$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa File: 5dda545f-1238-3606-89ac-8ceb51f8226f.roa (raw, json) Hash identifier: plZavCYy4M/95KNjWcUWNZE4ZgML5ijd0Y7hVxrUBOc= Subject key identifier: 71:8A:76:35:2E:C2:BA:29:3E:B4:5E:9C:28:18:4A:44:0C:A3:FA:1B Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584784567204A1F03950A02DA0C0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 1239 IP address blocks: 198.145.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:72:04:a1:f0:39:50:a0:2d:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=a9d23da8-e5bf-4da4-a316-e5af3babc9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:8f:4c:f4:77:c4:7c:4b:3f:c6:88:ab:2c: 44:be:83:e4:39:89:7b:d8:68:89:33:8e:b6:53:ba: 7c:5f:16:b7:ce:79:95:15:56:36:78:c5:70:90:a9: eb:c8:39:80:19:99:01:34:8e:76:70:11:a8:b8:67: 93:ba:34:1d:8e:e0:de:cb:ba:40:e6:66:1a:e6:3c: b6:c8:22:88:bd:bf:dc:f9:4e:3c:3b:e4:a0:5d:f8: 29:0e:5f:ce:01:28:a9:24:37:c8:3b:0b:f9:8a:fa: 59:19:64:f6:e8:b9:76:e2:3c:68:82:e5:56:39:f4: 86:7e:c0:a6:cf:5f:0a:6e:57:33:0b:81:c1:08:4f: 6d:02:4a:8a:f5:91:7d:36:d2:ed:f2:9e:87:08:33: dc:64:d5:48:8b:cc:1b:e7:95:08:d7:02:e0:8e:30: 83:a1:fa:73:cb:cf:8d:b3:df:fb:29:23:a4:24:50: 57:5e:7e:23:4c:65:ac:3a:39:26:5c:11:c1:87:f7: a2:89:30:fd:c0:43:a5:30:5b:f1:4f:93:47:10:b9: 13:c2:ce:5f:17:7c:4b:2a:01:1d:26:d7:b4:46:80: 22:52:8f:9c:cf:9f:a1:ab:67:0e:1f:aa:b1:a0:b9: 10:db:71:cb:d8:3e:2f:b3:33:50:0a:0e:e2:d5:ba: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:76:35:2E:C2:BA:29:3E:B4:5E:9C:28:18:4A:44:0C:A3:FA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5dda545f-1238-3606-89ac-8ceb51f8226f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:81:b7:7d:66:65:1e:25:82:ea:a4:06:fa:1f:bc:ad:d8:4b: cb:1a:de:bf:ef:ae:a8:69:78:e0:a1:38:60:ce:23:b9:05:f8: 53:7b:47:72:76:72:d6:61:8a:a4:81:f6:e3:5c:cd:69:70:52: e3:72:53:87:b9:17:02:68:98:b7:2d:2e:b3:3a:8d:2b:bf:a9: a3:a1:8b:63:a2:82:20:2b:d2:78:87:4d:4a:bb:91:ae:06:7e: a0:50:b4:27:cb:04:f1:77:43:1a:98:16:09:30:9c:25:64:64: 2e:80:f1:1a:88:4a:f1:a8:01:e7:bb:8f:17:be:60:b8:1f:28: 54:e4:66:0f:3a:99:b0:d2:86:73:24:67:44:0a:fc:11:41:2c: f5:6a:4a:7b:71:95:cf:5e:a9:99:ff:3c:c1:36:0e:6e:34:e0: da:c4:b9:1a:82:59:d6:fd:58:e6:ab:72:dc:c5:a2:b7:1c:5f: f7:e0:08:4b:6c:0f:fd:cb:46:f9:c8:89:49:d7:f6:16:a6:0a: 61:72:a4:d4:84:05:59:0f:45:7f:09:32:53:b0:e2:ca:e1:23: ff:23:af:80:d4:bb:93:b6:fe:e4:48:5f:a3:ca:83:a7:b4:11: fc:80:65:ae:c9:fb:10:8f:71:1b:52:8f:f6:aa:e0:2e:5c:a6: ae:4c:70:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnIEofA5UKAtoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk YTlkMjNkYTgtZTViZi00ZGE0LWEzMTYtZTVhZjNiYWJjOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUaPTPR3xHxLP8aIqyxEvoPkOYl72GiJM462 U7p8Xxa3znmVFVY2eMVwkKnryDmAGZkBNI52cBGouGeTujQdjuDey7pA5mYa5jy2 yCKIvb/c+U48O+SgXfgpDl/OASipJDfIOwv5ivpZGWT26Ll24jxoguVWOfSGfsCm z18KblczC4HBCE9tAkqK9ZF9NtLt8p6HCDPcZNVIi8wb55UI1wLgjjCDofpzy8+N s9/7KSOkJFBXXn4jTGWsOjkmXBHBh/eiiTD9wEOlMFvxT5NHELkTws5fF3xLKgEd Jte0RoAiUo+cz5+hq2cOH6qxoLkQ23HL2D4vszNQCg7i1bqVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGKdjUuwropPrRenCgYSkQMo/obMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWRkYTU0NWYtMTIzOC0z NjA2LTg5YWMtOGNlYjUxZjgyMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExpFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2Bt31mZR4lguqkBvofvK3YS8sa3r/vrqhpeOChOGDOI7kF+FN7R3J2 ctZhiqSB9uNczWlwUuNyU4e5FwJomLctLrM6jSu/qaOhi2OigiAr0niHTUq7ka4G fqBQtCfLBPF3QxqYFgkwnCVkZC6A8RqISvGoAee7jxe+YLgfKFTkZg86mbDShnMk Z0QK/BFBLPVqSntxlc9eqZn/PME2Dm404NrEuRqCWdb9WOarctzForccX/fgCEts D/3LRvnIiUnX9hamCmFypNSEBVkPRX8JMlOw4srhI/8jr4DUu5O2/uRIX6PKg6e0 EfyAZa7J+xCPcRtSj/aq4C5cpq5McEc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org