$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: 1J3v9jcsJXWI6mhRHBAZfoJnIpkyK5yULRDS5u63NrA= Subject key identifier: B4:9A:F4:8E:96:42:34:BC:A2:80:92:8E:E2:C7:51:66:6E:0A:77:D5 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F43285847B10167485242CF5FD4A51E80 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:67:48:52:42:cf:5f:d4:a5:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=e40d9586-b3db-47c7-8829-01b57009e64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:7b:2d:86:8e:f2:a7:54:0c:0d:13:60:71: 9d:54:49:24:4f:d3:d3:6c:73:bc:7b:3f:32:48:64: 37:13:3c:a6:0c:df:6f:ba:f5:5d:a5:e0:4d:8e:bc: cb:cd:e2:57:96:d0:a3:7c:99:4a:98:c4:cd:ae:98: bf:f4:16:5a:1b:95:e4:d2:7e:6a:92:97:34:c2:e7: d3:66:16:d7:79:f3:65:e1:57:91:8c:03:99:3b:7f: 25:3f:f8:77:77:2a:77:42:38:e7:15:39:e7:6b:ab: 99:0b:e8:8e:09:d0:aa:85:f4:91:97:6b:0a:74:57: a2:05:89:a1:43:2f:4a:15:ac:7f:9b:5c:17:c3:d6: e3:4c:10:77:24:3c:85:41:7e:d2:4c:6f:34:f2:53: ba:f5:14:31:9e:11:9e:b3:bd:ab:3f:ee:9d:31:f5: 42:c3:c6:29:d2:f7:b8:41:3c:69:c4:61:63:ff:ef: e3:bd:57:67:ab:5c:3e:da:1e:b9:4c:db:71:d1:db: 78:39:f1:68:df:33:8e:12:57:27:6e:07:cf:e9:67: 3e:f9:db:96:24:53:af:07:78:d3:18:00:a8:f6:40: 50:77:83:9d:3c:fe:cb:c5:d2:2b:34:57:ca:56:00: 80:58:24:51:87:fc:70:b0:ef:8d:c3:ae:d7:5c:d8: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:F4:8E:96:42:34:BC:A2:80:92:8E:E2:C7:51:66:6E:0A:77:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:55:d5:27:26:31:b8:06:f6:6c:64:70:28:8f:83:68:c7:57: 5f:10:85:50:f4:d4:db:42:29:c8:52:51:34:5e:77:19:93:1f: cd:e3:e0:61:72:ea:7a:78:6d:8b:b4:e0:6d:a4:d0:d8:75:6c: 4e:5d:8d:59:27:9b:2c:8e:92:20:98:25:2d:77:86:27:09:6a: d9:7f:13:6b:7b:3c:ce:12:e9:c4:2a:47:52:48:8d:61:00:29: 15:62:c1:40:34:ec:42:7d:71:4e:2d:93:21:81:07:e7:57:45: 85:d6:5e:ed:fc:63:f7:a2:64:11:96:fa:94:02:36:a7:8f:7e: f4:cf:db:cc:04:8d:8a:48:b5:4c:97:16:e3:11:ab:f4:2c:76: 54:12:8e:6c:6c:36:3b:eb:17:c3:1f:e4:e1:8b:f5:7e:af:db: f5:9d:fd:26:55:4a:e0:de:06:1a:41:4f:98:c3:1f:e4:0b:4e: 28:d6:c9:43:97:38:3f:ae:a7:51:b7:6e:d0:81:e4:25:1f:88: 08:95:5c:cb:32:75:8c:87:12:51:2e:54:ec:bd:eb:c7:f6:c3: 44:95:72:d0:33:0d:12:c4:5d:b9:85:ff:9b:05:62:7d:d9:7f: 39:da:91:b2:59:55:41:33:fc:48:3d:7b:aa:b8:96:77:b9:14: d3:0d:5a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWdIUkLPX9SlHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZTQwZDk1ODYtYjNkYi00N2M3LTg4MjktMDFiNTcwMDllNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRB7LYaO8qdUDA0TYHGdVEkkT9PTbHO8ez8y SGQ3EzymDN9vuvVdpeBNjrzLzeJXltCjfJlKmMTNrpi/9BZaG5Xk0n5qkpc0wufT ZhbXefNl4VeRjAOZO38lP/h3dyp3QjjnFTnna6uZC+iOCdCqhfSRl2sKdFeiBYmh Qy9KFax/m1wXw9bjTBB3JDyFQX7STG808lO69RQxnhGes72rP+6dMfVCw8Yp0ve4 QTxpxGFj/+/jvVdnq1w+2h65TNtx0dt4OfFo3zOOElcnbgfP6Wc++duWJFOvB3jT GACo9kBQd4OdPP7LxdIrNFfKVgCAWCRRh/xwsO+Nw67XXNgVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSa9I6WQjS8ooCSjuLHUWZuCnfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5V1ScmMbgG9mxkcCiPg2jHV18QhVD01NtCKchSUTRedxmTH83j4GFy 6np4bYu04G2k0Nh1bE5djVknmyyOkiCYJS13hicJatl/E2t7PM4S6cQqR1JIjWEA KRViwUA07EJ9cU4tkyGBB+dXRYXWXu38Y/eiZBGW+pQCNqePfvTP28wEjYpItUyX FuMRq/QsdlQSjmxsNjvrF8Mf5OGL9X6v2/Wd/SZVSuDeBhpBT5jDH+QLTijWyUOX OD+up1G3btCB5CUfiAiVXMsydYyHElEuVOy968f2w0SVctAzDRLEXbmF/5sFYn3Z fznakbJZVUEz/Eg9e6q4lne5FNMNWrI= -----END CERTIFICATE-----Generated at Mon Nov 25 18:05:00 2024 by rpki-client on console-fra.rpki-client.org