$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa File: 0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa (raw, json) Hash identifier: bk4gS8WvE4Q6F3oa5zvKC/YQi6n17zf/sDOwP7ERymc= Subject key identifier: 97:C8:DE:92:C7:8E:F7:27:57:A3:9D:F8:7C:7A:DF:56:80:48:AF:8A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847D29F82346F2876DA5531B200 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 30058 IP address blocks: 198.16.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:82:34:6f:28:76:da:55:31:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=bc294f5c-af8d-415b-a2f7-460f634f9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:3a:62:37:79:cf:7a:64:02:6b:e5:4a:bf: 76:8d:8f:eb:c0:76:e1:82:a4:3d:40:68:31:c5:e0: 96:ad:61:e5:61:a4:ea:cc:c2:a1:42:b9:2a:51:fe: 66:52:46:01:f1:26:a1:b2:43:ab:9b:93:57:76:af: 06:af:da:ac:cb:16:2b:64:00:9c:9e:5e:1f:fd:23: 6d:47:f0:0e:f0:bc:8d:78:ed:5e:bf:58:a8:17:f6: ff:3d:9e:72:4c:42:5a:cc:8a:35:25:56:b5:a7:c3: 9b:89:bf:62:11:fa:77:9a:28:2d:35:bf:91:9f:99: de:a9:6e:c9:33:41:ee:9c:a1:9c:5e:f8:31:b6:79: c9:25:9a:70:97:ec:f1:e0:a8:31:12:34:b5:b2:56: 71:2a:c7:ad:37:a9:8b:68:59:e4:2f:5f:74:8b:43: 03:d7:f6:b0:64:d3:b6:74:48:39:7c:95:d0:ac:2c: 64:9b:34:27:2d:dc:88:40:92:e3:c3:4b:71:fd:9c: 42:dd:ce:73:2a:09:44:91:78:dd:e1:6a:ff:1d:f7: 17:b0:71:37:8a:2b:f0:9a:19:5c:e5:da:80:9f:68: 87:c4:40:c9:a8:1a:86:80:41:0b:ce:5d:9f:8f:db: b4:ef:5c:ee:3d:5d:b7:71:18:97:bc:46:c3:65:10: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:DE:92:C7:8E:F7:27:57:A3:9D:F8:7C:7A:DF:56:80:48:AF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0aff78ae-7f78-3bf4-b079-bd1cb37dadd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:b1:f3:80:49:bc:fa:e6:1e:1b:d7:95:12:a5:40:26:07:a4: a3:cc:b4:87:ed:77:29:a3:f7:d8:17:5f:b0:e1:64:6b:5b:b8: ef:7d:35:3d:9d:dd:ee:19:de:fd:3d:26:ee:6b:88:be:8f:25: eb:da:2a:2f:f3:1c:9d:fd:c8:c6:dc:5c:46:f5:2a:c6:11:ed: e3:a2:7d:6c:a6:67:a6:74:46:6f:78:50:c6:54:92:f6:e1:98: 84:02:02:b7:fd:94:fa:c6:ee:cf:7f:3c:03:dc:d3:0b:bc:0c: 7c:d9:77:3d:92:29:f5:1e:8f:11:79:28:06:04:4a:fe:41:5e: 9a:ec:9d:83:b9:80:57:d7:89:cb:6e:43:1e:9c:1b:05:78:0a: 0f:d8:3b:50:ee:8e:e5:9b:34:10:8f:55:32:1a:65:d0:cf:8a: ca:c5:72:16:97:cb:e7:65:74:da:eb:a2:81:26:5d:99:c0:01: 84:e0:7b:9f:22:4a:bc:80:f0:93:19:89:2c:48:a9:50:93:a9: c0:bd:e3:1f:9c:16:ea:2a:62:1e:26:f1:9f:2e:08:82:0e:59: d2:9f:0e:c4:1b:b3:89:49:b9:47:5e:19:b9:a4:47:7c:f6:e6: fe:3b:83:94:e3:42:59:e6:d2:29:64:dc:8e:e2:ff:53:26:0b: 4d:61:af:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn4I0byh22lUxsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk YmMyOTRmNWMtYWY4ZC00MTViLWEyZjctNDYwZjYzNGY5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHg6Yjd5z3pkAmvlSr92jY/rwHbhgqQ9QGgx xeCWrWHlYaTqzMKhQrkqUf5mUkYB8SahskOrm5NXdq8Gr9qsyxYrZACcnl4f/SNt R/AO8LyNeO1ev1ioF/b/PZ5yTEJazIo1JVa1p8Obib9iEfp3migtNb+Rn5neqW7J M0HunKGcXvgxtnnJJZpwl+zx4KgxEjS1slZxKsetN6mLaFnkL190i0MD1/awZNO2 dEg5fJXQrCxkmzQnLdyIQJLjw0tx/ZxC3c5zKglEkXjd4Wr/HfcXsHE3iivwmhlc 5dqAn2iHxEDJqBqGgEELzl2fj9u071zuPV23cRiXvEbDZRB57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfI3pLHjvcnV6Od+Hx631aASK+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGFmZjc4YWUtN2Y3OC0z YmY0LWIwNzktYmQxY2IzN2RhZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWx84BJvPrmHhvXlRKlQCYHpKPMtIftdymj99gXX7DhZGtbuO99NT2d 3e4Z3v09Ju5riL6PJevaKi/zHJ39yMbcXEb1KsYR7eOifWymZ6Z0Rm94UMZUkvbh mIQCArf9lPrG7s9/PAPc0wu8DHzZdz2SKfUejxF5KAYESv5BXprsnYO5gFfXictu Qx6cGwV4Cg/YO1DujuWbNBCPVTIaZdDPisrFchaXy+dldNrrooEmXZnAAYTge58i SryA8JMZiSxIqVCTqcC94x+cFuoqYh4m8Z8uCIIOWdKfDsQbs4lJuUdeGbmkR3z2 5v47g5TjQlnm0ilk3I7i/1MmC01hr7Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:30 2024 by rpki-client on console-fra.rpki-client.org