$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json) Hash identifier: HWjzMfuM1XFwZkeFA5uMbI/vWZIAYrX7oXrn80COFQ0= Subject key identifier: 25:06:DA:0B:9A:71:C1:EA:3D:D5:97:0A:A0:20:02:C7:D0:8B:91:0B Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F43285847FF4A439B819591142ED7CA80 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa Signing time: Mon 25 Nov 2024 14:00:39 +0000 ROA not before: Mon 25 Nov 2024 14:00:39 +0000 ROA not after: Sun 23 Feb 2025 14:00:39 +0000 asID: 8987 IP address blocks: 192.16.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ff:4a:43:9b:81:95:91:14:2e:d7:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Nov 25 14:00:39 2024 GMT Not After : Feb 23 14:00:39 2025 GMT Subject: CN=d82173f8-94d7-442a-95ca-8b1602fc6ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:1a:11:8c:d4:59:34:38:32:0b:25:58:48: 22:71:59:b8:6c:22:d6:67:fb:88:93:a4:f0:7a:26: 98:9b:84:b5:ec:a7:96:bf:3a:cc:68:8f:cb:48:3f: aa:bf:d6:f3:f8:00:d2:e9:6e:15:75:e0:e0:43:86: 8b:ff:5f:12:b3:56:db:ad:bc:59:f1:ef:e7:03:8c: 16:6b:1c:51:cd:0d:9f:45:a1:93:0e:9a:c2:43:5f: f3:91:0c:2a:89:48:77:db:20:df:be:45:7e:3b:92: 6d:1c:03:dc:2e:02:f0:8f:f5:a0:10:77:d6:e1:91: 72:2c:9d:14:57:86:9d:a7:28:61:85:7d:b8:7e:07: a3:ef:03:3d:e1:66:7f:5f:cc:bc:d0:66:d3:1b:ab: 2c:f7:18:86:3f:13:6a:41:d7:ba:80:80:97:80:61: 2b:d4:c5:8a:b2:8a:70:2a:de:f3:bd:04:ec:1e:05: aa:24:37:48:f8:83:3b:5e:70:f2:02:0a:9c:86:a0: f3:99:c6:28:e5:40:1e:c6:08:d5:3e:b3:65:e9:39: fb:97:6d:f1:e3:4e:45:53:1e:b4:dc:ab:36:e1:31: 06:aa:ae:92:1b:a9:81:5b:e2:2a:8f:d6:08:eb:1c: 7b:67:f0:da:4c:8a:6c:8d:04:b6:cf:75:45:85:21: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:06:DA:0B:9A:71:C1:EA:3D:D5:97:0A:A0:20:02:C7:D0:8B:91:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1f:4c:ba:b7:8c:ef:b0:96:a0:0d:3b:59:1d:04:59:5e:0b: 80:1f:fb:62:cf:2b:4e:79:f5:2c:7d:10:e1:b6:4e:9f:dc:16: 5b:33:cc:57:13:b9:4a:d4:d1:51:c2:a3:f5:b2:75:d3:94:e7: a0:f4:6f:4b:45:23:6a:32:cb:24:ec:cf:f4:6f:42:11:80:26: 1a:4c:0d:cb:10:3b:c9:42:c3:de:ef:3b:3d:f9:ab:d3:0a:0b: 21:db:ef:d9:5b:22:3e:0e:50:7a:d2:43:38:1d:fe:fb:18:ba: b1:f1:30:2e:4c:55:20:8a:ca:fe:11:26:a5:f1:ae:06:bc:1b: 1f:bf:5f:df:2c:98:3e:04:5d:df:ea:dd:29:65:e0:0b:fb:b6: cc:4e:d2:4f:67:db:3d:11:c6:94:75:f0:5f:f1:4c:bd:e0:a4: 52:b6:c3:fe:16:c9:cb:c5:1e:96:f3:63:c5:02:0e:26:ce:37: d9:a5:ad:a8:6d:af:4f:c2:e0:26:3b:6d:da:e0:5a:0c:7f:de: ee:80:bc:d3:88:8a:ec:a8:5c:37:43:c8:39:6f:7b:27:9f:ca: d9:43:28:5d:e3:88:2e:c8:16:a9:73:1b:4d:09:1f:83:88:9d: b7:c1:4d:99:1b:00:d6:d4:f7:b4:6a:d0:1f:0e:92:fb:79:f7: 57:60:46:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SkObgZWRFC7XyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDgyMTczZjgtOTRkNy00NDJhLTk1Y2EtOGIxNjAyZmM2ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+AaEYzUWTQ4MgslWEgicVm4bCLWZ/uIk6Tw eiaYm4S17KeWvzrMaI/LSD+qv9bz+ADS6W4VdeDgQ4aL/18Ss1bbrbxZ8e/nA4wW axxRzQ2fRaGTDprCQ1/zkQwqiUh32yDfvkV+O5JtHAPcLgLwj/WgEHfW4ZFyLJ0U V4adpyhhhX24fgej7wM94WZ/X8y80GbTG6ss9xiGPxNqQde6gICXgGEr1MWKsopw Kt7zvQTsHgWqJDdI+IM7XnDyAgqchqDzmcYo5UAexgjVPrNl6Tn7l23x405FUx60 3Ks24TEGqq6SG6mBW+Iqj9YI6xx7Z/DaTIpsjQS2z3VFhSHpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUG2guaccHqPdWXCqAgAsfQi5ELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYfTLq3jO+wlqANO1kdBFleC4Af+2LPK0559Sx9EOG2Tp/cFlszzFcT uUrU0VHCo/WyddOU56D0b0tFI2oyyyTsz/RvQhGAJhpMDcsQO8lCw97vOz35q9MK CyHb79lbIj4OUHrSQzgd/vsYurHxMC5MVSCKyv4RJqXxrga8Gx+/X98smD4EXd/q 3Sll4Av7tsxO0k9n2z0RxpR18F/xTL3gpFK2w/4WycvFHpbzY8UCDibON9mlraht r0/C4CY7bdrgWgx/3u6AvNOIiuyoXDdDyDlveyefytlDKF3jiC7IFqlzG00JH4OI nbfBTZkbANbU97Rq0B8Okvt591dgRgs= -----END CERTIFICATE-----Generated at Mon Feb 10 16:03:36 2025 by rpki-client