$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa File: 53a28954-9970-39e6-a84e-6fc7573780fa.roa (raw, json) Hash identifier: PaJQL71HQyL91S9BR6hGAqo5beHnh171yFiFVCSP4nA= Subject key identifier: 95:BA:96:17:FF:E4:30:FB:02:A8:02:89:20:2F:26:88:76:0E:8F:71 Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F432858478A30EDFA4D6A8EC9CF95D980 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa Signing time: Mon 14 Oct 2024 15:20:05 +0000 ROA not before: Mon 14 Oct 2024 15:20:05 +0000 ROA not after: Sun 12 Jan 2025 16:20:05 +0000 asID: 8075 IP address blocks: 170.39.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8a:30:ed:fa:4d:6a:8e:c9:cf:95:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Oct 14 15:20:05 2024 GMT Not After : Jan 12 16:20:05 2025 GMT Subject: CN=7e41d899-52f0-410e-9ced-0d873a915012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:5c:9c:47:ee:b7:83:3f:b7:23:3d:ec:ed: 89:bd:98:67:1f:10:30:bb:16:48:f4:3c:a2:09:57: 1e:ef:24:e1:97:91:16:04:30:97:77:ad:0b:d6:be: 0c:43:de:ac:bb:0d:6c:5c:5f:4d:fb:8e:24:ac:3b: 04:20:da:e6:e5:fc:f4:7d:44:5c:7c:6d:b8:59:3c: 00:9a:f0:d3:8c:99:5a:eb:7e:0d:d3:57:e9:80:f5: 3c:14:cb:6f:84:85:c7:99:3c:56:a7:d2:bd:ed:6f: 84:66:6b:80:e7:3a:6e:d9:2b:a0:1a:e5:11:fd:f4: 3f:31:10:58:47:90:0d:2b:75:d5:4e:ea:6b:b1:f8: be:b7:90:fb:a2:94:12:14:5e:a1:20:1e:bc:fd:2a: f3:39:29:27:d7:88:bf:fd:fb:b8:56:50:fe:9f:f1: 84:63:b7:b4:22:3a:2b:cb:2a:3f:72:4a:fb:d9:63: ea:f5:23:88:c5:bf:8d:0a:16:64:74:c8:eb:86:fe: f0:1d:95:80:76:38:ab:7d:4f:be:08:80:20:c9:79: 93:af:eb:f6:40:dc:f5:1d:b5:1d:69:4b:db:8e:c3: 1f:6f:f9:38:9c:d1:c0:cc:95:ea:e6:25:2e:05:f6: b9:79:a4:64:fd:7d:91:41:19:b1:de:ad:58:e9:61: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BA:96:17:FF:E4:30:FB:02:A8:02:89:20:2F:26:88:76:0E:8F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 170.39.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:cf:49:62:c3:12:d0:53:12:4e:13:06:43:2e:20:ed:0a:a5: 4a:fd:f1:27:a2:45:61:0f:5e:b8:aa:a6:65:30:5f:d8:74:7a: 3d:1b:6e:78:8a:89:a2:8f:82:bd:50:0f:d6:eb:b8:39:b1:1b: ff:47:58:49:b7:ad:d2:f7:af:50:36:d6:8c:04:72:8c:53:a1: 69:a4:38:cc:2d:6e:6f:e5:cb:60:43:be:f8:98:51:0b:ea:5a: f8:6e:1d:f8:67:57:97:45:51:07:c1:34:72:dc:9b:9b:1b:51: e5:97:9d:aa:73:07:51:37:ba:18:8c:c6:a3:90:30:c4:6f:2b: 03:0c:1c:ba:b3:65:f1:2a:29:79:7f:f7:a9:08:6f:75:c5:43: fc:b4:39:20:79:eb:3d:11:94:38:27:bf:9e:73:d2:f8:49:7d: 19:76:79:02:fe:36:ca:35:91:42:4e:1c:f8:eb:e8:16:57:a0: dd:44:ea:7c:01:68:e8:1d:5c:71:5f:d9:47:aa:d7:cd:c4:c8: 6c:27:b7:98:d7:c6:1f:f2:ab:54:90:44:3a:a8:c7:b4:fb:a6: 7d:ea:a7:40:99:9e:37:12:f7:c4:92:e7:85:f1:64:64:bc:ac: ac:f7:39:f5:d0:c3:de:4b:80:ac:d7:50:bc:8e:56:4e:c3:dd: 32:2f:ad:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeKMO36TWqOyc+V2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI0MTAxNDE1MjAwNVoXDTI1MDExMjE2MjAwNVowLzEtMCsGA1UEAxMk N2U0MWQ4OTktNTJmMC00MTBlLTljZWQtMGQ4NzNhOTE1MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpcnEfut4M/tyM97O2JvZhnHxAwuxZI9Dyi CVce7yThl5EWBDCXd60L1r4MQ96suw1sXF9N+44krDsEINrm5fz0fURcfG24WTwA mvDTjJla634N01fpgPU8FMtvhIXHmTxWp9K97W+EZmuA5zpu2SugGuUR/fQ/MRBY R5ANK3XVTuprsfi+t5D7opQSFF6hIB68/SrzOSkn14i//fu4VlD+n/GEY7e0Ijor yyo/ckr72WPq9SOIxb+NChZkdMjrhv7wHZWAdjirfU++CIAgyXmTr+v2QNz1HbUd aUvbjsMfb/k4nNHAzJXq5iUuBfa5eaRk/X2RQRmx3q1Y6WGEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW6lhf/5DD7AqgCiSAvJoh2Do9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvNTNhMjg5NTQtOTk3MC0z OWU2LWE4NGUtNmZjNzU3Mzc4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7PSWLDEtBTEk4TBkMuIO0KpUr98SeiRWEPXriqpmUwX9h0ej0bbniK iaKPgr1QD9bruDmxG/9HWEm3rdL3r1A21owEcoxToWmkOMwtbm/ly2BDvviYUQvq WvhuHfhnV5dFUQfBNHLcm5sbUeWXnapzB1E3uhiMxqOQMMRvKwMMHLqzZfEqKXl/ 96kIb3XFQ/y0OSB56z0RlDgnv55z0vhJfRl2eQL+Nso1kUJOHPjr6BZXoN1E6nwB aOgdXHFf2Ueq183EyGwnt5jXxh/yq1SQRDqox7T7pn3qp0CZnjcS98SS54XxZGS8 rKz3OfXQw95LgKzXULyOVk7D3TIvrVQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org