$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa File: 2ddb1419-5806-328e-baef-d46939f17218.roa (raw, json) Hash identifier: volwE0stMYJ8rqripXZYax/uKEr7mVgjLYgGxaBUluE= Subject key identifier: D4:74:F7:CA:1A:67:91:94:94:70:0A:8E:30:34:75:93:99:68:B5:09 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584803967570B11D13E122E57940 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa Signing time: Wed 27 Nov 2024 02:57:28 +0000 ROA not before: Wed 27 Nov 2024 02:57:28 +0000 ROA not after: Tue 25 Feb 2025 02:57:28 +0000 asID: 393844 IP address blocks: 192.24.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:96:75:70:b1:1d:13:e1:22:e5:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Nov 27 02:57:28 2024 GMT Not After : Feb 25 02:57:28 2025 GMT Subject: CN=dd06af6b-bfaf-4645-96db-38e671daaf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:af:a9:98:ca:46:04:a0:66:b4:7b:b7:c7: f3:6d:25:d2:e3:50:89:df:08:0d:ea:cd:57:4b:5c: 8b:a2:1d:16:26:25:e8:e7:8e:ab:d9:4d:96:3d:9b: 20:07:e2:be:84:1a:c7:af:b6:54:eb:18:d3:7e:1d: 67:5b:91:f3:45:7f:7a:34:89:83:94:e5:1d:93:80: 53:30:fd:56:95:94:5c:a2:95:f2:58:b4:8b:c6:46: 8e:b5:1e:f2:c2:19:ef:e2:32:90:9d:79:95:0e:74: ff:41:03:dc:3f:bb:6b:31:a4:de:61:49:48:b7:7f: 3a:55:e5:d3:e3:6c:d7:c6:ed:d5:55:5b:fa:c6:4b: e5:7b:87:26:68:f1:48:b8:66:d5:1a:c0:47:11:a1: a9:63:c1:11:f6:7a:c0:da:8e:6b:6f:98:fd:6f:b0: 84:46:f2:49:2a:10:68:a8:2c:62:d8:7f:99:55:5e: 2e:7c:91:d5:90:20:e3:03:66:97:b8:9e:55:fd:9f: 23:19:56:b2:8d:19:ea:7b:5d:84:44:6f:76:61:d6: 2a:6e:dd:a0:8b:c5:99:15:fc:8a:ee:3b:5b:bf:8a: 42:03:8d:f6:ca:69:3e:da:0b:22:08:4b:b3:64:07: 1c:1f:00:2c:31:19:2a:a7:dc:d9:f1:05:df:eb:07: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:74:F7:CA:1A:67:91:94:94:70:0A:8E:30:34:75:93:99:68:B5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/2ddb1419-5806-328e-baef-d46939f17218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 192.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e0:17:15:3f:62:bf:25:60:7e:6b:cb:0c:a4:32:2f:cb:b5: 87:73:3f:1b:e8:62:d0:83:81:d3:2e:5e:3a:03:76:a8:3b:cf: 3e:e6:bb:e1:c5:75:c7:df:ae:82:7c:6f:79:58:08:a6:8f:9c: 06:fe:cb:61:39:e6:8f:9c:03:2f:6c:41:5d:3a:a9:71:ef:ea: a1:5e:43:f5:81:13:8c:e6:12:67:15:7a:85:c5:71:aa:93:04: 81:bd:ff:7f:22:7b:21:7e:c4:86:51:69:43:9d:84:1e:9e:2a: 51:b3:51:d0:d4:36:01:32:74:fa:fc:5c:92:d5:96:a6:56:87: fe:83:b1:9a:e1:84:a2:21:22:d8:2c:ec:19:43:8b:9c:32:1f: 81:67:36:c3:72:d5:70:d9:80:53:d6:82:8a:cc:01:52:2f:37: ce:62:b6:a6:64:18:ae:d0:5e:d3:81:bc:f4:58:e6:f0:70:e8: ba:dc:9d:1b:d7:f0:d5:cc:4e:a4:3a:36:b2:47:dc:ec:83:c0: 89:f3:66:cb:7f:7d:71:61:6b:6a:af:f6:44:6b:22:d8:e1:1c: a1:ee:6d:ce:ee:60:89:d4:bc:a5:8a:36:b5:50:e7:b7:a8:c2: a3:7f:95:3e:50:69:f2:72:34:07:25:26:9d:50:a4:ec:1d:83: b0:a5:10:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDlnVwsR0T4SLleUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI0MTEyNzAyNTcyOFoXDTI1MDIyNTAyNTcyOFowLzEtMCsGA1UEAxMk ZGQwNmFmNmItYmZhZi00NjQ1LTk2ZGItMzhlNjcxZGFhZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoCvqZjKRgSgZrR7t8fzbSXS41CJ3wgN6s1X S1yLoh0WJiXo546r2U2WPZsgB+K+hBrHr7ZU6xjTfh1nW5HzRX96NImDlOUdk4BT MP1WlZRcopXyWLSLxkaOtR7ywhnv4jKQnXmVDnT/QQPcP7trMaTeYUlIt386VeXT 42zXxu3VVVv6xkvle4cmaPFIuGbVGsBHEaGpY8ER9nrA2o5rb5j9b7CERvJJKhBo qCxi2H+ZVV4ufJHVkCDjA2aXuJ5V/Z8jGVayjRnqe12ERG92YdYqbt2gi8WZFfyK 7jtbv4pCA432ymk+2gsiCEuzZAccHwAsMRkqp9zZ8QXf6wcJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR098oaZ5GUlHAKjjA0dZOZaLUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvMmRkYjE0MTktNTgwNi0z MjhlLWJhZWYtZDQ2OTM5ZjE3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7gFxU/Yr8lYH5rywykMi/LtYdzPxvoYtCDgdMuXjoDdqg7zz7mu+HF dcffroJ8b3lYCKaPnAb+y2E55o+cAy9sQV06qXHv6qFeQ/WBE4zmEmcVeoXFcaqT BIG9/38ieyF+xIZRaUOdhB6eKlGzUdDUNgEydPr8XJLVlqZWh/6DsZrhhKIhItgs 7BlDi5wyH4FnNsNy1XDZgFPWgorMAVIvN85itqZkGK7QXtOBvPRY5vBw6LrcnRvX 8NXMTqQ6NrJH3OyDwInzZst/fXFha2qv9kRrItjhHKHubc7uYInUvKWKNrVQ57eo wqN/lT5QafJyNAclJp1QpOwdg7ClEKk= -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org