$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa File: f925b585-cac7-38a2-b727-438cb5b1ce22.roa (raw, json) Hash identifier: ywHt91zCHH1JBuO6wsH1Z+Opb6mXrBm3hsmMo6O1g1I= Subject key identifier: 7D:9D:8C:03:F5:02:31:6A:48:02:07:8C:A9:72:95:5B:2B:1E:3B:0C Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F43285847BAECD4068D64A8244DB29D80 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa Signing time: Fri 01 Nov 2024 02:17:29 +0000 ROA not before: Fri 01 Nov 2024 02:17:29 +0000 ROA not after: Thu 30 Jan 2025 03:17:29 +0000 asID: 2559 IP address blocks: 198.241.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:ec:d4:06:8d:64:a8:24:4d:b2:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Nov 1 02:17:29 2024 GMT Not After : Jan 30 03:17:29 2025 GMT Subject: CN=6418b50e-17d7-4fa5-baf7-c68b93e871e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:51:da:64:9a:61:dc:9f:70:b5:52:16:d1: ea:7c:88:3c:05:b9:47:4c:b1:29:44:61:c3:85:68: 0c:68:6e:b6:1a:f6:82:f4:e4:7e:02:ef:bd:0a:3a: a7:77:cd:2e:d6:6d:9a:94:36:92:5e:e7:d5:d7:25: ba:a6:22:d4:57:eb:eb:ca:52:20:5a:4c:d1:b5:22: eb:77:53:ce:8a:75:b4:6d:01:de:55:3f:9b:32:30: bb:ec:72:32:40:b5:24:3e:34:14:13:57:28:05:47: 1b:d0:33:b3:9c:0c:27:42:9f:84:ae:89:58:9c:db: eb:1a:28:70:55:ca:73:f5:d8:31:ad:4b:e7:aa:c9: e2:3b:7f:a3:a3:04:ef:0a:7b:64:03:d1:d5:05:6f: e8:c2:ae:6d:d3:a1:52:9b:38:94:e6:7e:87:55:c1: 18:a0:be:b9:a0:24:8d:09:01:0f:8e:fc:ee:f0:65: a6:9b:4a:9d:5b:6e:4d:c0:24:f5:2f:1c:21:08:42: ff:3e:a2:66:24:0f:05:a6:b0:77:19:64:24:a4:f0: 91:99:73:f0:8c:d1:4c:32:ad:76:73:cd:52:82:cc: c1:75:93:6c:21:23:d0:ac:ab:c3:e4:68:69:6d:af: 2f:6f:43:af:50:47:b9:f2:d2:78:ec:80:ab:a9:0d: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9D:8C:03:F5:02:31:6A:48:02:07:8C:A9:72:95:5B:2B:1E:3B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bc:81:22:c5:21:67:f7:0a:1d:27:25:da:26:8c:0b:40:0a: 99:f0:a9:2c:63:24:1e:92:92:b8:a8:51:e5:0f:08:cf:1d:a0: 8e:b6:a4:e1:68:ec:bd:17:dc:f7:3a:c7:d3:9f:75:61:cd:eb: ff:24:ba:f4:73:d6:bb:b0:8e:0c:b9:97:8e:ec:f3:95:00:f0: e7:54:fc:26:a0:46:d4:22:f0:03:61:f2:d4:04:0a:1f:b3:8e: ef:17:b6:cd:c2:2b:67:02:ab:18:4b:4a:49:b5:f2:74:d8:09: 8a:96:9e:25:36:22:b4:52:a6:89:cb:33:04:76:86:4b:69:16: 4e:01:41:c3:a2:8c:0d:07:0b:77:61:49:7d:a4:eb:42:fb:9c: 81:64:47:2b:08:30:b3:73:d6:80:82:e0:95:8b:72:2a:3f:83: d9:94:f8:11:02:38:58:a8:0f:38:12:95:2a:72:b6:27:c1:eb: e8:bc:40:e1:2d:e7:e8:b3:63:c8:31:c7:75:ec:48:49:e7:9a: 9b:57:8d:9e:97:14:4b:5e:e6:89:b6:10:cf:03:c2:a6:c7:a5: 4e:e1:63:a4:0b:02:68:4f:9c:1a:dc:07:98:c1:ef:2a:4c:3a: 7f:03:be:ee:60:7e:bd:82:9c:eb:fa:5b:74:ef:84:83:23:80: e8:ff:4e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe67NQGjWSoJE2ynYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI0MTEwMTAyMTcyOVoXDTI1MDEzMDAzMTcyOVowLzEtMCsGA1UEAxMk NjQxOGI1MGUtMTdkNy00ZmE1LWJhZjctYzY4YjkzZTg3MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon1R2mSaYdyfcLVSFtHqfIg8BblHTLEpRGHD hWgMaG62GvaC9OR+Au+9Cjqnd80u1m2alDaSXufV1yW6piLUV+vrylIgWkzRtSLr d1POinW0bQHeVT+bMjC77HIyQLUkPjQUE1coBUcb0DOznAwnQp+ErolYnNvrGihw Vcpz9dgxrUvnqsniO3+jowTvCntkA9HVBW/owq5t06FSmziU5n6HVcEYoL65oCSN CQEPjvzu8GWmm0qdW25NwCT1LxwhCEL/PqJmJA8FprB3GWQkpPCRmXPwjNFMMq12 c81SgszBdZNsISPQrKvD5Ghpba8vb0OvUEe58tJ47ICrqQ1vxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2djAP1AjFqSAIHjKlylVsrHjsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZjkyNWI1ODUtY2FjNy0z OGEyLWI3MjctNDM4Y2I1YjFjZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS8gSLFIWf3Ch0nJdomjAtACpnwqSxjJB6SkrioUeUPCM8doI62pOFo 7L0X3Pc6x9OfdWHN6/8kuvRz1ruwjgy5l47s85UA8OdU/CagRtQi8ANh8tQECh+z ju8Xts3CK2cCqxhLSkm18nTYCYqWniU2IrRSponLMwR2hktpFk4BQcOijA0HC3dh SX2k60L7nIFkRysIMLNz1oCC4JWLcio/g9mU+BECOFioDzgSlSpytifB6+i8QOEt 5+izY8gxx3XsSEnnmptXjZ6XFEte5om2EM8DwqbHpU7hY6QLAmhPnBrcB5jB7ypM On8Dvu5gfr2CnOv6W3TvhIMjgOj/Tqs= -----END CERTIFICATE-----Generated at Mon Nov 25 13:53:12 2024 by rpki-client on console-ams.rpki-client.org