$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa File: 2f0b902b-45b0-3e21-b050-e59891b64dfb.roa (raw, json) Hash identifier: F37IjdBetrP9F+fWR4dFLkgu1EiojiBg+HB3hADBXBE= Subject key identifier: FA:B3:FA:29:92:0F:1B:3E:04:1A:27:84:31:F1:3E:D9:BC:02:75:17 Certificate issuer: /CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Certificate serial: 010D0C9F43285847D999F5164462B889CB6F3780 Authority key identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 14618 IP address blocks: 199.48.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f5:16:44:62:b8:89:cb:6f:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=c71e1fd1-7dca-4390-93d6-6d2656e750e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:81:cf:17:b8:61:e2:97:05:92:43:d6:04: 1d:63:bb:39:49:12:2b:5a:65:8f:d3:d3:a1:8c:46: 27:8e:0c:ab:46:4a:7c:8e:09:9a:b9:1b:d1:4f:7f: 94:07:e0:f6:d2:ba:f6:60:7e:1d:0f:fc:9d:ba:33: ea:ae:6b:e0:3b:64:97:45:f0:b0:61:28:fd:15:80: 17:ed:37:7a:89:c4:6c:90:c5:94:35:f8:69:eb:bb: f0:5e:c3:94:6d:a8:9c:53:34:8a:0e:0b:c0:58:12: 2c:8d:4f:07:dc:bd:99:19:9d:86:3c:77:f4:e2:af: d4:ca:71:3b:73:02:00:d2:f3:85:65:8d:64:49:49: 7d:78:dc:ea:b6:f0:0c:25:85:70:25:c3:77:20:90: d1:23:45:3c:76:94:82:0c:05:c7:ca:63:8c:65:17: d0:af:8d:d6:c9:52:aa:97:84:14:95:0d:8f:45:75: 3a:0c:7b:62:d9:7d:11:40:46:b2:19:20:ad:19:7c: 31:84:3a:30:ec:34:ca:50:5e:d0:22:2b:0d:8f:76: 3c:87:3c:77:8b:e7:81:29:cb:6b:a0:ca:e7:71:1f: 8e:2c:75:e3:10:a3:ae:99:a6:2e:82:87:47:dd:63: 7e:b7:67:da:e0:25:e2:2c:98:92:29:32:fd:64:52: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:FA:29:92:0F:1B:3E:04:1A:27:84:31:F1:3E:D9:BC:02:75:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.crl X509v3 Authority Key Identifier: keyid:5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer sbgp-ipAddrBlock: critical IPv4: 199.48.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:58:27:01:9d:4d:f4:87:e3:9b:c6:76:62:97:2e:a9:f6:05: 60:7b:da:41:bd:3e:4f:04:4e:d0:a8:63:24:d5:04:fc:42:da: 79:87:6b:a6:27:37:8b:a0:a2:10:96:2d:24:99:90:68:bf:78: 06:40:c5:b8:37:c7:01:3c:9b:97:eb:81:6e:c2:c8:77:00:99: 2d:0c:e7:d2:3f:64:77:61:80:29:24:a6:1b:33:de:58:e5:1a: 5b:91:25:5b:8e:83:65:12:da:d0:ff:72:2d:37:51:27:3e:f3: 56:a0:54:b4:e6:41:3b:9e:d0:56:8e:95:67:ca:95:ad:e1:67: e2:ae:20:b3:24:a3:cb:8d:f8:ef:0f:1a:68:0d:b1:cd:61:2f: fc:6a:23:7d:38:74:f8:e0:46:04:07:98:0f:cb:e0:58:85:37: 02:e7:98:2e:54:c5:9d:18:d2:c9:45:32:fb:ad:ef:23:da:e8: 30:4a:fa:0c:04:21:85:68:20:8a:72:45:5a:ef:33:2a:86:cb: 4b:93:3c:ac:18:60:b1:05:13:4a:9b:98:0e:21:c2:1a:5f:06: cb:00:50:4b:a6:21:2f:73:14:f8:87:e7:60:65:8f:db:87:80: fd:ed:63:db:84:3e:20:4a:2c:2b:f7:6a:91:22:f0:2d:59:cc: e4:9c:77:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfUWRGK4ictvN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VkMWUxNTMtNjU1OS00NmVmLThmOGItZWU4NDFhMmEw MTg4MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk YzcxZTFmZDEtN2RjYS00MzkwLTkzZDYtNmQyNjU2ZTc1MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUOBzxe4YeKXBZJD1gQdY7s5SRIrWmWP09Oh jEYnjgyrRkp8jgmauRvRT3+UB+D20rr2YH4dD/ydujPqrmvgO2SXRfCwYSj9FYAX 7Td6icRskMWUNfhp67vwXsOUbaicUzSKDgvAWBIsjU8H3L2ZGZ2GPHf04q/UynE7 cwIA0vOFZY1kSUl9eNzqtvAMJYVwJcN3IJDRI0U8dpSCDAXHymOMZRfQr43WyVKq l4QUlQ2PRXU6DHti2X0RQEayGSCtGXwxhDow7DTKUF7QIisNj3Y8hzx3i+eBKctr oMrncR+OLHXjEKOumaYugodH3WN+t2fa4CXiLJiSKTL9ZFLRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqz+imSDxs+BBonhDHxPtm8AnUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZWQx ZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEyYTAxODgvMmYwYjkwMmItNDViMC0z ZTIxLWIwNTAtZTU5ODkxYjY0ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2VkMWUxNTMtNjU1OS00NmVmLThm OGItZWU4NDFhMmEwMTg4L2NlZDFlMTUzLTY1NTktNDZlZi04ZjhiLWVlODQxYTJh MDE4OC5jcmwwHwYDVR0jBBgwFoAUXyuyDmrFY+vzZmgaxmTw7TukWkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0 MWEyYTAxODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpYJwGdTfSH45vGdmKXLqn2BWB72kG9Pk8ETtCoYyTVBPxC2nmHa6Yn N4ugohCWLSSZkGi/eAZAxbg3xwE8m5frgW7CyHcAmS0M59I/ZHdhgCkkphsz3ljl GluRJVuOg2US2tD/ci03USc+81agVLTmQTue0FaOlWfKla3hZ+KuILMko8uN+O8P GmgNsc1hL/xqI304dPjgRgQHmA/L4FiFNwLnmC5UxZ0Y0slFMvut7yPa6DBK+gwE IYVoIIpyRVrvMyqGy0uTPKwYYLEFE0qbmA4hwhpfBssAUEumIS9zFPiH52Blj9uH gP3tY9uEPiBKLCv3apEi8C1ZzOScdx4= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:10 2024 by rpki-client on console-fra.rpki-client.org