$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: TyTtrODXoGFyfU181/WsfTm5q7YmDIH/0m4nC0MiN7k= Subject key identifier: E1:7A:92:40:12:11:BC:02:F1:42:1F:A5:D2:7C:EF:BC:C2:FA:42:70 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858476C9DB96812C5605AFD5079E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b9:68:12:c5:60:5a:fd:50:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=fdcb52a5-d54f-4114-aa3e-f9e6f1b64ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:db:45:d6:25:4c:35:1c:8e:f6:77:67:e2: 42:38:8c:fd:af:d2:e9:1a:58:07:40:38:7c:cc:58: 74:e4:83:51:42:16:9b:28:60:10:79:3f:63:3b:e5: 7f:19:29:b5:c8:45:61:04:89:71:29:13:f7:50:b1: 11:2c:28:f2:0d:9d:f9:14:14:65:78:c5:f0:65:1c: 3b:a2:e2:13:30:c6:af:26:b7:45:c4:aa:0f:77:85: 9d:e7:0e:d2:66:20:97:0f:fb:1e:0d:81:05:c4:c0: 2a:09:e5:cf:92:f3:04:1c:4c:52:13:73:5c:99:11: cf:a6:79:94:8b:6d:84:33:29:90:1f:43:ad:50:bc: a2:08:c6:62:98:ab:7b:8b:86:31:e0:5b:b4:80:27: bc:75:21:a3:77:86:cf:09:52:be:14:18:47:d2:42: 0e:d1:16:1e:61:20:14:5a:c8:ba:12:33:9a:d0:3b: ef:14:e0:6d:1e:81:93:cc:42:73:99:c3:93:5b:0a: 77:b3:bd:10:47:42:89:f8:da:fe:0d:7c:66:61:50: 63:73:51:35:88:77:67:91:a5:fb:5e:a4:7c:29:42: 8a:74:1e:d3:d9:77:09:07:4b:7b:d2:62:f1:e0:23: 78:1c:cf:86:10:ff:ee:03:9e:0d:60:97:3e:79:8f: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:92:40:12:11:BC:02:F1:42:1F:A5:D2:7C:EF:BC:C2:FA:42:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:38:c1:7c:de:91:f6:f4:a5:8e:f0:11:df:04:8e:b1:f8:1b: f7:ab:ac:00:b7:83:3c:c2:31:dc:32:d8:49:65:f8:5d:4d:28: ea:bc:48:29:93:69:cf:c6:6f:8c:97:0d:32:6b:dc:a4:15:6c: 8c:eb:d8:fd:b8:f4:07:1b:53:38:d3:bc:e6:4d:f0:b8:ae:bb: b4:01:49:73:1c:60:cf:8a:e8:f3:1b:cc:1e:f2:39:a3:a4:bb: ab:bd:7d:09:20:83:44:4e:1b:68:c1:2b:f8:85:47:ea:68:6c: 5c:e3:61:cb:f2:46:2e:6a:9d:42:88:47:a8:c0:26:48:29:67: 7a:ea:74:df:25:9b:9f:4a:24:35:73:b6:f7:db:75:56:a6:cf: 58:86:b0:8f:6a:37:ff:07:9b:ab:ad:02:3d:be:e1:06:b9:af: 07:73:75:28:75:5e:b8:e7:ab:15:39:91:ca:ae:d2:19:d5:49: cf:3b:12:e4:e7:dd:8a:5d:82:5c:99:9e:db:7c:47:34:07:95: f8:dd:0f:36:e9:d3:5d:d6:92:94:07:1e:b4:a5:8f:54:63:c3: 29:e6:98:f3:90:05:06:51:95:81:45:07:eb:13:b2:c2:c6:7d: f0:ed:ba:cc:9b:52:9f:a5:d8:b3:ee:a8:27:01:fc:86:2a:5b: fe:8e:de:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbloEsVgWv1QeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmRjYjUyYTUtZDU0Zi00MTE0LWFhM2UtZjllNmYxYjY0YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD3bRdYlTDUcjvZ3Z+JCOIz9r9LpGlgHQDh8 zFh05INRQhabKGAQeT9jO+V/GSm1yEVhBIlxKRP3ULERLCjyDZ35FBRleMXwZRw7 ouITMMavJrdFxKoPd4Wd5w7SZiCXD/seDYEFxMAqCeXPkvMEHExSE3NcmRHPpnmU i22EMymQH0OtULyiCMZimKt7i4Yx4Fu0gCe8dSGjd4bPCVK+FBhH0kIO0RYeYSAU Wsi6EjOa0DvvFOBtHoGTzEJzmcOTWwp3s70QR0KJ+Nr+DXxmYVBjc1E1iHdnkaX7 XqR8KUKKdB7T2XcJB0t70mLx4CN4HM+GEP/uA54NYJc+eY/uNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF6kkASEbwC8UIfpdJ877zC+kJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI4wXzekfb0pY7wEd8EjrH4G/errAC3gzzCMdwy2Ell+F1NKOq8SCmT ac/Gb4yXDTJr3KQVbIzr2P249AcbUzjTvOZN8Liuu7QBSXMcYM+K6PMbzB7yOaOk u6u9fQkgg0ROG2jBK/iFR+pobFzjYcvyRi5qnUKIR6jAJkgpZ3rqdN8lm59KJDVz tvfbdVamz1iGsI9qN/8Hm6utAj2+4Qa5rwdzdSh1XrjnqxU5kcqu0hnVSc87EuTn 3YpdglyZntt8RzQHlfjdDzbp013WkpQHHrSlj1RjwynmmPOQBQZRlYFFB+sTssLG ffDtusybUp+l2LPuqCcB/IYqW/6O3oA= -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:56 2024 by rpki-client on console-fra.rpki-client.org