$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa File: 40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json) Hash identifier: j7OMVhcjcu9FgYiTYWdQXJ2w4P1XzuPeIc36UbRv/AE= Subject key identifier: 77:C3:9C:7C:A0:9A:9D:4F:15:D5:76:18:D2:DC:C1:A3:BA:65:B4:8F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285847AB6C1C25D1722E1F1D391850 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 30103 IP address blocks: 161.199.138.0/23 maxlen: 24 198.251.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:1c:25:d1:72:2e:1f:1d:39:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=19962794-273b-4bdf-9895-3fbee013f094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:31:42:8e:ff:4a:53:b6:04:ee:84:44:5b: d3:df:d6:ce:c9:09:2c:83:83:e3:d9:4a:bd:3f:32: ed:30:88:78:3c:03:aa:b2:79:cd:65:14:9e:b0:cc: 16:aa:5b:58:8b:4d:9d:5e:be:2f:4e:2c:98:21:b5: d0:57:b3:ce:a4:a5:31:93:db:f1:03:69:61:0b:bd: 83:ab:86:10:fd:20:ef:59:f8:a3:94:38:a4:9e:b9: 90:b7:33:aa:fb:32:38:ab:f9:dd:29:77:57:ae:07: 39:ff:1a:51:0b:53:1c:01:7b:27:53:02:fd:ca:06: ea:04:b5:45:d0:0d:0b:32:78:e2:d6:29:25:fc:df: 0c:f7:1a:45:77:af:d9:74:f0:f2:6c:ff:52:b7:5c: 6b:15:4e:4a:f6:90:22:21:04:2e:4a:98:7b:7f:21: f7:c9:35:2a:33:1d:82:e5:92:3d:b1:5d:e6:e1:0d: af:72:12:80:ee:d2:da:d0:7f:58:e0:f8:b8:3b:18: d0:20:e8:7a:07:8f:67:8c:d4:c1:3c:46:49:01:96: b4:53:f6:c5:d6:55:e1:db:7f:0e:f9:f2:0f:11:59: df:6e:ac:50:e8:e3:72:a0:a7:af:0c:14:2e:32:d2: 59:8d:8d:08:e7:85:01:5a:77:32:f0:83:dd:f1:a5: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C3:9C:7C:A0:9A:9D:4F:15:D5:76:18:D2:DC:C1:A3:BA:65:B4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.138.0/23 198.251.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f9:cc:03:db:d5:22:5b:94:4e:73:c6:38:60:42:83:16:f3: ca:d9:61:aa:03:a3:01:64:3f:a0:57:01:a3:75:17:b2:32:28: 45:08:0a:82:02:64:62:03:55:13:a4:22:2b:36:3c:89:a0:03: 5c:91:db:58:4a:69:e1:64:cf:57:e2:df:05:e1:56:d7:68:1c: 4a:06:6e:33:94:ab:99:8b:ad:b9:df:3e:32:70:ef:b1:e7:55: 4d:7c:e8:58:e1:b8:81:31:0a:ee:16:79:aa:aa:29:b6:26:14: 56:82:96:d1:fd:b0:64:af:4b:49:9e:8d:42:a0:76:e0:fd:c3: a0:1e:27:48:03:10:69:d4:44:e7:f6:e4:03:64:66:a6:d2:e0: cc:dc:66:ea:af:47:ef:23:bf:78:c8:e5:ed:1f:9d:86:cd:a1: b9:4c:ec:fb:fa:2b:eb:1c:c3:ce:a2:cc:c7:c8:7e:1b:bd:4b: e7:80:82:f4:a3:cf:cc:16:a0:9f:9a:58:a2:dc:af:7d:b0:0f: c5:37:c0:4e:f3:aa:26:4e:ec:25:49:a9:45:d4:1d:bb:f3:16: 32:62:39:ed:8c:f0:2b:26:48:bf:4f:57:8a:e5:b2:01:df:f9: 14:47:b6:6e:ee:8f:2a:79:d8:ad:b3:da:0a:a3:a7:d2:74:4c: 9d:39:32:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEerbBwl0XIuHx05GFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MTk5NjI3OTQtMjczYi00YmRmLTk4OTUtM2ZiZWUwMTNmMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIxQo7/SlO2BO6ERFvT39bOyQksg4Pj2Uq9 PzLtMIh4PAOqsnnNZRSesMwWqltYi02dXr4vTiyYIbXQV7POpKUxk9vxA2lhC72D q4YQ/SDvWfijlDiknrmQtzOq+zI4q/ndKXdXrgc5/xpRC1McAXsnUwL9ygbqBLVF 0A0LMnji1ikl/N8M9xpFd6/ZdPDybP9St1xrFU5K9pAiIQQuSph7fyH3yTUqMx2C 5ZI9sV3m4Q2vchKA7tLa0H9Y4Pi4OxjQIOh6B49njNTBPEZJAZa0U/bF1lXh238O +fIPEVnfbqxQ6ONyoKevDBQuMtJZjY0I54UBWncy8IPd8aXtuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHfDnHygmp1PFdV2GNLcwaO6ZbSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDBlM2YzMjItYTIxNi0z YzNmLWI5NGYtMjcxYzZkZGIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceKAwQD xvv4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHn5zAPb1SJblE5zxjhgQoMW88rZYaoDowFkP6BXAaN1F7Iy KEUICoICZGIDVROkIis2PImgA1yR21hKaeFkz1fi3wXhVtdoHEoGbjOUq5mLrbnf PjJw77HnVU186FjhuIExCu4WeaqqKbYmFFaCltH9sGSvS0mejUKgduD9w6AeJ0gD EGnUROf25ANkZqbS4MzcZuqvR+8jv3jI5e0fnYbNoblM7Pv6K+scw86izMfIfhu9 S+eAgvSjz8wWoJ+aWKLcr32wD8U3wE7zqiZO7CVJqUXUHbvzFjJiOe2M8CsmSL9P V4rlsgHf+RRHtm7ujyp52K2z2gqjp9J0TJ05MsM= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:24 2024 by rpki-client on console-ams.rpki-client.org