$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa File: 70627356-922f-3594-8e0b-543ce961c033.roa (raw, json) Hash identifier: UBO9Dp+6/TpGP9s+B99ElJFLB/wEgXYL+vFOp5Wmkys= Subject key identifier: CD:4B:6C:7F:EF:55:45:87:0F:CE:DD:FC:BC:96:25:6C:0D:70:BA:EE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285847E35F6A0A4184B2E49C25CB80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 9009 IP address blocks: 172.98.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:6a:0a:41:84:b2:e4:9c:25:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=b5222f6a-16a8-4c3e-bf46-3e96ecbd1972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:de:0d:fb:72:9a:4a:dc:47:3b:ba:41:b6: b3:2f:f5:87:39:3f:3c:3a:ad:08:a5:70:c8:05:7a: 00:06:36:44:1a:ab:4c:e7:b6:9a:47:f4:60:ed:84: aa:66:4d:a5:34:1f:12:5d:ec:b6:53:14:63:07:14: 81:0e:52:bd:25:e0:31:2e:a8:52:e3:51:4a:08:f6: 1a:3e:e9:e7:35:1f:57:64:f3:8f:30:43:43:60:0f: 9a:60:a6:ed:3d:37:e4:3e:7b:39:7f:55:52:8b:dc: 46:81:dc:e4:1c:7a:8e:6b:35:63:26:c1:dd:04:aa: fd:79:f9:f2:d7:04:2a:e9:2a:34:46:be:66:4e:3c: 2f:51:b1:56:d6:3e:69:62:b3:c3:c2:b2:df:69:0b: cf:ea:20:69:f7:86:c1:3d:79:df:97:e5:3a:ef:b1: 75:26:4b:d7:b6:f8:09:93:51:38:bb:d6:2f:c2:a7: fb:ea:9f:a7:2a:52:dc:e4:30:51:91:72:7a:e5:82: b6:e1:9c:32:71:d5:5b:bd:0f:95:43:6f:61:3d:4e: 4a:9b:5a:e9:0f:49:63:d1:d9:71:e6:49:0c:4e:c1: 32:0f:ce:67:6d:bb:d2:1a:49:65:a7:31:e3:12:19: 29:bd:e4:2c:8b:7a:7e:49:c2:1e:1c:8b:c6:b4:68: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:6C:7F:EF:55:45:87:0F:CE:DD:FC:BC:96:25:6C:0D:70:BA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8d:e2:7b:e9:88:3f:de:0f:fd:3c:96:c0:df:c4:7b:a2:54: 8f:51:85:31:66:c5:74:5a:84:58:a0:93:ed:26:1f:99:ac:2f: 7b:ec:7d:40:92:27:d5:6b:08:ca:85:51:0b:fa:96:f8:f9:aa: 88:40:22:00:6b:7b:25:5d:c7:28:56:92:25:74:ff:86:7d:a0: 49:1c:48:f0:c9:1b:f2:35:5d:f1:dd:bb:4c:95:ed:d7:4f:70: 09:61:8b:06:b5:38:ad:84:ca:60:0d:78:e3:60:0c:a8:98:0c: d2:a3:3a:b8:c6:43:e2:e5:c5:50:60:53:47:11:6d:8c:5d:53: 09:34:d7:52:e5:60:a9:5c:22:27:1e:c5:7b:72:d8:20:25:b8: 8d:d0:41:81:73:78:cf:aa:39:e1:db:4b:43:21:9b:e5:c6:b7: 8e:62:d9:8b:ca:69:bb:3d:d6:27:8c:7d:5c:eb:49:44:28:59: e6:95:58:73:33:3b:60:56:e2:03:fe:c8:c4:52:ca:20:b0:b3: d3:67:6a:39:4b:2b:4a:f5:90:59:8e:b2:5c:51:42:8f:95:43: ab:fb:40:17:40:b8:9e:34:02:41:d7:8b:6e:bf:cc:79:96:f9: 85:ec:52:c1:b5:48:c1:1e:fd:2e:0e:1f:5f:f4:06:40:3f:27: 98:e5:d3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX2oKQYSy5Jwly4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk YjUyMjJmNmEtMTZhOC00YzNlLWJmNDYtM2U5NmVjYmQxOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJveDftymkrcRzu6QbazL/WHOT88Oq0IpXDI BXoABjZEGqtM57aaR/Rg7YSqZk2lNB8SXey2UxRjBxSBDlK9JeAxLqhS41FKCPYa PunnNR9XZPOPMENDYA+aYKbtPTfkPns5f1VSi9xGgdzkHHqOazVjJsHdBKr9efny 1wQq6So0Rr5mTjwvUbFW1j5pYrPDwrLfaQvP6iBp94bBPXnfl+U677F1JkvXtvgJ k1E4u9Yvwqf76p+nKlLc5DBRkXJ65YK24ZwycdVbvQ+VQ29hPU5Km1rpD0lj0dlx 5kkMTsEyD85nbbvSGkllpzHjEhkpveQsi3p+ScIeHIvGtGiaSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1LbH/vVUWHD87d/LyWJWwNcLruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzA2MjczNTYtOTIyZi0z NTk0LThlMGItNTQzY2U5NjFjMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCN4nvpiD/eD/08lsDfxHuiVI9RhTFmxXRahFigk+0mH5msL3vsfUCS J9VrCMqFUQv6lvj5qohAIgBreyVdxyhWkiV0/4Z9oEkcSPDJG/I1XfHdu0yV7ddP cAlhiwa1OK2EymANeONgDKiYDNKjOrjGQ+LlxVBgU0cRbYxdUwk011LlYKlcIice xXty2CAluI3QQYFzeM+qOeHbS0Mhm+XGt45i2YvKabs91ieMfVzrSUQoWeaVWHMz O2BW4gP+yMRSyiCws9NnajlLK0r1kFmOslxRQo+VQ6v7QBdAuJ40AkHXi26/zHmW +YXsUsG1SMEe/S4OH1/0BkA/J5jl0y8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org