$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa File: cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa (raw, json) Hash identifier: XWS+GXlkqeIckhKICSs+GvWZa9X5gD9R4I/4VgPT//Y= Subject key identifier: 23:ED:46:C8:8C:05:E2:13:60:11:DF:5B:88:EF:83:C5:99:76:09:24 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584765A0DEF05EE2519E2C5DE700 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 14061 IP address blocks: 167.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:de:f0:5e:e2:51:9e:2c:5d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=b64be77e-fb31-4431-b2ca-37fc89d6c2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:4d:61:e9:01:67:69:9a:c4:a3:15:02:b8: 47:be:21:6d:e7:a8:50:f5:0d:ef:8b:e6:67:fa:ed: 8a:66:d5:90:fd:35:bf:b8:d6:6c:9a:79:7b:ce:2d: 20:c8:9d:9a:e2:cb:c6:22:ed:46:c1:46:04:5b:cc: 0c:32:d4:11:8d:1e:73:23:7a:e0:15:2b:56:2b:80: 36:cd:a8:1b:10:ee:9e:33:fe:7f:29:5f:c4:6b:a4: 7b:60:08:3e:36:1f:3b:1d:c5:b3:fa:f0:cf:7a:db: aa:2b:f6:4b:2b:b6:0f:a9:af:bc:c2:b9:a7:41:d3: 5f:0d:cb:69:e5:14:f7:60:12:23:54:c4:eb:fa:1a: 66:3f:31:52:81:fd:eb:29:d4:16:58:a3:a1:29:ab: c8:1b:60:3b:3f:de:f3:c0:c6:2f:9b:fd:40:5b:30: 9b:12:12:ca:65:5f:9f:9d:8f:16:79:6d:63:c8:82: ad:f9:97:7e:d6:aa:b0:1e:32:5f:41:bf:62:0c:ab: 93:0a:0c:cb:f9:f0:a7:9e:71:49:ad:8a:cb:09:31: 56:e1:d2:e0:4a:53:2c:51:6b:69:f2:96:bd:ec:25: 51:20:be:ca:87:0d:4b:b3:bb:5f:1c:96:57:77:f5: a7:a9:cc:4b:40:06:d4:72:01:73:f2:1c:43:42:2b: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:46:C8:8C:05:E2:13:60:11:DF:5B:88:EF:83:C5:99:76:09:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 167.71.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:03:3e:67:bc:18:b7:e4:4d:5d:62:03:a1:ae:2c:2e:5e:3e: ce:c5:7c:93:b2:c6:09:6a:de:c9:e1:af:ad:8e:d6:78:4e:88: af:3f:77:9a:5e:39:11:32:94:3c:d2:2a:f7:47:b1:46:9b:9b: 08:35:3a:8e:56:8b:42:fa:57:de:5f:d3:1e:37:2c:74:8a:dd: e6:bc:b0:19:49:7e:9e:e3:ad:aa:72:93:86:87:9e:1a:c0:a2: 98:56:73:a6:88:85:b3:1e:a0:83:d1:59:e2:a1:22:eb:1c:bf: 6a:ce:01:a9:55:c9:81:a4:7c:cc:7a:f1:a9:18:b1:15:96:b2: 1e:a8:7f:52:09:5d:8d:89:06:b0:2a:c0:e6:8c:df:eb:2a:1a: 25:e0:47:5b:36:1c:21:6f:14:46:6a:8c:24:59:23:cd:72:f8: d2:83:8c:33:d9:4f:a4:80:47:39:1f:74:79:eb:67:3b:01:26: f9:ef:26:59:c5:0d:89:73:b8:63:ba:49:d4:55:8d:be:bb:eb: ae:17:ad:18:ae:ee:b9:46:f0:12:94:26:f2:77:bd:f4:b2:5e: 9b:6f:49:5f:ea:9f:48:68:9a:fc:d3:e4:3a:d4:4b:0c:c2:90: 02:4e:bf:70:14:ed:67:3f:81:f1:1e:02:5e:f9:c6:6e:f8:e6: be:66:5d:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdloN7wXuJRnixd5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk YjY0YmU3N2UtZmIzMS00NDMxLWIyY2EtMzdmYzg5ZDZjMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDpNYekBZ2maxKMVArhHviFt56hQ9Q3vi+Zn +u2KZtWQ/TW/uNZsmnl7zi0gyJ2a4svGIu1GwUYEW8wMMtQRjR5zI3rgFStWK4A2 zagbEO6eM/5/KV/Ea6R7YAg+Nh87HcWz+vDPetuqK/ZLK7YPqa+8wrmnQdNfDctp 5RT3YBIjVMTr+hpmPzFSgf3rKdQWWKOhKavIG2A7P97zwMYvm/1AWzCbEhLKZV+f nY8WeW1jyIKt+Zd+1qqwHjJfQb9iDKuTCgzL+fCnnnFJrYrLCTFW4dLgSlMsUWtp 8pa97CVRIL7Khw1Ls7tfHJZXd/WnqcxLQAbUcgFz8hxDQitouwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCPtRsiMBeITYBHfW4jvg8WZdgkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2IyYzkwYWUtZWM0Mi0z ZTJiLTg2ZmMtOTMwOTc4N2NmMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp0cwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANgM+Z7wYt+RNXWIDoa4sLl4+zsV8k7LGCWreyeGvrY7WeE6Irz93ml45 ETKUPNIq90exRpubCDU6jlaLQvpX3l/THjcsdIrd5rywGUl+nuOtqnKThoeeGsCi mFZzpoiFsx6gg9FZ4qEi6xy/as4BqVXJgaR8zHrxqRixFZayHqh/UgldjYkGsCrA 5ozf6yoaJeBHWzYcIW8URmqMJFkjzXL40oOMM9lPpIBHOR90eetnOwEm+e8mWcUN iXO4Y7pJ1FWNvrvrrhetGK7uuUbwEpQm8ne99LJem29JX+qfSGia/NPkOtRLDMKQ Ak6/cBTtZz+B8R4CXvnGbvjmvmZdMw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:53 2024 by rpki-client on console-fra.rpki-client.org