$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5959833a-4d81-3b39-9cc7-075477022088.roa File: 5959833a-4d81-3b39-9cc7-075477022088.roa (raw, json) Hash identifier: OD1eAY361BqctNPeHCBWYmbxTO81MU2peF65oaxAaHA= Subject key identifier: FA:A5:E2:93:42:B9:99:1D:67:C7:40:74:F5:3C:E4:41:14:85:D3:C7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847825164569B8B5D9291EF1180 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5959833a-4d81-3b39-9cc7-075477022088.roa Signing time: Fri 11 Oct 2024 19:39:02 +0000 ROA not before: Fri 11 Oct 2024 19:39:02 +0000 ROA not after: Thu 09 Jan 2025 20:39:02 +0000 asID: 1239 IP address blocks: 198.255.8.0/23 maxlen: 24 198.255.10.0/23 maxlen: 24 2001:49f0:d01d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:51:64:56:9b:8b:5d:92:91:ef:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 11 19:39:02 2024 GMT Not After : Jan 9 20:39:02 2025 GMT Subject: CN=12269e86-0590-4ee9-8906-5c9e6c4865e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:5d:72:18:25:d0:30:f4:c0:e3:b1:8f:e0: b5:4f:53:69:d6:2f:3a:66:34:4c:d1:0e:20:c8:f9: 45:27:c1:25:d9:20:3f:27:36:12:56:e2:db:2e:fc: 06:d5:32:9a:5e:de:42:65:19:55:53:ca:d5:04:85: 3a:a2:d6:f9:fe:97:fb:77:5f:6e:73:ee:a4:c7:c9: a7:57:be:70:b5:7a:2c:c8:46:98:95:89:69:1a:fd: 59:46:25:62:d2:d2:b1:49:e1:5d:8e:d2:9b:50:db: 1a:c5:f7:ef:17:e5:3b:26:4c:8f:fc:56:f6:a9:e3: 3c:80:75:24:47:86:1e:33:b2:d6:90:9e:8c:6c:55: 7d:c2:52:3f:b5:49:ce:88:a6:bd:5f:2d:1f:79:21: fd:39:0e:56:5e:42:b7:f2:ff:12:7d:1f:dc:24:a5: f1:db:19:56:2a:5d:00:16:55:69:00:69:4b:d7:0d: 46:ff:c0:52:95:19:a3:3a:bd:d0:8b:4c:0f:3d:f4: 68:0f:bf:d1:74:a5:70:35:43:b7:80:1a:16:ef:e6: 30:b7:5e:b7:66:7d:ed:71:28:55:e4:6b:26:58:15: c4:a8:ce:58:ab:60:27:c4:f7:95:4d:9a:4d:5a:20: 32:85:40:fd:2e:ee:88:25:17:3c:97:7e:b5:f6:3f: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A5:E2:93:42:B9:99:1D:67:C7:40:74:F5:3C:E4:41:14:85:D3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5959833a-4d81-3b39-9cc7-075477022088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.255.8.0/22 IPv6: 2001:49f0:d01d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c7:cb:28:e5:3b:46:77:d3:fb:29:44:51:44:ea:05:e0:21: a6:f1:b3:05:6d:4f:43:fb:2f:f7:44:14:da:dd:8f:7c:d8:f3: 7f:1d:d2:02:df:0d:6b:ab:a3:f2:5c:64:0e:14:26:a9:6b:b9: ca:27:c4:c7:c0:b4:f2:94:63:c3:42:6a:37:42:f0:c7:de:f7: b4:be:c0:21:0b:77:2e:6c:c9:ee:44:7e:2c:96:23:69:8e:93: fb:d4:50:c8:af:6f:cb:cd:9a:59:aa:de:34:62:16:e4:e5:dd: a1:26:6d:6e:da:08:41:42:f8:17:5b:60:a0:20:e2:f1:50:83: e1:1b:fb:14:ae:a2:84:bb:69:db:2c:9f:01:bf:db:b7:b7:e0: 7a:ac:36:2f:2d:de:5b:8b:ac:88:29:9a:cb:5c:78:77:6d:14: 27:b2:54:85:ce:c1:93:b3:94:c1:10:0d:15:66:49:bf:12:09: d4:aa:b7:90:6c:cd:fd:0d:78:21:1e:87:af:81:2e:08:42:b3: 87:ce:2a:af:e5:bb:01:d2:64:17:d9:0a:0a:83:61:17:ff:50: 57:c7:94:95:d2:83:8c:d1:19:53:c7:96:77:a4:7b:61:2c:aa: c1:8f:5d:b8:93:72:c6:c0:7d:50:8c:77:37:36:88:37:78:ac: 3f:fd:7d:38 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEeCUWRWm4tdkpHvEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTAxMTE5MzkwMloXDTI1MDEwOTIwMzkwMlowLzEtMCsGA1UEAxMk MTIyNjllODYtMDU5MC00ZWU5LTg5MDYtNWM5ZTZjNDg2NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUZdchgl0DD0wOOxj+C1T1Np1i86ZjRM0Q4g yPlFJ8El2SA/JzYSVuLbLvwG1TKaXt5CZRlVU8rVBIU6otb5/pf7d19uc+6kx8mn V75wtXosyEaYlYlpGv1ZRiVi0tKxSeFdjtKbUNsaxffvF+U7JkyP/Fb2qeM8gHUk R4YeM7LWkJ6MbFV9wlI/tUnOiKa9Xy0feSH9OQ5WXkK38v8SfR/cJKXx2xlWKl0A FlVpAGlL1w1G/8BSlRmjOr3Qi0wPPfRoD7/RdKVwNUO3gBoW7+Ywt163Zn3tcShV 5GsmWBXEqM5Yq2AnxPeVTZpNWiAyhUD9Lu6IJRc8l3619j+luQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPql4pNCuZkdZ8dAdPU85EEUhdPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNTk1OTgzM2EtNGQ4MS0z YjM5LTljYzctMDc1NDc3MDIyMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCxv8IMA8E AgACMAkDBwAgAUnw0B0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAocfLKOU7RnfT+ylEUUTqBeAhpvGzBW1P Q/sv90QU2t2PfNjzfx3SAt8Na6uj8lxkDhQmqWu5yifEx8C08pRjw0JqN0Lwx973 tL7AIQt3LmzJ7kR+LJYjaY6T+9RQyK9vy82aWareNGIW5OXdoSZtbtoIQUL4F1tg oCDi8VCD4Rv7FK6ihLtp2yyfAb/bt7fgeqw2Ly3eW4usiCmay1x4d20UJ7JUhc7B k7OUwRANFWZJvxIJ1Kq3kGzN/Q14IR6Hr4EuCEKzh84qr+W7AdJkF9kKCoNhF/9Q V8eUldKDjNEZU8eWd6R7YSyqwY9duJNyxsB9UIx3NzaIN3isP/19OA== -----END CERTIFICATE-----Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org