$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa File: afacf306-7cf6-36d2-a604-be3e1443c68b.roa (raw, json) Hash identifier: ZxgLkC2sB3JL6syNx8gMg/pMUNRyvhEbKnwK+29IbLI= Subject key identifier: D7:68:5B:7C:3E:58:AD:E2:2D:4F:63:19:27:4A:A3:1A:DF:B3:5E:8A Certificate issuer: /CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49 Certificate serial: 010D0C9F432858477BF65D14C2BA71B27C77DB00 Authority key identifier: E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 399266 IP address blocks: 165.140.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:5d:14:c2:ba:71:b2:7c:77:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=e434ef2d-7c3e-45f5-bf74-611692f155c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:fd:db:b4:81:20:66:8c:c0:07:5d:2c:9f: 08:47:ed:63:a4:9d:59:a9:6a:93:d1:f5:0b:dd:f8: e4:f8:e5:8a:97:a7:e6:79:f0:71:6f:aa:36:00:71: 06:1b:04:e7:6e:ed:7b:61:d9:e2:b7:09:18:ed:ec: dd:17:d6:88:eb:18:08:e2:e5:af:c9:1b:8b:25:f1: 67:bb:3e:39:08:e1:25:67:cd:dc:ca:9e:5f:1b:e4: 1f:73:42:66:99:47:a6:4c:c1:1f:61:f2:ff:89:27: 2c:54:28:d1:fc:4c:19:6c:05:79:60:1d:0f:f8:95: b4:5e:f1:34:2f:15:6e:f7:22:9e:42:44:95:63:5e: aa:96:85:06:9c:ab:2f:c8:40:6f:ef:f9:6c:37:d8: 83:80:a0:af:51:37:4d:a7:43:ca:8c:dc:88:0d:94: e3:c6:51:ca:49:e0:61:ce:d9:cd:e5:e7:a6:1a:b1: 39:c0:70:e3:d4:05:18:3f:33:0b:59:5b:4c:d6:f5: 43:4b:ab:fa:a1:9d:dc:ea:41:94:22:1a:12:52:1f: bd:07:91:c6:a8:37:ca:95:fa:71:95:71:9c:fb:25: 5c:68:d3:92:e6:5a:0f:b5:f3:83:0a:b5:67:d3:0a: c5:0a:e8:17:75:90:d7:34:11:b7:46:ac:6d:ae:a9: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:5B:7C:3E:58:AD:E2:2D:4F:63:19:27:4A:A3:1A:DF:B3:5E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl X509v3 Authority Key Identifier: keyid:E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer sbgp-ipAddrBlock: critical IPv4: 165.140.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a6:0c:99:c3:84:60:2c:4a:89:0e:ac:49:9a:5f:f1:a0:df: 8d:66:c9:f1:3c:42:e6:d7:32:cf:a6:b0:8b:5b:58:83:a0:0c: 44:c1:0c:57:d9:38:fb:a6:d8:68:ff:ac:d7:f8:ff:e4:e3:f1: 09:35:66:02:66:6f:5b:ce:d3:78:46:0f:a7:d5:a2:d2:bf:d7: 90:07:9b:18:d6:a8:b1:b7:5c:a3:9b:6f:d2:c7:95:a8:4f:f8: 20:6e:75:e7:1c:40:c1:12:81:81:7c:a0:ed:92:77:c2:1e:60: 0e:0b:5f:0e:90:cb:f6:c1:24:e3:c7:ef:91:9a:e7:3e:1f:75: 67:a4:d8:84:13:24:56:b3:b4:92:57:db:f8:e6:51:16:c2:7d: 64:5b:5b:b9:df:40:1d:2c:ef:99:a7:7b:f7:4f:b0:4c:0c:e9: 9e:53:18:f4:55:09:ae:56:69:ff:6d:fc:d2:a6:4c:74:30:ce: 78:49:2a:cc:96:e1:74:64:5d:59:11:d8:f1:6d:91:ff:b5:c0: fe:72:d5:2a:79:ef:f2:aa:66:85:7c:53:25:34:a5:25:52:5a: d4:3b:a1:6d:53:91:a2:0d:10:dd:d0:e1:3b:e3:61:b6:2a:e0: 87:67:ac:e3:c9:72:5e:a6:09:d8:e5:35:d7:0e:ce:ef:ba:d8: 41:03:bb:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79l0Uwrpxsnx32wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1ZWYwMmItOThhZi00MWRjLWI4NzQtMjNmN2U3NWI0 ZTQ5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk ZTQzNGVmMmQtN2MzZS00NWY1LWJmNzQtNjExNjkyZjE1NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNT927SBIGaMwAddLJ8IR+1jpJ1ZqWqT0fUL 3fjk+OWKl6fmefBxb6o2AHEGGwTnbu17YdnitwkY7ezdF9aI6xgI4uWvyRuLJfFn uz45COElZ83cyp5fG+Qfc0JmmUemTMEfYfL/iScsVCjR/EwZbAV5YB0P+JW0XvE0 LxVu9yKeQkSVY16qloUGnKsvyEBv7/lsN9iDgKCvUTdNp0PKjNyIDZTjxlHKSeBh ztnN5eemGrE5wHDj1AUYPzMLWVtM1vVDS6v6oZ3c6kGUIhoSUh+9B5HGqDfKlfpx lXGc+yVcaNOS5loPtfODCrVn0wrFCugXdZDXNBG3RqxtrqkXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdoW3w+WK3iLU9jGSdKoxrfs16KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjVl ZjAyYi05OGFmLTQxZGMtYjg3NC0yM2Y3ZTc1YjRlNDkvYWZhY2YzMDYtN2NmNi0z NmQyLWE2MDQtYmUzZTE0NDNjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1ZWYwMmItOThhZi00MWRjLWI4 NzQtMjNmN2U3NWI0ZTQ5LzBmNWVmMDJiLTk4YWYtNDFkYy1iODc0LTIzZjdlNzVi NGU0OS5jcmwwHwYDVR0jBBgwFoAU5mdVO/EFbGEMUo8/pKfHSpZdkBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjVlZjAyYi05OGFmLTQxZGMtYjg3NC0yM2Y3 ZTc1YjRlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSmDJnDhGAsSokOrEmaX/Gg341myfE8QubXMs+msItbWIOgDETBDFfZ OPum2Gj/rNf4/+Tj8Qk1ZgJmb1vO03hGD6fVotK/15AHmxjWqLG3XKObb9LHlahP +CBudeccQMESgYF8oO2Sd8IeYA4LXw6Qy/bBJOPH75Ga5z4fdWek2IQTJFaztJJX 2/jmURbCfWRbW7nfQB0s75mne/dPsEwM6Z5TGPRVCa5Waf9t/NKmTHQwznhJKsyW 4XRkXVkR2PFtkf+1wP5y1Sp57/KqZoV8UyU0pSVSWtQ7oW1TkaINEN3Q4TvjYbYq 4IdnrOPJcl6mCdjlNdcOzu+62EEDu88= -----END CERTIFICATE-----Generated at Mon Nov 25 01:02:36 2024 by rpki-client on console-ams.rpki-client.org