$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa File: 98537b11-bb4b-342b-89c8-51acc98a1597.roa (raw, json) Hash identifier: Q8IHY9yu61QZa/5i81/5/jh3kpJsuUNDSlBQ60pGyi0= Subject key identifier: 61:99:1A:5B:7C:1C:11:61:F2:E6:9F:F5:3C:1A:D5:44:2D:B0:E0:21 Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F43285847BEBD94A40F39A50B8A0B2D80 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa Signing time: Sat 02 Nov 2024 11:05:31 +0000 ROA not before: Sat 02 Nov 2024 11:05:31 +0000 ROA not after: Fri 31 Jan 2025 12:05:31 +0000 asID: 7029 IP address blocks: 140.235.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:bd:94:a4:0f:39:a5:0b:8a:0b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Nov 2 11:05:31 2024 GMT Not After : Jan 31 12:05:31 2025 GMT Subject: CN=534e260c-7b7b-4cd4-a062-4e26af83deb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:d7:35:13:7b:7e:65:27:63:34:8f:fe:00: ec:18:02:68:32:f7:b6:08:e6:cb:5a:8f:ed:bb:0b: 3d:21:3a:1b:d5:2e:b7:42:15:21:6f:b7:d1:47:8a: 79:1c:26:b7:75:bd:b2:61:c9:61:18:aa:5e:9a:0b: 51:57:93:fd:5b:ac:8f:a5:c5:8a:ea:68:9d:1c:14: 2c:95:d4:7b:e9:12:05:b4:81:dc:5c:dc:61:70:8d: a1:0a:fd:ad:4a:77:3c:a0:00:4a:44:5c:75:72:82: bb:7c:4a:8b:2f:8a:53:6f:b7:f6:20:01:6f:20:7b: 0f:94:19:0e:fe:be:57:f7:69:e4:db:11:5a:09:c6: 0f:45:cb:d4:6e:13:50:7a:07:89:8d:5f:22:d9:74: 52:c8:d9:18:4a:73:07:84:85:5f:5f:e6:4a:71:42: e5:29:8a:0b:38:64:88:3d:f0:eb:04:c6:15:57:f2: 21:b2:68:47:8f:4e:fd:7d:b8:86:31:d7:f8:48:b5: b4:9f:eb:73:5e:d9:ad:c1:8b:6d:90:dd:ac:53:80: 49:84:51:06:af:a1:e9:c1:12:26:8f:88:da:60:b8: 12:b4:58:ba:22:50:0e:8f:62:03:b5:cc:09:6d:4c: 58:bf:8b:f7:b4:b2:8b:fe:fb:71:9d:68:c2:d5:3b: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:1A:5B:7C:1C:11:61:F2:E6:9F:F5:3C:1A:D5:44:2D:B0:E0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3a:1d:8c:9e:b4:6e:9b:21:81:8c:51:7a:c8:bb:96:5c:08: f6:f3:68:fd:78:8e:6e:1c:c1:47:84:51:c5:fb:75:0e:c5:cc: a2:91:98:39:d8:53:28:b4:73:18:42:44:d8:20:49:8f:0c:fc: 69:36:91:f8:0a:bf:a7:3a:0f:09:57:09:fa:5a:08:7a:21:0f: 6d:8b:04:f3:67:cc:2d:a4:9b:f1:3a:9a:1e:80:1d:f6:cb:75: d6:69:01:ca:0c:39:0b:d0:5c:e6:49:64:e7:4e:82:3c:43:6a: af:8d:c3:d4:a0:e9:a6:c4:98:1d:57:25:23:68:0f:92:4f:46: ef:72:5b:01:33:1e:0d:73:8c:0a:4c:ac:7f:ea:0e:76:00:c3: ae:82:26:b0:a1:c9:fb:72:91:ba:cb:1c:69:8e:02:e1:e0:94: e1:43:95:9d:79:67:77:b0:04:96:70:1c:cd:54:6f:63:d1:1e: f4:24:e7:e6:7c:38:33:f4:99:9c:81:e1:72:6b:be:95:33:56: 7c:4c:58:1b:01:c1:2f:b4:a7:f6:c8:04:6a:5e:cb:96:ab:0e: ff:80:26:77:65:e2:0b:53:17:d6:4c:54:0e:77:ae:ab:97:31: 01:f9:38:b4:f7:3a:c3:7b:b7:02:de:1a:23:10:27:86:32:05: e4:c0:4b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+vZSkDzmlC4oLLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI0MTEwMjExMDUzMVoXDTI1MDEzMTEyMDUzMVowLzEtMCsGA1UEAxMk NTM0ZTI2MGMtN2I3Yi00Y2Q0LWEwNjItNGUyNmFmODNkZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgjXNRN7fmUnYzSP/gDsGAJoMve2CObLWo/t uws9ITob1S63QhUhb7fRR4p5HCa3db2yYclhGKpemgtRV5P9W6yPpcWK6midHBQs ldR76RIFtIHcXNxhcI2hCv2tSnc8oABKRFx1coK7fEqLL4pTb7f2IAFvIHsPlBkO /r5X92nk2xFaCcYPRcvUbhNQegeJjV8i2XRSyNkYSnMHhIVfX+ZKcULlKYoLOGSI PfDrBMYVV/IhsmhHj079fbiGMdf4SLW0n+tzXtmtwYttkN2sU4BJhFEGr6HpwRIm j4jaYLgStFi6IlAOj2IDtcwJbUxYv4v3tLKL/vtxnWjC1TsCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGZGlt8HBFh8uaf9Twa1UQtsOAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvOTg1MzdiMTEtYmI0Yi0z NDJiLTg5YzgtNTFhY2M5OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI6HYyetG6bIYGMUXrIu5ZcCPbzaP14jm4cwUeEUcX7dQ7FzKKRmDnY Uyi0cxhCRNggSY8M/Gk2kfgKv6c6DwlXCfpaCHohD22LBPNnzC2km/E6mh6AHfbL ddZpAcoMOQvQXOZJZOdOgjxDaq+Nw9Sg6abEmB1XJSNoD5JPRu9yWwEzHg1zjApM rH/qDnYAw66CJrChyftykbrLHGmOAuHglOFDlZ15Z3ewBJZwHM1Ub2PRHvQk5+Z8 ODP0mZyB4XJrvpUzVnxMWBsBwS+0p/bIBGpey5arDv+AJndl4gtTF9ZMVA53rquX MQH5OLT3OsN7twLeGiMQJ4YyBeTAS6Y= -----END CERTIFICATE-----Generated at Sun Nov 24 16:09:59 2024 by rpki-client on console-ams.rpki-client.org