:7f:16:dd:96:ad:7c:d4:bc:9b: df:0e:82:dd:c8:ba:a5:3e:11:30:5d:92:97:df:59: d9:85:f7:8a:b4:79:f9:77:b5:a2:75:7a:34:b8:a1: de:10:6f:3b:99:98:e9:50:2f:88:0a:ba:f4:f6:68: be:4d:77:b6:77:55:eb:68:d9:8b:b5:f8:b1:4d:f8: e7:93:6b:95:19:c4:54:c5:d2:7e:38:82:d4:c4:72: 13:92:0d:68:92:4c:2a:87:86:60:94:8b:02:49:62: 41:d3:7b:94:41:cc:04:66:df:4b:86:fb:14:07:b8: 71:22:b5:7b:17:f6:cc:8c:47:8b:4c:dd:b0:1d:6e: 3c:22:92:ec:07:3a:e9:d3:c8:40:74:ba:ed:b4:ad: 54:aa:1f:9a:24:df:2d:9f:eb:a2:8e:08:5c:56:1f: 21:81:fc:39:da:c1:c9:d2:66:94:1e:b5:e0:ab:97: 88:a2:de:94:bb:7d:46:48:a6:dd:3f:28:23:e4:b9: a1:41:54:05:32:5a:a2:f4:37:73:b3:ba:f4:f4:74: ae:2c:e3:18:57:8c:43:c9:6c:82:a6:e0:6c:63:9c: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:72:B7:DE:4A:5D:44:E4:C5:79:AF:78:A5:EE:D3:3F:D9:EA:8F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:36:24:6e:a7:11:d2:18:01:16:5e:18:a6:b1:f3:2d:9d:bd: 77:91:0f:7e:1f:4a:06:c3:b8:22:dd:5c:e4:8a:25:1d:3e:53: 1b:b0:30:6e:9f:63:1d:d2:2a:8f:64:f8:89:df:27:5f:fd:28: c2:cf:a8:2e:85:4e:1f:44:5b:87:f3:d4:7e:19:a7:2f:90:d5: ca:69:54:18:ee:a1:3b:15:91:95:2c:f8:d9:d0:8e:ce:09:bd: 9d:69:ba:79:a8:9a:4d:26:4a:51:a9:55:54:fb:0c:a3:ee:fe: ab:13:df:3c:68:82:b0:20:1d:04:32:1f:ef:ef:0d:c8:70:84: 8d:da:31:9b:db:fa:1b:b1:c3:aa:f5:3a:67:7c:1f:05:00:dc: 36:0d:f5:da:e1:3f:e0:98:81:36:e4:9e:8a:8c:15:19:58:3e: d1:e4:dd:56:49:74:a1:cb:b9:20:37:e8:95:54:8c:ba:6f:df: 47:ad:74:5f:91:0a:c0:63:ee:8e:ce:63:3d:0b:8a:47:91:a5: 9b:85:b3:14:01:2a:5e:a2:5b:ce:71:f5:aa:9b:b7:c6:94:c5: 75:d4:8a:dd:27:72:2c:d3:6e:a7:05:31:dd:d2:22:a3:0b:6b: b7:32:16:59:55:d8:54:0a:44:78:1b:fb:69:10:5b:67:06:5c: fa:bc:44:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgSUirQLvZyCipoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk YmNiZTU2MjktYTE1YS00NzVhLTliNzMtZThkNjgyMjFmYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY14+mKjHnrPCwRvdgWCyjGgbLL0YfZVd+Yk EKi0Y/0JUGB/Ft2WrXzUvJvfDoLdyLqlPhEwXZKX31nZhfeKtHn5d7WidXo0uKHe EG87mZjpUC+ICrr09mi+TXe2d1XraNmLtfixTfjnk2uVGcRUxdJ+OILUxHITkg1o kkwqh4ZglIsCSWJB03uUQcwEZt9LhvsUB7hxIrV7F/bMjEeLTN2wHW48IpLsBzrp 08hAdLrttK1Uqh+aJN8tn+uijghcVh8hgfw52sHJ0maUHrXgq5eIot6Uu31GSKbd Pygj5LmhQVQFMlqi9Ddzs7r09HSuLOMYV4xDyWyCpuBsY5zUUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpyt95KXUTkxXmveKXu0z/Z6o9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWIwOTg3MGUtYTcxMi0z ZWFiLTg0NDMtODkwMzc3YjNhMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA2JG6nEdIYARZeGKax8y2dvXeRD34fSgbDuCLdXOSKJR0+UxuwMG6f Yx3SKo9k+InfJ1/9KMLPqC6FTh9EW4fz1H4Zpy+Q1cppVBjuoTsVkZUs+NnQjs4J vZ1punmomk0mSlGpVVT7DKPu/qsT3zxogrAgHQQyH+/vDchwhI3aMZvb+huxw6r1 Omd8HwUA3DYN9drhP+CYgTbknoqMFRlYPtHk3VZJdKHLuSA36JVUjLpv30etdF+R CsBj7o7OYz0LikeRpZuFsxQBKl6iW85x9aqbt8aUxXXUit0ncizTbqcFMd3SIqML a7cyFllV2FQKRHgb+2kQW2cGXPq8REQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org