$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa File: 848bc911-8d84-34e0-adf4-211d260c3143.roa (raw, json) Hash identifier: j9RJWc4dMHIwZZSy37H/pSf0o7AIlNUM2iCMbSR5V+4= Subject key identifier: 89:3F:82:DE:A9:F9:88:C0:22:E4:87:C0:8B:0A:C9:6C:70:AC:13:91 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285847B96170B818ABD9C4588CFC00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 206092 IP address blocks: 173.239.211.0/24 maxlen: 24 173.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:70:b8:18:ab:d9:c4:58:8c:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=dee779ff-71fe-4650-afdf-0d0d0a9fa620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:a6:db:47:55:ce:74:35:8b:1f:82:50:78: fa:1d:d1:ca:a4:0b:7b:5e:a2:50:71:75:5e:8f:a2: ce:39:0b:59:ed:52:20:de:29:87:23:1b:6a:70:8f: b3:d3:03:f7:2e:16:bd:b1:e8:4f:1f:01:7d:67:3e: ab:1a:2d:4c:cd:b0:80:50:85:81:57:9f:31:cb:86: dc:90:d2:be:d5:c5:99:39:54:c4:f6:ee:60:db:5e: 21:6e:8e:4e:f5:60:b9:c7:c1:c4:d0:9a:2a:32:d3: 5b:9f:10:02:cb:75:d7:06:58:d8:fa:a3:e5:26:be: 75:c3:4a:89:f2:ce:38:cd:6c:e6:a9:17:ee:41:a8: 96:81:86:7f:a8:ad:10:b4:34:b1:9b:fd:d8:e4:39: 7a:26:c1:05:d6:18:22:57:33:20:3a:c8:c9:fc:f8: 54:86:9a:22:cc:32:b1:02:30:5b:b9:7c:0d:21:96: 5e:68:9a:ed:98:6d:a7:15:e2:a4:5b:24:33:af:a1: 64:70:8d:07:54:aa:40:e2:e1:e8:7a:70:77:d1:8d: 06:06:d8:04:6f:d6:8b:03:15:d6:6e:74:be:d8:22: 04:e2:97:d3:49:b2:3a:98:f3:7d:7d:8e:aa:22:44: 66:96:55:82:48:f0:ef:18:b0:4c:44:30:a9:bc:38: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3F:82:DE:A9:F9:88:C0:22:E4:87:C0:8B:0A:C9:6C:70:AC:13:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.211.0/24 173.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9a:63:0d:d7:f1:ca:32:f5:c3:6c:a8:6c:c6:51:22:bb:22: e3:50:5f:d8:8e:9d:ab:0a:b0:e2:1d:f7:d9:74:de:30:a8:03: d7:84:7b:6c:2c:da:44:85:10:34:e0:08:0c:64:fe:6d:db:a1: 88:e1:55:67:76:97:5b:24:6f:03:88:fc:22:d1:56:5a:3d:df: f6:9c:da:05:7a:2e:aa:ef:59:36:a2:e7:7e:8e:36:d7:30:60: fa:d0:03:27:15:b8:c5:ca:a0:fa:83:88:9f:f0:aa:0d:fe:c8: c5:e5:44:df:6f:d6:66:a0:05:77:6f:ec:c7:06:8c:ae:e8:08: 0a:32:e0:88:a1:d5:b6:de:54:b7:c6:5a:e7:22:bc:40:56:94: 77:e3:18:58:49:7e:fc:0a:cb:3e:25:73:eb:ba:e7:c5:90:e3: 74:9f:37:47:60:ba:d9:9c:32:3d:a0:1c:f7:52:29:ea:63:56: 6d:3f:5b:c3:16:58:3f:da:48:2c:cb:b7:e3:63:dc:f4:83:bd: 8e:e9:c9:a6:af:b3:a8:ac:76:be:23:ce:d5:06:b6:7d:3b:a7: 9e:f1:d8:18:e1:bf:43:ef:c3:be:51:cc:a9:b7:c4:69:fb:a2: 19:e5:6c:e5:92:3f:7c:48:6e:cb:69:3d:d2:c4:3e:03:1f:51: f2:a6:c8:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEe5YXC4GKvZxFiM/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGVlNzc5ZmYtNzFmZS00NjUwLWFmZGYtMGQwZDBhOWZhNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN+m20dVznQ1ix+CUHj6HdHKpAt7XqJQcXVe j6LOOQtZ7VIg3imHIxtqcI+z0wP3Lha9sehPHwF9Zz6rGi1MzbCAUIWBV58xy4bc kNK+1cWZOVTE9u5g214hbo5O9WC5x8HE0JoqMtNbnxACy3XXBljY+qPlJr51w0qJ 8s44zWzmqRfuQaiWgYZ/qK0QtDSxm/3Y5Dl6JsEF1hgiVzMgOsjJ/PhUhpoizDKx AjBbuXwNIZZeaJrtmG2nFeKkWyQzr6FkcI0HVKpA4uHoenB30Y0GBtgEb9aLAxXW bnS+2CIE4pfTSbI6mPN9fY6qIkRmllWCSPDvGLBMRDCpvDhhkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIk/gt6p+YjAIuSHwIsKyWxwrBORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODQ4YmM5MTEtOGQ4NC0z NGUwLWFkZjQtMjExZDI2MGMzMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/TAwQA re/+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFCaYw3X8coy9cNsqGzGUSK7IuNQX9iOnasKsOId99l03jCo A9eEe2ws2kSFEDTgCAxk/m3boYjhVWd2l1skbwOI/CLRVlo93/ac2gV6LqrvWTai 536ONtcwYPrQAycVuMXKoPqDiJ/wqg3+yMXlRN9v1magBXdv7McGjK7oCAoy4Iih 1bbeVLfGWucivEBWlHfjGFhJfvwKyz4lc+u658WQ43SfN0dgutmcMj2gHPdSKepj Vm0/W8MWWD/aSCzLt+Nj3PSDvY7pyaavs6isdr4jztUGtn07p57x2Bjhv0Pvw75R zKm3xGn7ohnlbOWSP3xIbstpPdLEPgMfUfKmyE4= -----END CERTIFICATE-----Generated at Fri Nov 22 02:34:34 2024 by rpki-client on console-fra.rpki-client.org