$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d7c7fb21-8791-31d4-8049-d5af636e96ea.roa File: d7c7fb21-8791-31d4-8049-d5af636e96ea.roa (raw, json) Hash identifier: jYPerTetvSLrHtsNehxWz9ZdVHKhQwlzA16Hhr3vyP0= Subject key identifier: 30:57:F0:60:D1:6C:5A:B1:B1:0E:25:A5:98:D6:8A:71:EF:32:DC:58 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F43285847A6F233BA9F3816D5DB445D90 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d7c7fb21-8791-31d4-8049-d5af636e96ea.roa Signing time: Thu 24 Oct 2024 22:32:09 +0000 ROA not before: Thu 24 Oct 2024 22:32:09 +0000 ROA not after: Wed 22 Jan 2025 23:32:09 +0000 asID: 54852 IP address blocks: 140.235.157.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Oct 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:f2:33:ba:9f:38:16:d5:db:44:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 24 22:32:09 2024 GMT Not After : Jan 22 23:32:09 2025 GMT Subject: CN=b715cb67-6b29-480b-90c5-39c20c301237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:d4:dc:1d:35:e8:a5:ef:11:c7:bb:47:32: b4:92:b3:e3:2e:3b:55:52:4f:f9:dd:21:31:cc:af: 9c:b4:20:f8:59:24:15:0f:40:11:00:a5:79:78:00: 2a:59:75:b2:5d:dd:cb:26:cb:c1:a9:4e:bb:2b:6c: 80:63:69:08:3d:af:33:35:be:38:ff:c9:b7:47:c4: 97:d5:e2:b4:60:ba:91:6a:dc:1c:83:69:c8:46:b7: 19:29:00:5e:fd:17:67:de:de:60:20:8a:31:38:a4: 32:50:00:15:a7:49:ed:9a:c5:52:bc:15:cc:a1:b3: 7b:b5:77:f1:79:07:44:b0:e0:4a:26:e9:2b:21:f7: df:8e:a4:74:65:c5:36:04:aa:0a:bf:4a:02:b0:d7: 06:1f:1b:61:59:68:fe:14:22:a8:ff:35:bf:2b:9a: 64:e8:b8:e9:3d:dd:4a:2f:38:92:34:7e:d6:a2:04: 34:11:3e:26:83:eb:8a:86:0a:84:67:67:1a:c9:ac: 4f:fd:6e:63:3b:ef:bf:58:34:32:be:35:16:a4:4b: 90:28:65:8a:c7:99:10:62:29:c2:b3:13:c6:7b:82: e6:7c:92:05:dd:64:a2:d1:fa:9d:9f:83:6f:52:2b: 2d:ad:79:ff:64:bf:0d:66:a9:88:8a:cd:07:18:46: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:57:F0:60:D1:6C:5A:B1:B1:0E:25:A5:98:D6:8A:71:EF:32:DC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/d7c7fb21-8791-31d4-8049-d5af636e96ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 140.235.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:02:b4:f8:ec:21:a5:2a:3a:b8:2c:08:d2:d2:e0:2a:69:97: c4:6e:b2:1d:48:77:dd:d5:2a:f2:ae:a4:83:09:23:4f:40:9a: 79:4a:c0:37:44:68:dd:17:51:ee:b4:b4:57:a8:82:92:94:54: 08:bc:14:25:36:15:b4:14:73:bb:28:fe:30:01:f6:32:96:1d: 4e:e8:70:86:61:73:91:70:ff:60:e1:b2:d2:30:cc:9e:21:24: ae:1a:38:d5:3b:67:2d:c1:c2:3e:fe:7a:ba:c0:ab:8f:73:99: 2b:06:37:5d:20:19:af:37:1d:15:92:0e:67:7d:c3:03:dd:18: ae:73:19:2b:81:55:64:d7:70:0d:7c:d3:aa:64:2d:73:c2:f9: 25:7d:41:85:d0:51:ed:ef:7b:0c:5e:80:35:06:0c:10:d4:eb: 21:98:22:25:bc:2d:fb:81:6b:3b:f1:30:5f:d0:87:3b:50:9e: 56:23:0a:18:fd:35:c6:19:f5:ae:eb:03:ea:f3:03:82:e8:32: 97:e0:a8:d3:47:ea:16:7e:e4:d3:19:d9:3d:cf:ae:f6:c7:dd: 09:49:2b:15:58:7f:7d:28:95:f8:a2:98:d1:51:c7:f1:a7:cb: 2a:3e:23:09:eb:fd:6e:c6:5b:9d:29:5c:48:95:69:b3:87:4d: 21:94:62:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEem8jO6nzgW1dtEXZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI0MTAyNDIyMzIwOVoXDTI1MDEyMjIzMzIwOVowLzEtMCsGA1UEAxMk YjcxNWNiNjctNmIyOS00ODBiLTkwYzUtMzljMjBjMzAxMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXfU3B016KXvEce7RzK0krPjLjtVUk/53SEx zK+ctCD4WSQVD0ARAKV5eAAqWXWyXd3LJsvBqU67K2yAY2kIPa8zNb44/8m3R8SX 1eK0YLqRatwcg2nIRrcZKQBe/Rdn3t5gIIoxOKQyUAAVp0ntmsVSvBXMobN7tXfx eQdEsOBKJukrIfffjqR0ZcU2BKoKv0oCsNcGHxthWWj+FCKo/zW/K5pk6LjpPd1K LziSNH7WogQ0ET4mg+uKhgqEZ2cayaxP/W5jO++/WDQyvjUWpEuQKGWKx5kQYinC sxPGe4LmfJIF3WSi0fqdn4NvUistrXn/ZL8NZqmIis0HGEaBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBX8GDRbFqxsQ4lpZjWinHvMtxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvZDdjN2ZiMjEtODc5MS0z MWQ0LTgwNDktZDVhZjYzNmU5NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0CtPjsIaUqOrgsCNLS4Cppl8Rush1Id93VKvKupIMJI09AmnlKwDdE aN0XUe60tFeogpKUVAi8FCU2FbQUc7so/jAB9jKWHU7ocIZhc5Fw/2DhstIwzJ4h JK4aONU7Zy3Bwj7+errAq49zmSsGN10gGa83HRWSDmd9wwPdGK5zGSuBVWTXcA18 06pkLXPC+SV9QYXQUe3vewxegDUGDBDU6yGYIiW8LfuBazvxMF/QhztQnlYjChj9 NcYZ9a7rA+rzA4LoMpfgqNNH6hZ+5NMZ2T3PrvbH3QlJKxVYf30olfiimNFRx/Gn yyo+Iwnr/W7GW50pXEiVabOHTSGUYu0= -----END CERTIFICATE-----Generated at Fri Oct 25 17:28:49 2024 by rpki-client on console-ams.rpki-client.org