$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa File: 1cec9401-9fe6-3876-b322-d8b10fface07.roa (raw, json) Hash identifier: enMErKcPYj+BBPJqPrhk8lFc9Y26Dj4rRbk5grOh4LU= Subject key identifier: B9:03:0E:2F:5C:1C:F8:9A:B6:F1:3F:1E:A7:0F:91:65:7E:34:31:58 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858474B1B50891F4CAA694E859D00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 30860 IP address blocks: 173.239.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:50:89:1f:4c:aa:69:4e:85:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=e7ddd92b-18bf-4994-8fc1-a39889a32b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:8f:30:35:52:13:7b:b4:a8:c1:75:5f:52: b3:56:96:96:07:2a:12:cf:82:4f:7d:2e:e9:6f:f3: 25:89:da:be:a7:02:dc:a2:9c:42:4c:ba:f0:24:ca: 11:3e:8c:f6:e1:d8:37:93:70:96:22:5f:42:ef:b0: 42:db:aa:17:a2:81:5e:d0:ad:0c:cd:a7:82:4f:da: 85:d3:42:8f:d1:49:0a:b3:83:c4:69:f3:4f:ac:d1: 54:f8:7f:b9:83:ce:18:c5:7b:18:c4:57:5d:4d:07: 9d:fc:84:41:a4:e1:4e:40:71:ae:9e:68:40:20:6a: 15:94:50:e6:43:30:82:19:b4:2b:1a:73:95:94:a3: 28:9d:4d:94:46:b7:f1:f2:e2:cf:e2:62:c7:23:45: 5e:9c:ac:8a:3b:05:1e:e6:73:b2:86:d8:25:f0:00: 9e:39:0a:54:7b:c4:ec:ad:58:6b:6a:ff:90:e8:6a: df:25:ec:24:d8:1d:22:f0:f8:b8:4f:db:73:8e:a3: a5:33:13:eb:69:12:13:46:8a:32:ac:76:b5:cd:70: df:c3:5f:2e:f6:d7:8e:71:a2:b4:28:a3:ee:d0:15: df:ca:3d:f6:c9:62:95:18:9f:23:eb:bf:33:b6:54: d9:04:68:e7:d0:f2:46:cf:04:1a:dc:e1:1f:34:c4: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:0E:2F:5C:1C:F8:9A:B6:F1:3F:1E:A7:0F:91:65:7E:34:31:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/1cec9401-9fe6-3876-b322-d8b10fface07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:af:5c:cc:31:57:b2:ff:18:0b:6c:9e:f7:2b:50:50:5b:2a: 99:64:22:5d:d7:64:77:fd:e7:4e:43:8f:f7:13:71:83:e7:95: 59:92:85:96:e7:e7:e0:a1:31:21:f6:b6:3f:86:32:70:04:2a: f6:42:b6:9e:5b:16:a8:35:4a:d3:5f:44:94:4f:93:60:d7:d7: 4f:88:86:c7:47:4b:b2:c2:88:bb:fc:fa:93:a6:2e:a1:42:17: 56:e1:88:89:87:e4:fd:7e:a6:ae:26:30:22:3c:f3:33:28:6d: 35:3b:e8:35:73:e5:aa:9c:01:fd:d9:4d:72:66:da:89:05:11: db:36:13:8b:b4:3e:44:3e:21:c2:9d:31:21:89:bf:d8:17:1f: b0:c4:71:76:64:92:82:b0:9a:8a:43:cf:ff:6f:50:b6:60:63: dd:2a:08:42:b3:6f:70:5c:e3:01:7e:60:76:44:76:68:5c:60: 67:e4:2f:8d:f3:35:da:7c:5f:b9:c2:ff:52:b4:03:68:a9:01: 4c:b9:98:ce:45:4a:f5:4c:f2:fb:67:74:43:62:a1:e6:5d:70: 9c:2f:44:c3:5a:d9:44:b2:bb:d9:fd:73:ed:99:05:35:89:b4: d6:09:be:ec:a1:13:a6:3e:0b:a8:dc:8b:fe:ff:f3:f9:bd:3b: 30:ae:49:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1CJH0yqaU6FnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTdkZGQ5MmItMThiZi00OTk0LThmYzEtYTM5ODg5YTMyYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOiPMDVSE3u0qMF1X1KzVpaWByoSz4JPfS7p b/Mlidq+pwLcopxCTLrwJMoRPoz24dg3k3CWIl9C77BC26oXooFe0K0MzaeCT9qF 00KP0UkKs4PEafNPrNFU+H+5g84YxXsYxFddTQed/IRBpOFOQHGunmhAIGoVlFDm QzCCGbQrGnOVlKMonU2URrfx8uLP4mLHI0VenKyKOwUe5nOyhtgl8ACeOQpUe8Ts rVhrav+Q6GrfJewk2B0i8Pi4T9tzjqOlMxPraRITRooyrHa1zXDfw18u9teOcaK0 KKPu0BXfyj32yWKVGJ8j678ztlTZBGjn0PJGzwQa3OEfNMRA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkDDi9cHPiatvE/HqcPkWV+NDFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMWNlYzk0MDEtOWZlNi0z ODc2LWIzMjItZDhiMTBmZmFjZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6vXMwxV7L/GAtsnvcrUFBbKplkIl3XZHf9505Dj/cTcYPnlVmShZbn 5+ChMSH2tj+GMnAEKvZCtp5bFqg1StNfRJRPk2DX10+IhsdHS7LCiLv8+pOmLqFC F1bhiImH5P1+pq4mMCI88zMobTU76DVz5aqcAf3ZTXJm2okFEds2E4u0PkQ+IcKd MSGJv9gXH7DEcXZkkoKwmopDz/9vULZgY90qCEKzb3Bc4wF+YHZEdmhcYGfkL43z Ndp8X7nC/1K0A2ipAUy5mM5FSvVM8vtndENioeZdcJwvRMNa2USyu9n9c+2ZBTWJ tNYJvuyhE6Y+C6jci/7/8/m9OzCuSeY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:10:00 2024 by rpki-client on console-ams.rpki-client.org