$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa File: 34f0b53b-80a9-3773-99d3-108f002e41f0.roa (raw, json) Hash identifier: KOa+CgLcJk/fE/XL21tv0GCFDOIaWkgRrLAcFi0wgBQ= Subject key identifier: 59:08:B4:E6:84:B1:C8:EA:85:00:EE:BF:62:2C:01:7C:DC:5D:78:3E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847C05C1379C66902885E02B280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa Signing time: Sun 03 Nov 2024 01:00:36 +0000 ROA not before: Sun 03 Nov 2024 01:00:36 +0000 ROA not after: Sat 01 Feb 2025 02:00:36 +0000 asID: 1239 IP address blocks: 198.16.100.0/23 maxlen: 23 198.16.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:5c:13:79:c6:69:02:88:5e:02:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 3 01:00:36 2024 GMT Not After : Feb 1 02:00:36 2025 GMT Subject: CN=f9f6bb9f-9688-452f-8872-05d9685c703a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:ac:89:8b:51:ca:a5:6f:c1:24:ef:90:80: be:21:26:3a:fd:9d:66:32:63:77:e3:cb:88:22:30: 48:2b:5d:30:9d:db:df:ef:ff:b5:bd:6e:c6:a9:51: 4b:21:75:3f:5d:97:4d:e6:2f:d0:18:95:06:49:58: ec:82:55:0c:1e:76:f7:34:df:f2:19:f9:c2:8e:c8: c7:94:bc:da:3b:ac:48:b1:e9:ba:53:8b:70:12:00: 57:12:0b:48:f7:d5:d3:9d:e9:06:88:f2:c5:05:05: d8:50:d6:7a:53:04:bf:47:98:7e:60:79:c6:eb:c9: ee:86:72:4c:ac:73:52:03:5c:04:b9:b7:74:64:3c: 14:44:76:a2:74:d4:c5:01:f0:58:6d:91:dc:68:e7: b4:38:73:b4:79:c1:44:9a:a1:17:de:49:8d:1d:c9: ae:06:58:9f:93:61:ed:54:a4:5c:df:27:e7:2c:95: cf:94:4d:aa:c0:35:ca:77:ee:be:53:4a:1a:8c:fc: 6d:62:93:7b:42:21:b6:4c:19:d4:0d:dd:7a:46:9f: fc:0b:f8:57:d6:44:d2:0e:d8:22:45:fb:9e:2c:dd: c1:7c:f7:aa:cb:19:5d:4e:94:76:7b:dc:d8:f3:ed: 7c:1d:f0:d4:e7:f9:48:21:1b:db:0f:b9:0c:42:7c: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:B4:E6:84:B1:C8:EA:85:00:EE:BF:62:2C:01:7C:DC:5D:78:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.100.0/23 198.16.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ce:e9:b9:2e:d5:d9:d6:6d:6f:75:8c:dd:0a:de:6f:ad:67: 91:c4:3a:61:1f:69:3b:ff:3f:bc:62:38:62:63:93:cb:cb:e9: cd:9d:68:42:ee:1b:5f:7e:9e:ec:77:fd:f2:23:23:e0:c4:cd: 9f:f6:d7:f2:2e:5d:27:fc:e6:ff:85:b4:c4:d7:53:ac:15:ab: 8d:fa:f7:d8:ee:ae:96:ae:15:94:cc:cd:6c:a1:f1:1a:10:ac: 00:c8:13:24:0b:80:25:36:62:b7:25:36:dd:ce:dd:4d:c2:74: 88:bc:dd:51:9b:a3:12:30:9d:de:85:89:c4:93:78:98:6f:a9: 01:b6:b4:85:68:17:8d:ca:35:4d:8e:ed:6b:aa:ce:25:46:ac: ae:fc:79:3c:9d:07:77:3b:6d:84:88:b9:44:c3:e9:d0:cc:34: b8:a1:28:b7:42:73:f5:b8:4c:99:f7:02:67:2d:95:ef:6e:b0: f2:07:7c:4a:44:fd:c0:ea:8a:62:eb:bf:d0:84:19:33:2f:5c: 80:04:b3:6e:72:d3:ae:b5:93:88:9c:f9:6a:2d:e5:ac:f5:d6: 9e:b3:d0:e3:1a:eb:1d:81:b3:43:11:d7:59:d1:76:37:8c:ec: 64:b9:b1:8a:38:22:5b:f7:15:31:19:fe:c8:c6:d2:d1:cd:f6: bb:58:7f:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfAXBN5xmkCiF4CsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEwMzAxMDAzNloXDTI1MDIwMTAyMDAzNlowLzEtMCsGA1UEAxMk ZjlmNmJiOWYtOTY4OC00NTJmLTg4NzItMDVkOTY4NWM3MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpysiYtRyqVvwSTvkIC+ISY6/Z1mMmN348uI IjBIK10wndvf7/+1vW7GqVFLIXU/XZdN5i/QGJUGSVjsglUMHnb3NN/yGfnCjsjH lLzaO6xIsem6U4twEgBXEgtI99XTnekGiPLFBQXYUNZ6UwS/R5h+YHnG68nuhnJM rHNSA1wEubd0ZDwURHaidNTFAfBYbZHcaOe0OHO0ecFEmqEX3kmNHcmuBlifk2Ht VKRc3yfnLJXPlE2qwDXKd+6+U0oajPxtYpN7QiG2TBnUDd16Rp/8C/hX1kTSDtgi RfueLN3BfPeqyxldTpR2e9zY8+18HfDU5/lIIRvbD7kMQnzV6wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFkItOaEscjqhQDuv2IsAXzcXXg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzRmMGI1M2ItODBhOS0z NzczLTk5ZDMtMTA4ZjAwMmU0MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxhBkAwQB xhBqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIfO6bku1dnWbW91jN0K3m+tZ5HEOmEfaTv/P7xiOGJjk8vL 6c2daELuG19+nux3/fIjI+DEzZ/21/IuXSf85v+FtMTXU6wVq43699jurpauFZTM zWyh8RoQrADIEyQLgCU2YrclNt3O3U3CdIi83VGboxIwnd6FicSTeJhvqQG2tIVo F43KNU2O7WuqziVGrK78eTydB3c7bYSIuUTD6dDMNLihKLdCc/W4TJn3Amctle9u sPIHfEpE/cDqimLrv9CEGTMvXIAEs25y0661k4ic+Wot5az11p6z0OMa6x2Bs0MR 11nRdjeM7GS5sYo4Ilv3FTEZ/sjG0tHN9rtYf04= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org