$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa File: f91931be-3fbf-37a3-932e-7cbf092669bd.roa (raw, json) Hash identifier: 24/zett0xZO7VEPOc06+Wmd81F6af6gOTU6kSx5l+Oc= Subject key identifier: 8C:71:07:AD:37:26:80:82:FF:DE:9F:19:F1:1E:96:8B:3B:2D:5F:6B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858478CB68123F4AD5331401D5500 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 35758 IP address blocks: 172.98.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:81:23:f4:ad:53:31:40:1d:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=52be3d76-d925-42d9-9cfa-ce6c3e90ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:d4:fd:cb:83:49:be:ee:a6:1a:8f:aa:01: 53:a6:18:24:8f:d3:6d:d0:42:e6:4c:d7:7d:48:94: fe:d8:71:fa:1b:e2:09:c0:fe:6e:74:57:51:87:33: e5:61:87:ba:72:ba:db:c2:3c:c5:ed:5e:03:72:40: d3:60:88:71:fe:38:cd:ee:d4:8e:7e:a2:0c:ca:a7: c7:d1:0d:8e:70:1f:64:98:30:62:50:f7:a6:d9:eb: a2:37:df:91:95:37:b2:f8:7f:14:14:98:88:d9:a1: 3d:eb:03:18:a9:92:b4:4f:4c:eb:fe:2e:66:dc:eb: cd:ac:bc:30:b8:4e:05:d7:b8:c7:29:37:f8:32:57: b1:72:df:d3:32:2e:81:55:16:e7:d1:54:9c:70:01: e9:52:e3:ed:c2:37:51:92:3c:e8:6b:d1:70:90:d8: aa:d0:1a:dd:d5:4b:cd:e3:28:fb:5f:34:dd:04:1f: 12:ce:77:c3:d7:da:57:cd:53:b3:a2:41:47:04:b8: 38:40:df:6a:b5:87:9d:64:4f:03:e7:1c:e7:d0:a8: 7d:fd:49:05:f7:19:6a:5d:77:9e:44:c3:d0:e2:2c: 9c:13:6d:c2:35:9e:6c:f6:37:c9:1c:70:21:ea:5c: 9e:4d:ba:d5:01:6d:d2:db:62:0a:0b:ec:65:c7:18: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:07:AD:37:26:80:82:FF:DE:9F:19:F1:1E:96:8B:3B:2D:5F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ac:4a:e6:73:f2:73:92:b1:6c:d5:75:86:46:58:63:81:e9: 6d:7d:b0:37:99:4b:4a:ba:f9:dc:33:1b:d0:73:f3:f9:25:f7: 35:9c:40:dd:9b:a6:f3:16:0e:1f:12:6a:66:4e:d0:dd:15:47: 3b:fc:23:0c:0b:7c:cd:25:9f:3a:04:12:91:58:44:00:cb:3d: b6:dd:0f:5b:1d:4e:05:1c:18:22:0d:e5:5f:bd:94:30:3e:4f: 25:40:74:b7:59:40:f0:5d:3f:f8:d1:d7:13:b5:36:77:5d:eb: 8e:42:e8:17:0e:4b:48:30:b2:27:03:22:63:75:22:0d:b5:dd: c1:44:91:52:c0:b9:ea:82:bc:a6:79:dc:1a:40:c0:9e:8b:c7: e7:20:ab:df:fd:cd:16:29:f5:55:d0:d6:30:3a:26:eb:69:98: 9c:70:e4:a9:b3:75:a4:fc:b6:d4:21:e2:63:f9:4c:a3:b3:7b: 6d:73:39:56:bf:d6:6b:91:6b:02:cb:83:74:39:ba:fb:8e:6f: 7f:d8:7d:57:63:f8:bb:72:31:5f:eb:fc:e4:a8:a7:11:46:ba: a5:4f:e0:9a:38:94:58:d9:51:8d:31:59:4e:ff:c4:cd:44:c8: d9:22:17:7b:0a:4a:cc:70:eb:99:1a:d7:45:8e:71:d9:c4:b8: 2c:bf:aa:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtoEj9K1TMUAdVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk NTJiZTNkNzYtZDkyNS00MmQ5LTljZmEtY2U2YzNlOTBhYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7XU/cuDSb7uphqPqgFTphgkj9Nt0ELmTNd9 SJT+2HH6G+IJwP5udFdRhzPlYYe6crrbwjzF7V4DckDTYIhx/jjN7tSOfqIMyqfH 0Q2OcB9kmDBiUPem2euiN9+RlTey+H8UFJiI2aE96wMYqZK0T0zr/i5m3OvNrLww uE4F17jHKTf4Mlexct/TMi6BVRbn0VSccAHpUuPtwjdRkjzoa9FwkNiq0Brd1UvN 4yj7XzTdBB8SznfD19pXzVOzokFHBLg4QN9qtYedZE8D5xzn0Kh9/UkF9xlqXXee RMPQ4iycE23CNZ5s9jfJHHAh6lyeTbrVAW3S22IKC+xlxxhi3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxxB603JoCC/96fGfEelos7LV9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjkxOTMxYmUtM2ZiZi0z N2EzLTkzMmUtN2NiZjA5MjY2OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWsSuZz8nOSsWzVdYZGWGOB6W19sDeZS0q6+dwzG9Bz8/kl9zWcQN2b pvMWDh8SamZO0N0VRzv8IwwLfM0lnzoEEpFYRADLPbbdD1sdTgUcGCIN5V+9lDA+ TyVAdLdZQPBdP/jR1xO1Nndd645C6BcOS0gwsicDImN1Ig213cFEkVLAueqCvKZ5 3BpAwJ6Lx+cgq9/9zRYp9VXQ1jA6JutpmJxw5KmzdaT8ttQh4mP5TKOze21zOVa/ 1muRawLLg3Q5uvuOb3/YfVdj+LtyMV/r/OSopxFGuqVP4Jo4lFjZUY0xWU7/xM1E yNkiF3sKSsxw65ka10WOcdnEuCy/qtk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org