$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa File: 1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa (raw, json) Hash identifier: raAvKMcI2DvnfFzHfGds7aIT4BxlRcoEKtuV8NWP4to= Subject key identifier: 2F:9E:81:5E:EC:DF:19:D9:60:6B:E7:74:49:FE:B6:0F:1A:96:79:83 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847C1DF49AA8E1D95FEBC7E9140 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 1239 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:49:aa:8e:1d:95:fe:bc:7e:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=c8a696e0-d660-4359-acfd-d28258da0bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:9a:a3:b2:94:7f:7d:f4:6e:84:d5:05:00: a7:67:0d:4f:d2:b1:de:ae:08:83:c5:8c:09:d5:6e: 90:9f:ad:56:f0:82:05:43:bc:c6:5f:36:ad:cf:6f: 3e:a0:25:88:fa:12:f4:0b:69:76:62:a9:09:a8:10: 09:0e:33:be:b1:81:b9:be:36:99:60:e9:91:c1:32: 50:73:a7:52:f9:33:2b:78:dd:60:27:9b:ac:fb:78: 73:35:2b:8e:00:a6:1a:ed:a3:58:20:12:e4:75:b7: 46:ca:d2:94:6a:f9:3a:ba:e6:42:cd:1d:db:fd:e2: da:4c:06:cc:33:29:8f:e6:1a:a3:8b:e0:42:06:7a: 5b:34:0d:b0:9f:99:45:46:e6:89:f7:4d:d7:25:fa: d4:64:bb:96:7e:94:eb:a4:ba:35:2e:70:04:da:7d: 8f:1c:67:02:3d:71:3b:50:85:f3:18:c3:b2:41:2d: 3d:60:a2:54:9e:da:9d:49:84:e7:ea:a5:1b:36:60: 44:27:8c:12:73:1d:ab:7e:e2:45:bf:50:72:ae:86: 75:8e:0f:c0:6c:7a:b0:b1:11:a9:4c:6f:b5:17:52: 88:26:e1:4e:3b:a0:d6:ca:4a:4e:07:3e:3e:67:be: 65:8e:0f:21:97:1e:36:12:a9:0e:2c:05:77:03:d7: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9E:81:5E:EC:DF:19:D9:60:6B:E7:74:49:FE:B6:0F:1A:96:79:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f9b78aa-b866-3517-882a-7c0c7ac0b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:f6:06:cd:b8:e6:b5:1a:87:d9:6a:42:be:b8:b4:30:0e:a5: 7e:7c:47:32:3a:72:81:2b:ce:cd:5e:82:c9:0c:67:42:af:ef: 38:9a:35:28:fc:2e:c7:9f:a6:ed:5e:21:32:59:08:26:1a:09: ac:90:2d:b0:f4:24:60:bd:42:f6:7e:25:93:4f:a0:e1:2e:a3: ae:ec:0b:09:4d:9c:f3:35:12:56:c4:16:0c:70:4b:97:22:18: 19:c9:f0:79:0f:2d:3f:95:12:eb:88:3c:a5:a9:b8:08:1c:e2: 3d:dc:89:22:3a:b4:c6:60:0d:02:da:83:10:ea:94:20:74:25: a6:aa:ba:55:89:64:10:1a:e4:9c:b3:53:2b:fe:91:fe:ac:68: 70:bf:80:82:2e:09:d2:f1:a8:95:4c:e0:90:70:68:4d:b7:e2: 5c:c6:7c:13:81:cb:0b:ba:75:86:53:ac:46:93:7d:78:d0:58: ef:67:8d:63:6f:8a:fd:70:ac:80:7c:19:3c:03:96:45:97:85: 7a:22:ae:01:c7:13:2f:cf:cb:a2:fc:d5:be:ea:12:b9:c4:00: 77:a5:de:e8:8a:ae:e7:21:6e:85:63:c8:b1:44:11:24:a4:c3: 2b:cc:09:e0:2c:32:29:70:2c:09:21:2b:d3:e3:e0:58:e4:94: 87:4e:21:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB30mqjh2V/rx+kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk YzhhNjk2ZTAtZDY2MC00MzU5LWFjZmQtZDI4MjU4ZGEwYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3aao7KUf330boTVBQCnZw1P0rHergiDxYwJ 1W6Qn61W8IIFQ7zGXzatz28+oCWI+hL0C2l2YqkJqBAJDjO+sYG5vjaZYOmRwTJQ c6dS+TMreN1gJ5us+3hzNSuOAKYa7aNYIBLkdbdGytKUavk6uuZCzR3b/eLaTAbM MymP5hqji+BCBnpbNA2wn5lFRuaJ903XJfrUZLuWfpTrpLo1LnAE2n2PHGcCPXE7 UIXzGMOyQS09YKJUntqdSYTn6qUbNmBEJ4wScx2rfuJFv1ByroZ1jg/AbHqwsRGp TG+1F1KIJuFOO6DWykpOBz4+Z75ljg8hlx42EqkOLAV3A9e+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+egV7s3xnZYGvndEn+tg8alnmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWY5Yjc4YWEtYjg2Ni0z NTE3LTg4MmEtN2MwYzdhYzBiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANn2Bs245rUah9lqQr64tDAOpX58RzI6coErzs1egskMZ0Kv7ziaNSj8 Lsefpu1eITJZCCYaCayQLbD0JGC9QvZ+JZNPoOEuo67sCwlNnPM1ElbEFgxwS5ci GBnJ8HkPLT+VEuuIPKWpuAgc4j3ciSI6tMZgDQLagxDqlCB0JaaqulWJZBAa5Jyz Uyv+kf6saHC/gIIuCdLxqJVM4JBwaE234lzGfBOBywu6dYZTrEaTfXjQWO9njWNv iv1wrIB8GTwDlkWXhXoirgHHEy/Py6L81b7qErnEAHel3uiKruchboVjyLFEESSk wyvMCeAsMilwLAkhK9Pj4FjklIdOIeA= -----END CERTIFICATE-----Generated at Mon Nov 25 03:37:43 2024 by rpki-client on console-fra.rpki-client.org