$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa File: 3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa (raw, json) Hash identifier: O9GBqq1y/i00kdQHqPdYcg3VGgGnAvMP5rGmfUGOSCY= Subject key identifier: 1A:3F:4C:C0:C3:3D:1C:B2:31:23:13:EC:39:E5:85:C7:0F:63:54:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D768B3BE8649418F37FC200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 0 IP address blocks: 198.133.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:8b:3b:e8:64:94:18:f3:7f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=119e3915-5f6c-45e1-84b8-59d97b31ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:ce:a9:87:1e:82:ad:e1:ee:4b:64:40:4f: 08:11:bf:fa:b8:4c:40:6b:7c:65:ab:19:2a:67:ac: c9:37:2d:35:e6:59:fe:1a:13:41:c9:d5:7d:24:7d: 34:a2:9e:74:fb:ca:25:9f:42:b9:1b:f0:70:2a:f9: db:96:94:7a:e1:c3:dd:97:64:6a:83:88:65:d8:71: eb:b6:4f:df:97:f9:b3:9a:b5:6a:e7:b0:29:73:35: dc:1f:fe:e9:08:28:c9:e2:6f:ca:b5:5a:19:a4:cd: 53:40:46:e3:a5:4d:50:1d:18:1b:10:0b:b4:a5:f4: 07:14:cd:47:cc:6a:20:70:e6:43:c5:b3:8d:ce:48: ba:fe:5b:40:dd:af:40:0d:7e:a0:75:13:ec:05:a4: 17:9f:80:7e:1c:6e:ee:47:c5:bf:31:31:ce:33:eb: 06:73:cc:01:c4:d1:4f:52:6f:4e:bd:be:78:e6:85: c1:2a:46:87:0b:f1:51:1a:36:ef:16:5c:1f:b3:14: d6:13:11:7e:f0:5d:cf:e1:7c:a3:72:c8:7b:bc:f7: 61:f7:0b:07:8b:21:3f:c8:6c:ce:54:12:27:bc:a0: ce:fc:cf:b5:b7:62:ce:da:ea:fd:1d:47:fa:a9:dd: 9d:16:12:a7:45:87:fd:d9:98:d3:b9:91:44:ef:83: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:4C:C0:C3:3D:1C:B2:31:23:13:EC:39:E5:85:C7:0F:63:54:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.133.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:90:80:97:20:35:ac:d2:98:0b:18:8e:a6:d9:61:65:0c:49: 37:30:67:62:d8:ab:87:1d:b0:f4:27:86:db:86:dd:60:01:ce: 0e:1a:95:4f:8a:dc:2f:22:ad:86:46:f4:02:01:1c:15:21:7d: 0a:65:af:28:d5:6b:d4:88:99:9e:f3:48:a5:61:30:6f:04:b9: 9b:f7:ad:1f:b6:53:0d:6a:12:7b:68:46:54:d9:17:31:e1:df: d4:08:21:f5:9c:a9:d4:80:89:4a:f6:1a:9a:0e:1f:d6:b2:4d: c6:d9:ce:3d:6d:87:ac:24:b5:76:9e:42:0d:dd:d4:cf:86:f3: a7:8d:0c:bc:4e:63:06:f4:37:5d:52:4c:08:d4:e6:67:52:ae: d2:96:bb:35:1d:b9:e8:7b:1e:d5:43:83:05:7a:d3:bb:5c:2b: 0c:d6:f7:9e:d7:72:54:1a:18:82:d6:71:c5:83:a9:4c:76:1b: d3:0a:51:45:aa:63:06:2d:04:22:7b:86:51:44:ad:a8:f0:8e: 9b:63:98:5e:11:d6:5a:c5:e3:11:7c:fc:23:ea:38:f4:82:40: 14:b9:7b:0c:bd:65:3b:86:ff:a6:84:9c:e2:e5:19:79:7d:8b: 9a:9e:82:ac:8a:a5:d7:f0:f4:e6:db:35:e3:db:7b:90:d8:53: 52:82:af:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddos76GSUGPN/wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MTE5ZTM5MTUtNWY2Yy00NWUxLTg0YjgtNTlkOTdiMzFhYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7TOqYcegq3h7ktkQE8IEb/6uExAa3xlqxkq Z6zJNy015ln+GhNBydV9JH00op50+8oln0K5G/BwKvnblpR64cPdl2Rqg4hl2HHr tk/fl/mzmrVq57ApczXcH/7pCCjJ4m/KtVoZpM1TQEbjpU1QHRgbEAu0pfQHFM1H zGogcOZDxbONzki6/ltA3a9ADX6gdRPsBaQXn4B+HG7uR8W/MTHOM+sGc8wBxNFP Um9Ovb545oXBKkaHC/FRGjbvFlwfsxTWExF+8F3P4Xyjcsh7vPdh9wsHiyE/yGzO VBInvKDO/M+1t2LO2ur9HUf6qd2dFhKnRYf92ZjTuZFE74PGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo/TMDDPRyyMSMT7DnlhccPY1RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q2YzliNGEtZTM2NC0z ZjUwLWI3M2MtOGY2ODc4NmVjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqQgJcgNazSmAsYjqbZYWUMSTcwZ2LYq4cdsPQnhtuG3WABzg4alU+K 3C8irYZG9AIBHBUhfQplryjVa9SImZ7zSKVhMG8EuZv3rR+2Uw1qEntoRlTZFzHh 39QIIfWcqdSAiUr2GpoOH9ayTcbZzj1th6wktXaeQg3d1M+G86eNDLxOYwb0N11S TAjU5mdSrtKWuzUdueh7HtVDgwV607tcKwzW957XclQaGILWccWDqUx2G9MKUUWq YwYtBCJ7hlFErajwjptjmF4R1lrF4xF8/CPqOPSCQBS5ewy9ZTuG/6aEnOLlGXl9 i5qegqyKpdfw9ObbNePbe5DYU1KCr7k= -----END CERTIFICATE-----Generated at Tue Oct 22 21:22:20 2024 by rpki-client on console-ams.rpki-client.org