$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa File: fce58568-be92-36c0-aa87-50db3fac7681.roa (raw, json) Hash identifier: KII2/MAphic3t/WNVNxcQEBDtZTOlVdFHFXWmLywvac= Subject key identifier: 1F:23:86:16:F5:4B:53:07:6B:90:CA:3C:41:BD:5C:35:72:ED:D8:E5 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285847C51ED261E7B60A8777194B40 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa Signing time: Mon 04 Nov 2024 17:56:18 +0000 ROA not before: Mon 04 Nov 2024 17:56:18 +0000 ROA not after: Sun 02 Feb 2025 17:56:18 +0000 asID: 211585 IP address blocks: 173.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c5:1e:d2:61:e7:b6:0a:87:77:19:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Nov 4 17:56:18 2024 GMT Not After : Feb 2 17:56:18 2025 GMT Subject: CN=8f28a59d-8a82-4003-9402-4cc21b8114b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:c1:e3:a6:b9:6b:66:97:e7:9c:71:1b:ad: cd:b0:04:33:da:77:2e:cf:ff:43:33:5d:d5:e0:c6: c0:de:35:9d:66:28:f8:a6:1a:f4:5b:db:be:35:67: ec:a4:8d:8c:b0:87:ed:62:ff:55:1e:8c:19:3d:15: 3d:19:ff:52:e8:2f:32:82:d4:79:e1:05:da:a9:01: b0:2c:e3:ef:72:8f:84:37:71:0b:7e:c6:4e:79:c7: 0a:05:ba:00:b1:62:64:1c:a4:19:96:6a:76:49:23: 56:57:80:8d:d3:4b:ff:55:6d:0b:c8:6b:8d:33:16: 5f:ab:ee:62:0c:fd:38:54:8c:fa:73:45:33:1a:93: 18:7b:50:09:bc:9d:b8:73:4b:e8:da:4e:c7:40:1a: a6:6d:d7:43:d9:1d:e1:49:7f:57:d7:91:41:a1:a2: b0:fd:9f:cd:97:30:00:ba:ff:5f:98:9f:0e:9c:86: bd:2c:d0:45:b4:b4:7d:9c:a6:44:d8:7b:0c:4c:0b: 9a:11:97:ab:67:fc:fd:1d:03:61:d9:b8:9f:bb:d9: 9c:93:f3:d0:3f:33:21:6c:cc:c5:b0:f9:57:2c:25: ba:1d:17:6f:1d:e7:ae:7c:82:12:29:e6:50:db:33: de:ec:6c:15:6f:cc:e8:95:77:c2:c2:b6:3f:53:89: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:86:16:F5:4B:53:07:6B:90:CA:3C:41:BD:5C:35:72:ED:D8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/fce58568-be92-36c0-aa87-50db3fac7681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:39:3a:f7:1d:8b:66:5f:b8:ab:e7:89:b8:78:c8:c6:a7:16: 78:51:68:7c:b3:91:18:13:f6:d4:ac:45:a5:03:d0:89:80:d3: 9a:45:54:74:2e:d7:78:58:5a:54:bf:dc:82:cf:19:31:4c:94: 5e:27:48:2e:5a:7b:52:57:74:7f:d6:09:ea:c5:ee:84:99:bd: 32:38:0d:bd:11:fc:ad:8d:e7:43:0c:ed:10:da:c6:59:13:98: 49:06:f8:3c:37:a7:26:a9:f4:4b:ef:b5:c3:11:a7:bd:ba:94: ae:91:69:d1:3c:f9:2c:96:57:13:22:2e:56:03:42:e7:df:1d: ce:0b:94:b2:ca:d6:33:20:0b:95:b5:6c:c5:75:30:1d:0f:be: a4:56:c0:fa:9d:fb:db:b2:a9:d5:13:70:e3:6e:46:02:6b:0a: c0:1a:5a:a2:b7:64:34:7b:f6:04:68:48:ee:ba:2c:60:db:d9: 9c:f5:18:d5:1b:a2:e6:da:9a:ca:e9:6e:0f:f9:b3:0c:a8:b9: dc:d8:16:34:c7:33:be:6f:9f:85:02:37:d5:fe:2b:78:ad:3b: af:92:54:6e:9a:eb:15:15:e3:c3:f5:2d:d1:77:67:6b:7d:ea: 9b:2d:16:86:51:0b:c1:cd:f2:49:f5:d5:8e:3f:1d:18:e4:f1: 95:c2:0a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfFHtJh57YKh3cZS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MTEwNDE3NTYxOFoXDTI1MDIwMjE3NTYxOFowLzEtMCsGA1UEAxMk OGYyOGE1OWQtOGE4Mi00MDAzLTk0MDItNGNjMjFiODExNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu3B46a5a2aX55xxG63NsAQz2ncuz/9DM13V 4MbA3jWdZij4phr0W9u+NWfspI2MsIftYv9VHowZPRU9Gf9S6C8ygtR54QXaqQGw LOPvco+EN3ELfsZOeccKBboAsWJkHKQZlmp2SSNWV4CN00v/VW0LyGuNMxZfq+5i DP04VIz6c0UzGpMYe1AJvJ24c0vo2k7HQBqmbddD2R3hSX9X15FBoaKw/Z/NlzAA uv9fmJ8OnIa9LNBFtLR9nKZE2HsMTAuaEZerZ/z9HQNh2bifu9mck/PQPzMhbMzF sPlXLCW6HRdvHeeufIISKeZQ2zPe7GwVb8zolXfCwrY/U4k8+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8jhhb1S1MHa5DKPEG9XDVy7djlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZmNlNTg1NjgtYmU5Mi0z NmMwLWFhODctNTBkYjNmYWM3NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA85Ovcdi2ZfuKvnibh4yManFnhRaHyzkRgT9tSsRaUD0ImA05pFVHQu 13hYWlS/3ILPGTFMlF4nSC5ae1JXdH/WCerF7oSZvTI4Db0R/K2N50MM7RDaxlkT mEkG+Dw3pyap9EvvtcMRp726lK6RadE8+SyWVxMiLlYDQuffHc4LlLLK1jMgC5W1 bMV1MB0PvqRWwPqd+9uyqdUTcONuRgJrCsAaWqK3ZDR79gRoSO66LGDb2Zz1GNUb oubamsrpbg/5swyoudzYFjTHM75vn4UCN9X+K3itO6+SVG6a6xUV48P1LdF3Z2t9 6pstFoZRC8HN8kn11Y4/HRjk8ZXCCus= -----END CERTIFICATE-----Generated at Sun Nov 24 19:47:01 2024 by rpki-client on console-fra.rpki-client.org