$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa File: 2aa91757-41a3-3878-bde1-4f11a5d770af.roa (raw, json) Hash identifier: U6SgfihjyCFWNJimmzEM9WkIr9lXYo3oo3jSjZVSwC8= Subject key identifier: D2:BE:58:8D:9E:B8:3D:49:95:F3:9B:C3:CA:62:8A:A7:53:E1:64:4E Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285847EE8A2E4D23A967E687938240 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 33442 IP address blocks: 157.235.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:2e:4d:23:a9:67:e6:87:93:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=ab2a06c5-48fa-4270-96cb-c08d45f8a6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:3a:dc:46:f3:02:6e:0b:86:1c:55:63:a8: 43:0b:e7:91:f9:10:00:70:a6:5f:37:76:90:dd:90: e9:44:b1:0b:fd:7f:dd:42:ce:48:bb:dc:1d:1a:f8: 31:2a:82:57:62:d2:5b:e1:65:1e:33:5e:ab:be:c3: 45:f0:58:6c:ea:56:87:73:8a:b8:02:47:0a:2b:71: ba:b8:c8:61:e6:59:04:e8:8b:e6:3b:fb:54:c5:cd: fa:21:8f:2d:23:b0:9b:e8:a5:7b:ef:0e:9e:28:39: b4:3e:39:67:da:26:22:59:05:4c:79:71:6b:b6:78: 74:cf:5c:b3:02:9c:c5:10:56:b3:8e:7a:1e:ed:71: b5:99:33:f3:39:04:e2:aa:0e:54:37:a7:31:2f:eb: 43:e7:ae:07:d8:49:8b:64:db:13:e3:93:63:6e:3f: 01:79:72:34:b8:9b:a3:12:33:70:90:9e:5a:a5:d4: 3f:df:c8:e8:16:72:d4:0b:ae:3c:6a:4b:cf:bc:de: 3d:b8:f1:32:be:3b:db:38:e0:a7:f1:b0:f8:b0:61: 7c:52:f4:a5:24:c9:b8:22:7f:40:d5:1d:43:b1:45: aa:d2:3e:4a:af:a5:51:8d:82:61:78:fe:6c:ba:79: f6:52:dc:41:2c:0a:b9:2e:0d:ac:86:0f:82:d4:fb: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:58:8D:9E:B8:3D:49:95:F3:9B:C3:CA:62:8A:A7:53:E1:64:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/2aa91757-41a3-3878-bde1-4f11a5d770af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fe:a4:f0:07:2b:c8:8c:3d:9d:d3:89:98:8c:44:0d:6c:2b: 25:1a:4f:28:bb:f9:c5:61:6a:f3:d1:4c:4a:fa:93:ef:87:4f: 4f:1c:8f:e5:60:c7:38:95:ec:e3:89:ce:a4:79:37:ef:86:a4: 0b:c6:1a:de:f9:c5:13:5c:17:65:39:46:4b:3f:0c:7b:a3:c6: cd:86:ff:c9:5a:ba:b0:da:d2:06:0e:35:fd:4a:b1:57:85:bf: 70:28:f6:75:c9:a6:f2:1d:df:ad:2d:3d:57:a0:b8:46:f4:32: a2:c0:1d:19:7d:32:18:f7:87:a8:17:57:12:3f:a0:75:19:53: e4:f0:16:c1:5f:6f:3b:a7:52:29:4e:51:b4:46:af:fc:f5:86: 1d:94:d8:e1:83:da:dc:bc:53:b9:0f:60:b2:60:f4:ab:7a:72: 84:3c:90:2c:8e:93:bc:4d:d4:16:0b:5f:b8:2c:d4:9c:50:d1: 58:c2:cf:6d:7a:50:eb:31:33:67:d4:df:09:24:f7:cd:d3:09: 80:71:60:fe:14:af:c0:c4:87:53:1b:22:34:e7:a1:b2:d9:45: cb:32:fa:18:c5:22:93:89:32:00:7f:05:b1:d2:37:5c:62:e1: c7:0e:93:17:54:f2:37:d0:a9:e5:fa:1d:73:f4:92:ae:71:d9: 19:40:a2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuii5NI6ln5oeTgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk YWIyYTA2YzUtNDhmYS00MjcwLTk2Y2ItYzA4ZDQ1ZjhhNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxs63EbzAm4LhhxVY6hDC+eR+RAAcKZfN3aQ 3ZDpRLEL/X/dQs5Iu9wdGvgxKoJXYtJb4WUeM16rvsNF8Fhs6laHc4q4AkcKK3G6 uMhh5lkE6IvmO/tUxc36IY8tI7Cb6KV77w6eKDm0Pjln2iYiWQVMeXFrtnh0z1yz ApzFEFazjnoe7XG1mTPzOQTiqg5UN6cxL+tD564H2EmLZNsT45Njbj8BeXI0uJuj EjNwkJ5apdQ/38joFnLUC648akvPvN49uPEyvjvbOOCn8bD4sGF8UvSlJMm4In9A 1R1DsUWq0j5Kr6VRjYJheP5sunn2UtxBLAq5Lg2shg+C1PtcwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK+WI2euD1JlfObw8piiqdT4WROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMmFhOTE3NTctNDFhMy0z ODc4LWJkZTEtNGYxMWE1ZDc3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnesnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv+pPAHK8iMPZ3TiZiMRA1sKyUaTyi7+cVhavPRTEr6k++HT08cj+Vg xziV7OOJzqR5N++GpAvGGt75xRNcF2U5Rks/DHujxs2G/8laurDa0gYONf1KsVeF v3Ao9nXJpvId360tPVeguEb0MqLAHRl9Mhj3h6gXVxI/oHUZU+TwFsFfbzunUilO UbRGr/z1hh2U2OGD2ty8U7kPYLJg9Kt6coQ8kCyOk7xN1BYLX7gs1JxQ0VjCz216 UOsxM2fU3wkk983TCYBxYP4Ur8DEh1MbIjTnobLZRcsy+hjFIpOJMgB/BbHSN1xi 4ccOkxdU8jfQqeX6HXP0kq5x2RlAoks= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org