$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa File: aa68105b-f17d-3d92-8850-130b7cd821d7.roa (raw, json) Hash identifier: ENnTjZ+8AFw+yM6ckiInnrPw5j4LRsQSvEiStFFpQfA= Subject key identifier: 0B:E3:23:F9:0C:C1:60:AB:05:D9:A6:53:E7:70:37:6E:A3:2F:93:36 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F43285847F41FA007F629B9C8A5918200 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa Signing time: Thu 21 Nov 2024 14:00:51 +0000 ROA not before: Thu 21 Nov 2024 14:00:51 +0000 ROA not after: Wed 19 Feb 2025 14:00:51 +0000 asID: 3300 IP address blocks: 192.157.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:1f:a0:07:f6:29:b9:c8:a5:91:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Nov 21 14:00:51 2024 GMT Not After : Feb 19 14:00:51 2025 GMT Subject: CN=c0c99d60-b84e-4af9-8b28-5e91239a08e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:29:b4:9b:b6:c2:1c:98:01:d9:ca:40:be: f5:d3:8b:62:1f:bb:9e:92:1b:f2:e0:80:c1:ea:8f: 3e:ff:9b:1f:02:4c:34:46:a5:7f:34:16:3c:cd:15: 58:ad:6a:52:d7:d5:e7:2e:71:6a:be:a8:fc:5d:a4: a5:f4:86:d2:94:98:1c:44:ac:8d:27:b6:11:32:62: 32:bd:e0:c3:95:ff:27:82:52:4b:2c:82:1b:35:ac: 05:6d:19:4e:cb:81:ef:a7:99:82:4f:bf:9c:48:fd: 93:90:e2:f5:8b:4f:2c:32:12:a5:0e:1d:8c:1a:0e: 9f:b2:7c:d5:5a:90:93:f3:1f:8c:8b:27:17:4c:15: 28:9c:94:bc:20:23:1b:f7:6b:0e:70:96:1a:74:d1: a5:1f:dc:ec:cd:56:49:50:6b:4d:e2:46:8f:a4:7b: 25:fa:2b:e9:e6:70:6d:2f:e9:14:65:b6:ba:2c:48: ff:13:80:e3:8b:55:8e:0a:06:95:34:e4:04:cc:4f: 37:cb:6c:d9:ce:11:4c:c5:af:36:27:82:ae:26:89: c2:32:bf:e1:f2:14:6e:38:c3:33:be:86:b3:21:15: 7a:1a:1a:04:21:40:eb:02:4d:4b:3f:f7:a9:f8:e4: 90:12:34:7d:41:59:8a:4b:49:4f:d8:c4:2b:a6:70: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:23:F9:0C:C1:60:AB:05:D9:A6:53:E7:70:37:6E:A3:2F:93:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:97:ef:1b:60:33:e9:d8:3e:62:b4:b4:5d:c8:17:93:ef:ba: 83:9d:af:81:52:ec:60:da:47:e4:ee:0b:56:45:31:09:19:ba: 3d:00:89:6e:18:e2:52:48:6c:e7:db:d7:33:c7:0c:f1:6b:ae: 50:f7:e0:19:0a:8e:9a:3c:0c:e1:34:2e:2c:51:4e:16:27:11: 7a:68:7e:08:fa:31:52:b5:30:e8:15:61:f0:a5:50:75:35:e8: 11:0a:e1:58:ad:8d:f2:ed:34:02:70:82:40:f2:9e:45:86:04: fb:9b:87:9e:cd:88:5e:f7:de:99:55:da:89:84:c1:dc:8b:8a: 96:32:8c:68:7f:11:ed:64:3c:41:49:26:3f:12:dc:be:d6:e7: 64:cb:68:7f:a9:01:ae:ec:5a:e7:c1:4b:0c:45:fb:b9:1a:10: d2:75:cc:2b:0d:13:01:69:99:81:c3:0d:f6:6d:55:88:d6:09: 15:1a:7f:7e:11:c4:0f:6b:4c:9c:35:80:44:ce:03:b4:3c:26: 25:ff:74:30:71:3a:8d:e1:93:a5:12:02:70:af:8e:25:64:35: 73:dc:d7:2d:80:37:5e:bb:bc:24:6c:f4:f8:77:0a:c4:08:e9: 9d:be:cf:9a:51:ae:8a:f0:ac:22:56:01:1d:bf:d6:50:c2:dc: 8d:66:df:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf0H6AH9im5yKWRggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI0MTEyMTE0MDA1MVoXDTI1MDIxOTE0MDA1MVowLzEtMCsGA1UEAxMk YzBjOTlkNjAtYjg0ZS00YWY5LThiMjgtNWU5MTIzOWEwOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TQptJu2whyYAdnKQL7104tiH7uekhvy4IDB 6o8+/5sfAkw0RqV/NBY8zRVYrWpS19XnLnFqvqj8XaSl9IbSlJgcRKyNJ7YRMmIy veDDlf8nglJLLIIbNawFbRlOy4Hvp5mCT7+cSP2TkOL1i08sMhKlDh2MGg6fsnzV WpCT8x+MiycXTBUonJS8ICMb92sOcJYadNGlH9zszVZJUGtN4kaPpHsl+ivp5nBt L+kUZba6LEj/E4Dji1WOCgaVNOQEzE83y2zZzhFMxa82J4KuJonCMr/h8hRuOMMz voazIRV6GhoEIUDrAk1LP/ep+OSQEjR9QVmKS0lP2MQrpnCwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvjI/kMwWCrBdmmU+dwN26jL5M2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYWE2ODEwNWItZjE3ZC0z ZDkyLTg4NTAtMTMwYjdjZDgyMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyX7xtgM+nYPmK0tF3IF5PvuoOdr4FS7GDaR+TuC1ZFMQkZuj0AiW4Y 4lJIbOfb1zPHDPFrrlD34BkKjpo8DOE0LixRThYnEXpofgj6MVK1MOgVYfClUHU1 6BEK4VitjfLtNAJwgkDynkWGBPubh57NiF733plV2omEwdyLipYyjGh/Ee1kPEFJ Jj8S3L7W52TLaH+pAa7sWufBSwxF+7kaENJ1zCsNEwFpmYHDDfZtVYjWCRUaf34R xA9rTJw1gETOA7Q8JiX/dDBxOo3hk6USAnCvjiVkNXPc1y2AN167vCRs9Ph3CsQI 6Z2+z5pRrorwrCJWAR2/1lDC3I1m34A= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org