$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json) Hash identifier: Z8XuMPPIpPsucopH6y4geqF7LqgcxEeSVj8IOH3eqU8= Subject key identifier: D3:45:51:3A:EC:37:EF:A1:F3:87:39:B8:D8:E5:48:EB:4A:BF:4E:70 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F43285846F8C02C3E52AF411984CE8580 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa Signing time: Fri 23 Aug 2024 13:00:41 +0000 ROA not before: Fri 23 Aug 2024 13:00:41 +0000 ROA not after: Thu 21 Nov 2024 14:00:41 +0000 asID: 32854 IP address blocks: 169.197.172.0/24 maxlen: 24 169.197.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f8:c0:2c:3e:52:af:41:19:84:ce:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Aug 23 13:00:41 2024 GMT Not After : Nov 21 14:00:41 2024 GMT Subject: CN=16b1f783-b984-4d24-bd6e-c10d440c23e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:48:cd:90:75:e1:41:7d:62:fd:75:05:a1: bf:63:78:e9:dc:09:c0:7b:77:64:79:fa:87:17:93: d9:84:ec:34:07:ac:a8:d4:89:4a:c0:a1:8e:92:27: b8:17:92:d7:1c:f7:52:2b:44:62:5c:2d:ad:ca:a3: f2:7e:ba:7d:c1:99:29:3f:de:5d:02:64:a2:c1:9f: c2:e1:ec:79:37:2f:13:cb:d8:19:12:ef:d5:0b:f3: 6b:a7:c4:1b:e2:82:72:55:1b:f1:d3:03:2f:21:7c: 51:42:8b:47:a7:5a:38:65:4c:99:90:eb:fa:d2:05: 9e:0f:f1:e8:17:1d:33:4c:60:35:f7:81:53:7a:e4: d3:fe:f0:3c:8b:fa:98:7d:37:25:7f:be:35:8a:8f: f4:54:c2:84:c3:7e:3a:fd:bd:df:99:65:9a:6a:d8: 11:7e:fd:cd:ab:24:97:9d:bb:2a:0a:e0:7f:5a:35: ca:4d:06:94:b0:e6:56:1b:7d:8c:04:90:15:a1:23: 7a:1e:19:63:06:7d:4d:4f:61:8b:df:89:10:82:9d: d7:21:36:ec:70:58:98:90:17:ce:c9:ae:50:66:3f: 33:8e:a4:47:7b:bb:5d:2a:1d:03:82:3f:b6:71:9f: 48:d3:18:6a:d0:5b:b2:db:e4:e0:2e:84:32:80:d0: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:51:3A:EC:37:EF:A1:F3:87:39:B8:D8:E5:48:EB:4A:BF:4E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:de:20:35:90:98:5d:8e:39:59:e1:fc:07:d2:76:f7:a4:84: 8b:0a:a5:2f:8c:f3:f9:92:d0:7a:60:93:4b:1f:56:27:0c:00: 2d:7f:b3:60:97:f5:9a:7c:d9:fd:e7:f9:11:8b:d4:ad:01:18: 1e:39:7f:be:b4:ed:e5:6d:5d:9e:88:0e:0b:01:5d:6c:bc:1d: af:16:b7:e6:07:1d:f5:fb:36:df:bf:f8:66:9c:89:c3:8c:46: ab:1a:b4:50:b9:7e:8a:47:b3:0f:7c:84:72:ae:b0:7b:4f:d0: 36:cb:e2:38:6e:3c:22:b9:78:7a:13:04:34:85:11:88:55:a4: a5:4c:ec:a5:33:d1:a4:51:d1:20:c8:f4:eb:c0:48:36:28:fe: 2c:31:45:82:79:8f:a0:43:ce:d2:63:94:de:80:be:bd:63:7d: e7:fe:c1:87:8b:a6:cb:4c:47:95:85:8b:ad:aa:f0:13:e6:46: 77:dd:66:73:95:23:ef:d6:1b:46:ca:b7:b7:c7:1b:6e:7d:81: 2f:29:1d:a0:d7:b7:12:2f:34:07:83:ac:97:ce:fb:ab:4d:f1: 8c:3a:0f:23:cd:c5:cb:2d:27:64:76:2b:e2:6c:b2:14:ab:6d: e8:aa:5f:c2:43:df:33:f6:e0:c4:d8:16:9f:6e:44:45:50:65: bb:9f:3e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb4wCw+Uq9BGYTOhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI0MDgyMzEzMDA0MVoXDTI0MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk MTZiMWY3ODMtYjk4NC00ZDI0LWJkNmUtYzEwZDQ0MGMyM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDlIzZB14UF9Yv11BaG/Y3jp3AnAe3dkefqH F5PZhOw0B6yo1IlKwKGOkie4F5LXHPdSK0RiXC2tyqPyfrp9wZkpP95dAmSiwZ/C 4ex5Ny8Ty9gZEu/VC/Nrp8Qb4oJyVRvx0wMvIXxRQotHp1o4ZUyZkOv60gWeD/Ho Fx0zTGA194FTeuTT/vA8i/qYfTclf741io/0VMKEw346/b3fmWWaatgRfv3NqySX nbsqCuB/WjXKTQaUsOZWG32MBJAVoSN6HhljBn1NT2GL34kQgp3XITbscFiYkBfO ya5QZj8zjqRHe7tdKh0Dgj+2cZ9I0xhq0Fuy2+TgLoQygNApHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNFUTrsN++h84c5uNjlSOtKv05wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvYTMyNzhmZDgtOTY5Yi0z ZDdhLWI3YzEtZTVmNGFhYmEwNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqcWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLeIDWQmF2OOVnh/AfSdvekhIsKpS+M8/mS0Hpgk0sfVicMAC1/s2CX 9Zp82f3n+RGL1K0BGB45f7607eVtXZ6IDgsBXWy8Ha8Wt+YHHfX7Nt+/+GacicOM RqsatFC5fopHsw98hHKusHtP0DbL4jhuPCK5eHoTBDSFEYhVpKVM7KUz0aRR0SDI 9OvASDYo/iwxRYJ5j6BDztJjlN6Avr1jfef+wYeLpstMR5WFi62q8BPmRnfdZnOV I+/WG0bKt7fHG259gS8pHaDXtxIvNAeDrJfO+6tN8Yw6DyPNxcstJ2R2K+JsshSr beiqX8JD3zP24MTYFp9uREVQZbufPiI= -----END CERTIFICATE-----Generated at Sat Sep 28 20:58:32 2024 by rpki-client on console-ams.rpki-client.org