$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa File: 8af32f4b-3d49-34a7-907b-43985f15f53e.roa (raw, json) Hash identifier: IVDSSZhBIMZ0ejJMBymM+7/1eRrVVbQ57fXD8n/5bPQ= Subject key identifier: 73:B7:7A:7A:26:28:4F:D3:E5:4E:A3:42:E5:10:5B:C5:EB:E6:D2:AB Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F43285847ED24BA4F6489CDDAF44AEE7C Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 14618 IP address blocks: 98.142.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:ba:4f:64:89:cd:da:f4:4a:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=3c3425e3-a18c-4afa-8ee3-c44de7fa13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:85:0f:73:d6:2d:1c:ca:97:6f:c6:92:01: e3:55:f8:a2:1b:1a:86:d8:fb:06:e1:9b:fc:b6:80: 32:3a:7a:e3:5d:bd:93:df:d1:dd:f9:3e:16:d2:dc: 2d:c1:c1:11:e8:55:c8:f0:1d:95:80:b7:21:9d:5b: 63:9e:a1:3a:84:27:a0:ea:f8:5f:59:47:58:2a:f7: d5:e5:80:64:26:63:c1:fc:4c:37:fd:9a:0b:4e:de: 6f:6b:7d:01:e7:57:67:05:84:58:83:2d:a6:76:dc: 07:9a:34:e4:c1:4d:86:28:17:0a:11:9c:b9:8d:74: 3e:49:ff:47:f9:9a:d5:9c:9f:ad:de:3d:f2:a7:9a: 47:a9:1e:cc:13:65:fc:34:c5:c8:71:9a:30:dc:17: fb:78:f8:dd:78:fa:bc:16:b2:0a:c9:2b:44:70:88: d1:9f:03:c0:a4:67:ce:5a:6e:68:d6:8e:cf:2d:da: 61:bc:1f:7f:58:76:24:ee:0d:11:da:f8:d3:31:51: 45:ae:74:ea:31:3e:5b:42:4a:d7:3d:70:05:e2:ea: e8:cc:3b:0a:ed:58:3b:7f:08:58:42:8d:5e:94:1d: 1d:62:a9:a5:5e:34:d2:d3:d7:34:43:82:1e:28:5c: 36:1c:8c:70:fa:48:9a:54:99:40:07:e9:ef:1d:ee: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B7:7A:7A:26:28:4F:D3:E5:4E:A3:42:E5:10:5B:C5:EB:E6:D2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv4: 98.142.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:05:cf:2b:92:41:be:36:12:c8:1c:b8:df:5f:0d:dc:61:d9: 93:66:77:02:86:43:bc:f8:bc:04:db:7f:d3:cf:2e:e6:95:10: 64:7b:9d:b5:9d:d2:df:f0:8e:4f:7e:82:be:33:fd:3b:61:3c: 78:51:ca:3a:f5:c0:c3:bc:54:3a:d9:a1:18:b0:a7:a3:19:0d: ed:91:d7:d4:38:ca:88:86:39:10:5f:35:c0:ab:af:1e:d7:51: 59:48:05:fe:02:64:3f:ac:5d:42:07:c7:98:51:55:36:84:06: fd:9b:0a:ff:48:23:f1:6e:d7:71:96:c7:b9:d2:6b:b3:ed:8f: 22:30:14:3a:9e:48:33:80:8b:7a:d5:08:e7:67:f7:d4:e6:bc: 56:1c:cc:c9:6c:7c:4c:b9:f5:06:29:92:da:73:56:60:de:e7: a4:8f:91:fa:23:99:15:f7:0c:cf:5b:9d:62:87:e6:62:80:ad: b0:d2:67:25:22:22:e6:84:71:a2:69:62:82:0b:ae:fa:05:54: 78:dc:cb:02:90:4e:02:39:82:4b:e2:60:fb:4e:00:5c:fa:84: 05:55:1a:cc:77:38:24:b9:ea:bd:2b:5c:a9:e8:9e:ae:09:38: 50:31:9b:38:c6:2d:01:b4:15:45:03:8f:f7:c1:c3:53:2a:42: 98:f9:35:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLpPZInN2vRK7nwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk M2MzNDI1ZTMtYTE4Yy00YWZhLThlZTMtYzQ0ZGU3ZmExM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v2FD3PWLRzKl2/GkgHjVfiiGxqG2PsG4Zv8 toAyOnrjXb2T39Hd+T4W0twtwcER6FXI8B2VgLchnVtjnqE6hCeg6vhfWUdYKvfV 5YBkJmPB/Ew3/ZoLTt5va30B51dnBYRYgy2mdtwHmjTkwU2GKBcKEZy5jXQ+Sf9H +ZrVnJ+t3j3yp5pHqR7ME2X8NMXIcZow3Bf7ePjdePq8FrIKyStEcIjRnwPApGfO Wm5o1o7PLdphvB9/WHYk7g0R2vjTMVFFrnTqMT5bQkrXPXAF4urozDsK7Vg7fwhY Qo1elB0dYqmlXjTS09c0Q4IeKFw2HIxw+kiaVJlAB+nvHe55iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO3enomKE/T5U6jQuUQW8Xr5tKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvOGFmMzJmNGItM2Q0OS0z NGE3LTkwN2ItNDM5ODVmMTVmNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8FzyuSQb42EsgcuN9fDdxh2ZNmdwKGQ7z4vATbf9PPLuaVEGR7nbWd 0t/wjk9+gr4z/TthPHhRyjr1wMO8VDrZoRiwp6MZDe2R19Q4yoiGORBfNcCrrx7X UVlIBf4CZD+sXUIHx5hRVTaEBv2bCv9II/Fu13GWx7nSa7PtjyIwFDqeSDOAi3rV COdn99TmvFYczMlsfEy59QYpktpzVmDe56SPkfojmRX3DM9bnWKH5mKArbDSZyUi IuaEcaJpYoILrvoFVHjcywKQTgI5gkviYPtOAFz6hAVVGsx3OCS56r0rXKnonq4J OFAxmzjGLQG0FUUDj/fBw1MqQpj5NfQ= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:49 2024 by rpki-client on console-ams.rpki-client.org