$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa File: dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json) Hash identifier: /+rqLVMzOQmlh7GEi9qsDUff11jBZBvjoubZpERcvMQ= Subject key identifier: 04:45:65:E7:D4:67:0E:94:65:58:D2:1C:A0:4B:E3:12:C4:B8:07:7B Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847E78F5D04F8CFD65E2F2BE980 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 16433 IP address blocks: 198.89.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:5d:04:f8:cf:d6:5e:2f:2b:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=32f0c275-73d9-42b6-8d67-984cc5159764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:ec:d1:b2:08:54:8f:13:0e:66:65:53:fc: 99:2d:83:99:34:b4:f3:e7:28:a3:8a:b1:a8:68:00: 47:d4:d5:0f:7c:6a:7c:b7:21:6f:ee:6f:d8:47:e4: 0a:8b:61:6d:3c:7e:5f:7a:28:56:30:89:ee:10:fc: 54:10:ab:81:2e:c7:f5:cc:54:38:b1:55:5d:e4:f0: 7e:0c:59:ae:bc:4f:e0:63:bc:4f:60:c1:5e:b5:7a: 5a:49:4a:e0:59:42:ea:78:5a:cc:f9:d2:63:dc:cf: c6:2e:c0:65:1f:cf:f7:09:bb:f9:23:89:0a:5c:0e: 4b:b5:fe:67:87:76:b5:a6:84:a3:27:ee:b2:50:01: ea:11:41:3c:67:41:9c:da:50:89:29:d4:75:da:fc: 7c:82:71:c5:4e:7e:ca:66:8b:c2:d2:d4:72:7e:37: 08:c7:51:52:e1:10:57:2c:23:dd:fa:bb:57:ee:ac: c3:89:38:c9:98:35:e3:f0:cd:9d:ef:3b:97:52:76: 0c:74:5b:f7:85:7e:db:56:fd:1a:ca:12:c4:8a:6a: 3a:81:39:85:43:41:a2:de:94:0e:a1:d3:1e:10:5e: b6:a5:cc:62:50:36:c8:23:e5:01:e0:dd:df:b4:4c: d0:df:42:f3:d1:ed:17:12:6f:1d:b5:4e:b3:0b:f6: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:45:65:E7:D4:67:0E:94:65:58:D2:1C:A0:4B:E3:12:C4:B8:07:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 198.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ba:94:20:0e:65:74:b8:bb:bc:6b:22:57:63:90:e8:66:ba: 0d:7d:1b:90:15:e5:24:a3:ce:82:d6:b0:74:3c:88:a7:88:30: 21:b7:eb:81:ca:4d:b5:cb:8b:9e:79:65:fd:56:43:e9:48:20: 02:54:4c:12:d9:fe:50:5d:16:59:d5:3e:3d:ab:aa:3f:89:78: ae:af:49:13:3d:4c:a8:8f:2e:a3:66:22:6e:9d:a4:51:85:45: d9:1c:d4:a8:2b:f8:27:7b:cc:ee:1d:fa:8c:0b:8d:94:a4:f8: 92:c2:6c:9e:ab:ce:0a:4f:1f:a1:4e:69:6a:32:2c:57:e1:17: af:40:50:11:39:11:24:bd:cb:de:24:b2:79:76:fe:d4:a6:83: a5:74:5a:6e:25:db:96:33:3c:94:c3:87:83:99:a5:6b:b8:b1: 0c:ba:a6:cc:4e:f7:34:a7:f0:e2:a9:2d:52:a4:af:0e:19:9d: 64:f1:12:55:f2:10:0d:dd:24:09:b7:22:08:21:b8:dd:2b:97: 08:64:82:bd:c9:75:29:c7:83:a6:e5:78:f9:23:dd:3d:1b:d5: af:28:dc:db:f2:f8:a7:54:1e:a6:24:6d:06:e7:77:ef:a6:91: bd:f5:dc:ef:a0:ce:f2:b0:fc:58:27:0a:fa:54:8e:75:9c:24: ed:d8:10:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj10E+M/WXi8r6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk MzJmMGMyNzUtNzNkOS00MmI2LThkNjctOTg0Y2M1MTU5NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ETs0bIIVI8TDmZlU/yZLYOZNLTz5yijirGo aABH1NUPfGp8tyFv7m/YR+QKi2FtPH5feihWMInuEPxUEKuBLsf1zFQ4sVVd5PB+ DFmuvE/gY7xPYMFetXpaSUrgWULqeFrM+dJj3M/GLsBlH8/3Cbv5I4kKXA5Ltf5n h3a1poSjJ+6yUAHqEUE8Z0Gc2lCJKdR12vx8gnHFTn7KZovC0tRyfjcIx1FS4RBX LCPd+rtX7qzDiTjJmDXj8M2d7zuXUnYMdFv3hX7bVv0ayhLEimo6gTmFQ0Gi3pQO odMeEF62pcxiUDbII+UB4N3ftEzQ30Lz0e0XEm8dtU6zC/YmyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARFZefUZw6UZVjSHKBL4xLEuAd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZGRlZDhlNjEtMjY1NC0z NjdjLThiZjItYjdjODIwYzEwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC6lCAOZXS4u7xrIldjkOhmug19G5AV5SSjzoLWsHQ8iKeIMCG364HK TbXLi555Zf1WQ+lIIAJUTBLZ/lBdFlnVPj2rqj+JeK6vSRM9TKiPLqNmIm6dpFGF Rdkc1Kgr+Cd7zO4d+owLjZSk+JLCbJ6rzgpPH6FOaWoyLFfhF69AUBE5ESS9y94k snl2/tSmg6V0Wm4l25YzPJTDh4OZpWu4sQy6psxO9zSn8OKpLVKkrw4ZnWTxElXy EA3dJAm3IgghuN0rlwhkgr3JdSnHg6blePkj3T0b1a8o3Nvy+KdUHqYkbQbnd++m kb313O+gzvKw/FgnCvpUjnWcJO3YEA0= -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org