$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json) Hash identifier: kPXkdm0UB9tl4nL5p6O1AP33ItvY9jg7OAwcej4XZOc= Subject key identifier: 7E:CC:9C:FF:2E:D1:6B:05:A2:BD:7B:4D:BF:6F:A3:D4:85:C7:57:4D Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F43285847B3CC189C21B15395553031C0 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 399521 IP address blocks: 172.98.8.0/24 maxlen: 24 172.98.9.0/24 maxlen: 24 172.98.10.0/24 maxlen: 24 172.98.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:18:9c:21:b1:53:95:55:30:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=81d7e9b9-0361-4f9c-8186-2a88d904b1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:86:e6:d1:bf:53:b9:01:27:a4:89:9a:c8: fe:b9:71:41:c9:58:c4:a2:e8:80:52:f7:ea:c0:dd: f9:2f:45:7a:da:b2:98:04:a0:95:41:fd:6c:bd:7b: 63:de:f2:01:07:d7:26:55:47:b5:34:9e:81:e7:8e: 7f:8d:a3:56:05:b2:50:d0:44:9a:46:84:e8:df:53: de:1c:10:9b:2f:83:88:64:2b:f7:84:2e:59:4c:45: c8:3c:8e:ec:56:fb:c7:c2:26:35:20:2c:f2:e6:29: 08:d4:02:d0:af:2a:1a:fa:76:c0:ae:aa:31:d0:09: 4b:9c:73:46:3b:e9:99:05:67:49:ac:a6:e4:9c:a5: 1a:e4:c5:f7:05:43:85:69:8b:62:0f:52:8a:3d:c6: fc:f9:1c:80:28:d4:55:e9:c1:20:57:12:37:c8:6a: f0:d6:b4:3b:67:37:36:8a:a9:54:74:4f:88:b1:d7: 85:bf:b9:a0:a5:47:f5:a6:26:f3:0a:47:67:55:dc: d7:a5:9c:37:c7:d1:bd:e6:04:61:af:66:f1:10:3c: 11:0b:0f:ea:0d:9f:36:2b:11:cd:64:27:13:5f:db: b7:2c:06:e4:43:0b:dc:ac:e9:64:03:a8:ca:dd:71: fc:88:30:ae:d0:4e:d0:71:82:eb:3d:d4:28:c5:a1: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CC:9C:FF:2E:D1:6B:05:A2:BD:7B:4D:BF:6F:A3:D4:85:C7:57:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fc:ce:0e:98:1f:c9:b8:45:84:e7:d4:16:fc:1b:44:83:56: 2c:fb:b5:9e:b8:2d:9d:10:11:a7:d4:e7:e9:db:1a:5f:fb:9c: 2e:84:12:e5:ee:08:b0:7f:77:85:ef:44:db:36:09:38:c0:94: ff:4a:cb:2a:8c:a8:f4:92:2c:71:6d:f7:8f:0e:6c:98:7c:c1: 38:82:17:3d:2c:ba:17:ee:1b:39:fc:ee:8b:c3:b3:23:2f:5a: c8:ab:65:76:47:10:48:fc:21:c9:27:19:6f:e1:a3:3a:dd:56: 4f:bc:e3:2a:63:c9:13:dc:c2:cc:e5:45:e3:85:65:1a:16:9a: 5e:13:ca:b8:ff:d9:e4:8a:88:f3:67:f0:d0:32:88:d1:02:44: 88:54:14:5c:46:48:cd:89:37:fa:c4:bf:90:5a:4e:a0:70:19: 5d:f6:15:e4:93:88:ae:3c:49:d6:04:67:c7:25:cc:e5:20:33: da:a5:b4:b5:fe:58:14:5c:f3:c4:a9:5f:e5:08:5d:43:66:bf: ef:78:19:79:d4:41:17:a3:32:36:90:a7:22:ef:ce:19:de:a4: e1:e0:d2:09:8f:14:8f:5a:ff:ce:42:2a:50:a0:5c:f4:4e:83: bb:78:ea:2b:e3:6f:56:e6:65:9e:84:75:06:20:ef:8b:97:f3: dc:3f:48:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBicIbFTlVUwMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ODFkN2U5YjktMDM2MS00ZjljLTgxODYtMmE4OGQ5MDRiMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw6G5tG/U7kBJ6SJmsj+uXFByVjEouiAUvfq wN35L0V62rKYBKCVQf1svXtj3vIBB9cmVUe1NJ6B545/jaNWBbJQ0ESaRoTo31Pe HBCbL4OIZCv3hC5ZTEXIPI7sVvvHwiY1ICzy5ikI1ALQryoa+nbArqox0AlLnHNG O+mZBWdJrKbknKUa5MX3BUOFaYtiD1KKPcb8+RyAKNRV6cEgVxI3yGrw1rQ7Zzc2 iqlUdE+IsdeFv7mgpUf1pibzCkdnVdzXpZw3x9G95gRhr2bxEDwRCw/qDZ82KxHN ZCcTX9u3LAbkQwvcrOlkA6jK3XH8iDCu0E7QcYLrPdQoxaEzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7MnP8u0WsFor17Tb9vo9SFx1dNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED8zg6YH8m4RYTn1Bb8G0SDViz7tZ64LZ0QEafU5+nbGl/7nC6EEuXu CLB/d4XvRNs2CTjAlP9KyyqMqPSSLHFt948ObJh8wTiCFz0suhfuGzn87ovDsyMv WsirZXZHEEj8IcknGW/hozrdVk+84ypjyRPcwszlReOFZRoWml4Tyrj/2eSKiPNn 8NAyiNECRIhUFFxGSM2JN/rEv5BaTqBwGV32FeSTiK48SdYEZ8clzOUgM9qltLX+ WBRc88SpX+UIXUNmv+94GXnUQRejMjaQpyLvzhnepOHg0gmPFI9a/85CKlCgXPRO g7t46ivjb1bmZZ6EdQYg74uX89w/SDM= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org