$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa File: 21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa (raw, json) Hash identifier: 9QrSGYSXXIEvq3SLMrHFOMhs5PZfVjtYhJjy2G022ps= Subject key identifier: B9:01:13:15:F7:D3:29:7B:35:8A:A1:F8:C3:32:16:F1:C8:66:AA:1A Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F432858471E7067CBF792B1DC4B4CF000 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 14977 IP address blocks: 137.87.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:67:cb:f7:92:b1:dc:4b:4c:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=a2f07e0d-c45b-4744-bbad-36c380da75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:88:82:e6:6b:a5:b4:f7:4c:91:22:24:58: 30:6c:c7:58:9f:25:14:3d:51:bc:e2:45:4e:19:ed: f5:c9:89:94:63:81:90:96:b5:d0:0a:87:88:14:f7: 2c:e0:df:9e:74:49:10:f8:f2:8e:90:4f:94:0b:56: dc:bd:09:4e:fd:f9:86:d9:41:bd:cf:78:58:47:b6: 77:4e:06:a6:b6:10:28:b4:9e:34:4e:b2:92:a4:04: 95:60:bb:38:16:69:bf:43:ee:25:98:d6:b0:f1:bb: f1:9a:52:00:1e:0d:81:c3:4b:c1:2a:45:01:39:27: 31:b7:23:41:20:ea:e9:e1:b8:39:58:0a:b1:d3:34: 2e:6a:fe:1f:44:67:e9:c9:67:2c:74:71:e6:30:ac: c4:8d:2a:74:ee:78:27:07:3a:f2:0f:2f:12:f4:29: 17:92:0c:70:50:21:0d:b7:b0:d0:f0:95:64:c3:81: 3d:d9:2e:7d:23:af:5e:14:94:31:fa:ae:46:c7:6f: 40:16:14:89:18:19:b9:ce:a1:58:8c:44:4b:f9:04: cb:af:f7:81:4c:14:09:f4:d7:ad:21:6b:50:8c:96: 40:07:59:c2:74:52:ed:5d:93:d8:c4:91:b1:96:34: 1a:d6:1b:83:de:ec:ad:53:98:e8:78:2e:04:b2:8e: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:13:15:F7:D3:29:7B:35:8A:A1:F8:C3:32:16:F1:C8:66:AA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.87.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7c:fe:63:e1:67:c6:9f:95:60:9d:48:b5:bc:cf:1d:00:17: f8:22:f1:3a:9a:c8:a5:e7:2d:b7:8a:7c:3e:c3:1a:dc:e0:30: 97:51:e2:49:e8:aa:de:f9:56:66:3f:8a:20:e1:52:e4:90:f7: cb:22:df:87:3a:e4:2f:43:a9:f4:a1:df:71:a0:d8:a3:18:3f: a7:5f:b0:e0:20:b2:cb:85:de:cd:4d:0e:9b:a5:d8:6c:b3:71: 31:7f:10:fb:85:9a:d1:64:b3:e2:bf:17:bd:40:fd:c2:0b:42: 41:73:c5:3f:7b:50:7f:ba:f9:cb:ee:49:3c:1c:21:41:53:87: 54:ac:d5:ed:d2:c7:6a:01:a7:ac:76:36:c0:4a:65:1c:08:a6: eb:aa:ed:74:cf:43:14:cc:ed:08:7a:7e:51:44:3f:39:7c:09: 5c:e2:4f:df:82:3a:9f:2d:6d:18:1e:19:a1:bc:cf:68:2e:b2: ec:ea:02:ef:db:7e:59:0e:e1:ee:2f:75:31:c7:6f:29:b0:fa: 7c:1a:d8:12:53:4d:49:ae:35:f5:be:f6:42:7e:80:50:46:63: cc:b4:9a:43:77:0c:47:02:36:25:87:e2:91:c6:01:3f:86:a3: e7:ae:a3:e7:56:76:e9:30:93:76:61:0e:ba:09:dc:60:3e:6e: b6:a0:bc:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecGfL95Kx3EtM8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk YTJmMDdlMGQtYzQ1Yi00NzQ0LWJiYWQtMzZjMzgwZGE3NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZSIguZrpbT3TJEiJFgwbMdYnyUUPVG84kVO Ge31yYmUY4GQlrXQCoeIFPcs4N+edEkQ+PKOkE+UC1bcvQlO/fmG2UG9z3hYR7Z3 TgamthAotJ40TrKSpASVYLs4Fmm/Q+4lmNaw8bvxmlIAHg2Bw0vBKkUBOScxtyNB IOrp4bg5WAqx0zQuav4fRGfpyWcsdHHmMKzEjSp07ngnBzryDy8S9CkXkgxwUCEN t7DQ8JVkw4E92S59I69eFJQx+q5Gx29AFhSJGBm5zqFYjERL+QTLr/eBTBQJ9Net IWtQjJZAB1nCdFLtXZPYxJGxljQa1huD3uytU5joeC4Eso613wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLkBExX30yl7NYqh+MMyFvHIZqoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMjFjYWUwZGEtYjdkMi0z NzZhLWIzMGUtMWNlNWRmNjNmZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABHz+Y+Fnxp+VYJ1ItbzPHQAX+CLxOprIpectt4p8PsMa3OAwl1HiSeiq 3vlWZj+KIOFS5JD3yyLfhzrkL0Op9KHfcaDYoxg/p1+w4CCyy4XezU0Om6XYbLNx MX8Q+4Wa0WSz4r8XvUD9wgtCQXPFP3tQf7r5y+5JPBwhQVOHVKzV7dLHagGnrHY2 wEplHAim66rtdM9DFMztCHp+UUQ/OXwJXOJP34I6ny1tGB4ZobzPaC6y7OoC79t+ WQ7h7i91McdvKbD6fBrYElNNSa419b72Qn6AUEZjzLSaQ3cMRwI2JYfikcYBP4aj 566j51Z26TCTdmEOugncYD5utqC8ww== -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org