$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa File: baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa (raw, json) Hash identifier: c3XQO6NhmRWq0cWriVYkkroWR4lba/FlDT74VO01SFg= Subject key identifier: CB:F1:5C:74:29:DF:2D:F7:8C:65:5E:53:7A:A0:1B:42:F5:AE:E1:65 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F43285847ED24B957A9C498E813ADD0E0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16509 IP address blocks: 143.244.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:b9:57:a9:c4:98:e8:13:ad:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=9694ce26-a717-4e2f-8608-a2dd254a561d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:1e:1f:55:c7:c4:19:6c:a9:64:3f:e3:6a: 75:f6:04:64:42:bf:70:10:e6:50:1f:d1:64:3e:e2: d1:2a:75:02:d3:4d:52:f0:57:0c:28:11:ce:4f:1f: c7:c4:1c:3c:56:c3:64:ea:b1:36:a8:5e:e8:f3:81: f7:96:1a:23:c0:95:56:fe:f4:6b:e5:8a:34:25:8d: 79:58:d2:a9:6e:1d:c3:90:0a:1e:76:fd:2c:cb:ea: eb:0f:69:7c:a6:66:ca:16:2d:23:bd:a8:cd:01:ce: 9c:d4:02:ae:4c:29:04:3c:3c:4b:37:66:3a:ab:13: 92:70:1f:02:d9:73:88:d9:cc:a5:39:cf:63:db:db: 92:aa:5c:a3:e8:fa:4b:86:76:d0:79:5b:d6:08:f1: 73:32:8f:f7:02:6c:b1:e2:95:fc:60:ee:04:f0:0f: e5:03:9c:ef:cf:05:ce:d1:a3:d8:a5:92:36:82:9a: f9:4b:3c:93:de:61:e9:f2:a3:70:d5:0c:98:a2:b1: 1f:58:4e:a9:23:42:7b:b8:38:ac:d3:30:82:a0:06: 18:d5:07:6f:77:cb:7c:b6:ba:0a:b5:62:c0:59:aa: 2c:6a:07:22:63:c1:63:f7:ee:bc:25:1f:b3:5a:51: 2b:80:0d:c3:cb:38:13:95:5c:de:b6:a2:fd:2c:42: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:5C:74:29:DF:2D:F7:8C:65:5E:53:7A:A0:1B:42:F5:AE:E1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5c:49:92:eb:25:12:9f:5c:b8:8a:7f:8d:d9:81:1c:f2:21: 18:86:75:4c:77:11:42:ef:44:79:99:37:c3:56:68:af:a4:e5: f2:cc:88:04:36:a1:f7:4d:96:63:e9:e0:17:61:cc:1a:d3:89: 26:80:ee:0b:5f:bf:3c:7a:31:88:ea:6e:be:b4:2e:27:bf:19: f2:6b:a6:74:b0:e9:a0:a3:b4:0e:cb:47:21:28:fa:54:31:a6: 23:07:52:f5:68:4f:06:a0:f6:38:39:3d:77:cc:f5:22:c8:6d: c7:52:bf:8e:c8:87:3d:cc:13:46:d3:5a:49:63:1d:25:75:7c: 42:32:d6:7c:24:78:ee:15:41:0d:fa:0f:89:c6:78:fb:b7:6c: 9e:fc:6b:81:6f:1c:f0:a3:9b:60:6f:16:3e:0d:e3:a7:f6:9a: 97:5e:ad:be:6d:2b:20:c3:24:45:bb:cc:a2:20:75:18:64:a1: 11:36:53:55:0f:76:ba:ad:45:81:a7:7c:a9:97:49:bb:2a:6e: 17:87:c7:a8:9e:91:fb:71:b3:78:40:15:53:0b:b9:e9:9f:16: 5c:83:81:89:b8:7d:66:6f:d9:21:21:1c:fc:ef:45:9b:8d:4f: a4:45:59:5c:7e:15:de:51:00:c2:00:be:fc:f6:e7:19:d3:79: 39:a4:8d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLlXqcSY6BOt0OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk OTY5NGNlMjYtYTcxNy00ZTJmLTg2MDgtYTJkZDI1NGE1NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vweH1XHxBlsqWQ/42p19gRkQr9wEOZQH9Fk PuLRKnUC001S8FcMKBHOTx/HxBw8VsNk6rE2qF7o84H3lhojwJVW/vRr5Yo0JY15 WNKpbh3DkAoedv0sy+rrD2l8pmbKFi0jvajNAc6c1AKuTCkEPDxLN2Y6qxOScB8C 2XOI2cylOc9j29uSqlyj6PpLhnbQeVvWCPFzMo/3Amyx4pX8YO4E8A/lA5zvzwXO 0aPYpZI2gpr5SzyT3mHp8qNw1QyYorEfWE6pI0J7uDis0zCCoAYY1Qdvd8t8troK tWLAWaosagciY8Fj9+68JR+zWlErgA3DyzgTlVzetqL9LEIxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvxXHQp3y33jGVeU3qgG0L1ruFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvYmFhZTgxNzQtZWUyMi0z YTI0LWFlNWEtMWI1OWI4M2M0YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRcSZLrJRKfXLiKf43ZgRzyIRiGdUx3EULvRHmZN8NWaK+k5fLMiAQ2 ofdNlmPp4BdhzBrTiSaA7gtfvzx6MYjqbr60Lie/GfJrpnSw6aCjtA7LRyEo+lQx piMHUvVoTwag9jg5PXfM9SLIbcdSv47Ihz3ME0bTWkljHSV1fEIy1nwkeO4VQQ36 D4nGePu3bJ78a4FvHPCjm2BvFj4N46f2mpderb5tKyDDJEW7zKIgdRhkoRE2U1UP drqtRYGnfKmXSbsqbheHx6iekftxs3hAFVMLuemfFlyDgYm4fWZv2SEhHPzvRZuN T6RFWVx+Fd5RAMIAvvz25xnTeTmkjSY= -----END CERTIFICATE-----Generated at Sun Nov 24 15:56:24 2024 by rpki-client on console-ams.rpki-client.org