$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa File: a1284005-bf94-3589-b2ba-2f85ac99b52b.roa (raw, json) Hash identifier: PMzaJtl+8qOsoyfolRdDrvGp8x7zmrqDYg6jsmkvEyg= Subject key identifier: 7A:52:09:45:30:19:8F:7D:27:17:B2:43:D6:75:1B:5B:34:45:1E:33 Certificate issuer: /CN=377b79d2-ad9f-4e93-8ddc-ced5b027b20a Certificate serial: 010D0C9F43285847C1DF5043C2013DBDB939E680 Authority key identifier: 68:DE:A0:EB:8E:B3:A8:71:2E:19:49:94:A8:BA:00:88:37:2F:2D:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 16509 IP address blocks: 198.97.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:50:43:c2:01:3d:bd:b9:39:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377b79d2-ad9f-4e93-8ddc-ced5b027b20a Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=be450dfe-127e-42a2-bb9c-d392fcca6778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:3c:72:bb:34:ec:dc:33:44:86:88:08:42: 2a:32:7d:b5:86:3e:52:a4:80:1c:38:95:48:63:05: d7:00:ac:fa:0f:86:a4:19:d7:fe:7e:d8:42:fb:d4: 01:d1:0d:4a:ce:8e:38:1d:98:20:d7:47:73:c7:13: 63:04:4a:f7:75:00:89:88:df:74:5a:61:0b:07:ac: f2:4e:bd:cf:af:29:6e:9f:01:7e:b6:3e:5d:96:0b: e5:6a:da:b0:2e:37:31:20:1a:b3:ca:be:66:b7:02: cf:48:3f:3d:ce:68:5e:21:fc:fa:66:b9:0f:08:67: 00:6e:e8:1b:2b:cc:bb:31:aa:83:cc:51:7d:67:63: 13:4b:ac:8b:d5:c4:17:7d:e9:91:da:30:f5:9c:7d: 79:92:d0:99:6f:9d:29:c8:61:e4:d8:79:04:a4:55: 1a:1f:10:ce:20:7a:37:83:63:2a:da:2a:d2:64:f3: ae:c8:87:f3:10:96:14:67:66:a2:5a:05:23:52:af: fb:31:2f:a1:32:33:e7:c4:75:8d:a1:e0:c0:50:0c: a2:63:a1:f3:75:f8:78:d6:47:cd:40:a0:08:54:63: 63:62:90:c4:3c:c6:e3:c1:ce:a1:d8:14:b4:2a:b2: 0d:3e:21:21:88:61:71:d3:ac:6a:1c:fd:26:ff:9f: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:52:09:45:30:19:8F:7D:27:17:B2:43:D6:75:1B:5B:34:45:1E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/a1284005-bf94-3589-b2ba-2f85ac99b52b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.crl X509v3 Authority Key Identifier: keyid:68:DE:A0:EB:8E:B3:A8:71:2E:19:49:94:A8:BA:00:88:37:2F:2D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/377b79d2-ad9f-4e93-8ddc-ced5b027b20a.cer sbgp-ipAddrBlock: critical IPv4: 198.97.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:86:f6:ed:a3:d1:47:e8:aa:a8:59:07:ea:dd:0d:6c:88:29: 27:7f:79:0e:77:cb:97:7c:4f:05:8e:17:64:9d:73:43:c8:d3: 65:45:74:0d:e8:0a:27:5d:07:89:46:9f:ce:8d:05:00:5a:c9: f6:b9:7d:34:95:66:50:4f:96:d5:3b:51:38:f3:8f:e9:42:cf: 90:7e:3c:6c:80:e6:cd:c6:8f:41:b0:62:4d:c7:58:55:51:e0: 1d:71:d1:34:c0:25:58:1f:d7:28:82:bf:29:29:16:1a:b9:bd: 74:b0:ec:f6:61:61:36:da:25:2f:40:9f:9e:fe:51:1f:80:03: 00:d7:c5:97:6a:31:17:07:9b:1a:61:e8:81:a3:3b:99:c5:af: 6e:87:0d:53:58:32:10:4b:bc:ed:f2:3b:06:f3:76:01:f1:f3: 55:18:e1:27:01:e3:5c:82:d6:22:62:d8:c0:b2:15:ea:b9:cd: e3:15:6c:5d:e8:69:23:cf:42:ca:c0:6e:77:d8:ab:3a:41:92: 88:0a:da:65:49:a3:12:0b:bf:08:11:66:f7:d4:e2:5d:b1:13: 3e:68:a5:30:88:7c:74:5f:5e:44:68:70:a8:6c:ef:ab:21:4f: d3:2d:ef:f5:90:70:24:c0:fa:0d:1e:d1:80:13:97:fc:d9:f9: 95:c3:b1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31BDwgE9vbk55oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc3Yjc5ZDItYWQ5Zi00ZTkzLThkZGMtY2VkNWIwMjdi MjBhMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk YmU0NTBkZmUtMTI3ZS00MmEyLWJiOWMtZDM5MmZjY2E2Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFg8crs07NwzRIaICEIqMn21hj5SpIAcOJVI YwXXAKz6D4akGdf+fthC+9QB0Q1Kzo44HZgg10dzxxNjBEr3dQCJiN90WmELB6zy Tr3PrylunwF+tj5dlgvlatqwLjcxIBqzyr5mtwLPSD89zmheIfz6ZrkPCGcAbugb K8y7MaqDzFF9Z2MTS6yL1cQXfemR2jD1nH15ktCZb50pyGHk2HkEpFUaHxDOIHo3 g2Mq2irSZPOuyIfzEJYUZ2aiWgUjUq/7MS+hMjPnxHWNoeDAUAyiY6Hzdfh41kfN QKAIVGNjYpDEPMbjwc6h2BS0KrINPiEhiGFx06xqHP0m/5/mrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpSCUUwGY99JxeyQ9Z1G1s0RR4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNzdi NzlkMi1hZDlmLTRlOTMtOGRkYy1jZWQ1YjAyN2IyMGEvYTEyODQwMDUtYmY5NC0z NTg5LWIyYmEtMmY4NWFjOTliNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzc3Yjc5ZDItYWQ5Zi00ZTkzLThk ZGMtY2VkNWIwMjdiMjBhLzM3N2I3OWQyLWFkOWYtNGU5My04ZGRjLWNlZDViMDI3 YjIwYS5jcmwwHwYDVR0jBBgwFoAUaN6g646zqHEuGUmUqLoAiDcvLXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNzdiNzlkMi1hZDlmLTRlOTMtOGRkYy1jZWQ1 YjAyN2IyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGG9u2j0UfoqqhZB+rdDWyIKSd/eQ53y5d8TwWOF2Sdc0PI02VFdA3o CiddB4lGn86NBQBayfa5fTSVZlBPltU7UTjzj+lCz5B+PGyA5s3Gj0GwYk3HWFVR 4B1x0TTAJVgf1yiCvykpFhq5vXSw7PZhYTbaJS9An57+UR+AAwDXxZdqMRcHmxph 6IGjO5nFr26HDVNYMhBLvO3yOwbzdgHx81UY4ScB41yC1iJi2MCyFeq5zeMVbF3o aSPPQsrAbnfYqzpBkogK2mVJoxILvwgRZvfU4l2xEz5opTCIfHRfXkRocKhs76sh T9Mt7/WQcCTA+g0e0YATl/zZ+ZXDsb8= -----END CERTIFICATE-----Generated at Sun Nov 24 22:13:00 2024 by rpki-client on console-fra.rpki-client.org