$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa File: 6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa (raw, json) Hash identifier: sg7RU/+VQt68ttvNZE+oNLMjM2lE34hfUWpwfCMrtL4= Subject key identifier: AE:2C:79:F2:AD:9A:8F:DD:86:32:B8:D7:01:EE:28:DD:7E:15:C0:CA Certificate issuer: /CN=7df7e023-145a-4cd7-8721-998050ab91e2 Certificate serial: 010D0C9F43285847F2649ABA7595B868A3504600 Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa Signing time: Wed 20 Nov 2024 23:08:17 +0000 ROA not before: Wed 20 Nov 2024 23:08:17 +0000 ROA not after: Tue 18 Feb 2025 23:08:17 +0000 asID: 11848 IP address blocks: 170.199.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:64:9a:ba:75:95:b8:68:a3:50:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2 Validity Not Before: Nov 20 23:08:17 2024 GMT Not After : Feb 18 23:08:17 2025 GMT Subject: CN=8f25aec7-65be-48bc-aaf2-886aefbd42ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:73:e5:c4:1a:f9:79:89:be:dd:de:8c:91: de:a8:2e:4d:77:1f:56:96:61:6a:7a:33:53:93:24: 1b:f9:ba:cd:1e:9c:48:0f:78:dc:28:0e:08:e7:17: 16:11:d0:3f:9c:ca:df:87:d2:de:99:fd:e4:6f:92: fd:63:8d:4c:69:14:79:2d:1f:8a:f8:62:66:d3:62: 89:ed:f4:0b:f7:26:c7:5f:16:75:fe:cc:cb:01:72: 3e:c9:df:e3:48:12:8a:5a:66:2a:a4:a7:2c:81:87: 30:d8:3a:38:9a:61:96:ed:c8:22:59:53:b7:cc:3d: 42:de:63:42:06:a3:ca:f7:d3:5b:46:c5:83:fc:99: f7:1f:1e:29:31:24:f0:67:7c:63:dd:8c:46:1e:18: 01:ff:dc:fb:37:3e:1c:f6:3c:49:f0:d4:c5:17:22: 5b:f5:dd:53:8d:33:73:a3:b0:8d:70:66:d2:e1:5c: 06:0a:21:05:73:3e:46:10:5f:a4:38:d0:cc:60:d6: 59:a9:04:23:9c:a1:40:2e:36:e3:59:1d:dc:69:a4: 02:41:98:2d:a1:ed:9a:01:78:26:1a:02:4d:a4:28: 98:3e:17:79:42:92:43:7a:7e:a3:02:f0:96:8c:b8: 55:45:28:02:23:54:df:12:df:65:57:49:04:d8:4c: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:79:F2:AD:9A:8F:DD:86:32:B8:D7:01:EE:28:DD:7E:15:C0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/6fce4d9a-5022-3f96-9c6b-68f49698d64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl X509v3 Authority Key Identifier: keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer sbgp-ipAddrBlock: critical IPv4: 170.199.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1c:a7:b9:0c:26:d5:7b:48:7e:98:9c:80:a4:a2:23:ba:48: 7b:bf:18:3f:6c:02:76:79:ab:aa:d7:57:5a:0f:f7:27:ae:68: 28:b5:f5:e0:42:28:cc:85:e4:b1:b2:f6:03:86:cc:fb:af:d5: cc:72:58:4c:85:b1:4b:ec:f0:31:6c:47:f4:b5:4d:8e:c3:cf: 74:ff:99:ce:19:37:5b:22:38:ac:96:98:10:c5:c0:5d:f6:9a: 00:06:b0:3c:54:b9:cd:34:d4:56:82:69:ee:09:1d:34:7f:ea: 9b:e3:79:da:d8:6a:6f:12:9e:fb:8e:66:09:b9:a5:0b:80:0a: 23:5b:aa:1e:dc:37:23:3f:1f:6a:2c:2e:96:f1:dd:06:c6:24: e6:ba:e7:ba:e1:87:ad:0f:4e:a0:5e:52:46:e4:1f:f0:28:18: a4:bb:46:43:9e:4d:d1:b2:80:28:d3:c3:c2:67:3f:b0:f1:f9: 03:6f:f9:72:7a:f7:5e:4d:57:0a:1f:e2:5c:82:24:2e:01:e0: d9:09:26:e7:2d:f7:5c:e3:7e:ee:3d:a3:60:f5:0b:92:cb:19: 79:dd:6a:da:e3:47:b9:ce:ec:32:0d:bd:87:29:b8:40:2b:05: cd:9e:f0:33:7d:5a:b8:10:d1:ae:0c:29:74:0d:8d:85:44:93: 52:a9:52:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyZJq6dZW4aKNQRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3MjEtOTk4MDUwYWI5 MWUyMB4XDTI0MTEyMDIzMDgxN1oXDTI1MDIxODIzMDgxN1owLzEtMCsGA1UEAxMk OGYyNWFlYzctNjViZS00OGJjLWFhZjItODg2YWVmYmQ0MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OZz5cQa+XmJvt3ejJHeqC5Ndx9WlmFqejNT kyQb+brNHpxID3jcKA4I5xcWEdA/nMrfh9Lemf3kb5L9Y41MaRR5LR+K+GJm02KJ 7fQL9ybHXxZ1/szLAXI+yd/jSBKKWmYqpKcsgYcw2Do4mmGW7cgiWVO3zD1C3mNC BqPK99NbRsWD/Jn3Hx4pMSTwZ3xj3YxGHhgB/9z7Nz4c9jxJ8NTFFyJb9d1TjTNz o7CNcGbS4VwGCiEFcz5GEF+kONDMYNZZqQQjnKFALjbjWR3caaQCQZgtoe2aAXgm GgJNpCiYPhd5QpJDen6jAvCWjLhVRSgCI1TfEt9lV0kE2EyHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4sefKtmo/dhjK41wHuKN1+FcDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZGY3 ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBhYjkxZTIvNmZjZTRkOWEtNTAyMi0z Zjk2LTljNmItNjhmNDk2OThkNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3 MjEtOTk4MDUwYWI5MWUyLzdkZjdlMDIzLTE0NWEtNGNkNy04NzIxLTk5ODA1MGFi OTFlMi5jcmwwHwYDVR0jBBgwFoAUeC1lMSOk1DU19Ym6y1bRDFjjVu4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgw NTBhYjkxZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwcp7kMJtV7SH6YnICkoiO6SHu/GD9sAnZ5q6rXV1oP9yeuaCi19eBC KMyF5LGy9gOGzPuv1cxyWEyFsUvs8DFsR/S1TY7Dz3T/mc4ZN1siOKyWmBDFwF32 mgAGsDxUuc001FaCae4JHTR/6pvjedrYam8SnvuOZgm5pQuACiNbqh7cNyM/H2os Lpbx3QbGJOa657rhh60PTqBeUkbkH/AoGKS7RkOeTdGygCjTw8JnP7Dx+QNv+XJ6 915NVwof4lyCJC4B4NkJJuct91zjfu49o2D1C5LLGXndatrjR7nO7DINvYcpuEAr Bc2e8DN9WrgQ0a4MKXQNjYVEk1KpUgo= -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:44 2024 by rpki-client on console-ams.rpki-client.org