$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa File: efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json) Hash identifier: 3zLElnb2vnoktwuRIOwTP+I9dnJnubP4LTotv3CchCs= Subject key identifier: E9:4F:30:A3:5A:67:F6:2B:3B:28:F1:05:5E:F3:F5:5C:4C:93:D5:AE Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F432858474F4B702D466BE4FC176C9C00 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 14648 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:70:2d:46:6b:e4:fc:17:6c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=0bbb741b-71e9-463d-962d-a77a063e98f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:74:33:2a:0f:8b:c0:8b:6e:40:03:2d:90: cc:34:2c:64:dd:2b:de:78:2c:a6:ee:78:79:2f:13: f3:3b:4f:aa:37:da:7a:df:8e:b6:d1:2a:fd:8d:15: b9:00:f2:af:88:51:15:49:40:02:5a:5c:97:35:24: 7a:46:68:09:8f:5f:43:1f:02:0a:e1:37:e0:c6:76: 65:59:65:53:87:85:9d:f9:e5:9d:d7:ab:49:48:cc: fc:5b:63:6c:77:2f:91:55:72:5e:ef:e9:a1:32:3c: 57:11:ab:5a:18:fc:05:2d:91:f0:a4:10:8e:d7:98: 90:2c:2f:57:c0:0d:ef:05:db:49:31:4d:c0:62:48: 68:83:e3:1a:65:a4:60:a1:40:d2:80:16:19:1d:17: 62:99:93:3e:3f:a7:e7:87:e9:9a:7b:38:4c:1f:74: 64:2d:7f:a4:dc:d2:b7:db:5c:4b:e7:dc:7a:c5:86: 1a:27:33:38:b6:fa:11:1c:c1:f8:c2:9a:4d:86:25: 62:21:e7:3e:1a:52:0f:76:d9:92:e7:78:d6:9c:c5: 45:1b:0e:8d:5e:08:d1:3b:0b:8d:bf:76:90:2e:0e: 2f:d6:dc:e9:82:85:cc:50:41:46:6b:e4:73:76:f5: 84:e1:b8:39:68:6a:9b:8d:47:5b:9b:5a:54:4d:28: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:30:A3:5A:67:F6:2B:3B:28:F1:05:5E:F3:F5:5C:4C:93:D5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b0:9b:66:83:bb:79:35:d5:49:ac:44:9c:3e:f8:c7:80:7c: 6a:e2:d0:64:1b:50:af:f9:d3:80:f0:03:72:9b:0d:37:aa:83: 37:93:ac:d0:98:4d:7c:d4:61:1f:59:87:d3:a7:7b:f3:49:93: 44:20:49:c0:55:90:50:3a:19:86:f7:b0:41:86:17:77:f5:91: 6d:ff:1f:e8:8c:c6:b8:d5:16:7e:8a:9a:79:b9:12:f4:a6:39: fb:2a:03:d1:bc:54:70:96:78:97:83:9e:17:bb:21:93:ba:26: f3:17:f0:ec:59:32:84:ae:b5:50:7a:4e:1a:09:35:ad:7b:ae: d5:3a:6e:da:e2:7c:4d:04:da:43:f6:16:78:45:9f:59:c5:13: 28:99:ed:df:21:c8:14:84:ce:2e:0f:21:80:c9:bd:52:ca:83: cc:9a:fb:89:67:d4:98:93:57:32:01:dd:66:6a:c1:80:7e:a1: 89:ed:af:f6:dc:e6:a3:17:99:3d:78:92:1d:fc:49:af:47:2e: 37:c0:43:6d:77:06:58:6b:a7:e3:01:64:c2:14:07:ca:0c:9b: 80:41:2b:e5:9d:87:60:56:8f:14:a3:e3:8d:eb:88:da:7e:ae: cf:00:42:f4:af:e6:05:a8:b0:99:7e:01:dd:3e:6e:2b:22:05: 79:a0:1b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3AtRmvk/BdsnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MGJiYjc0MWItNzFlOS00NjNkLTk2MmQtYTc3YTA2M2U5OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdd0MyoPi8CLbkADLZDMNCxk3SveeCym7nh5 LxPzO0+qN9p634620Sr9jRW5APKviFEVSUACWlyXNSR6RmgJj19DHwIK4TfgxnZl WWVTh4Wd+eWd16tJSMz8W2Nsdy+RVXJe7+mhMjxXEataGPwFLZHwpBCO15iQLC9X wA3vBdtJMU3AYkhog+MaZaRgoUDSgBYZHRdimZM+P6fnh+maezhMH3RkLX+k3NK3 21xL59x6xYYaJzM4tvoRHMH4wppNhiViIec+GlIPdtmS53jWnMVFGw6NXgjROwuN v3aQLg4v1tzpgoXMUEFGa+RzdvWE4bg5aGqbjUdbm1pUTSjWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlPMKNaZ/YrOyjxBV7z9VxMk9WuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvZWZiMjJlOWItMWRiMS0z MjM5LWIyZDMtNjVlMGRmNGFiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqwm2aDu3k11UmsRJw++MeAfGri0GQbUK/504DwA3KbDTeqgzeTrNCY TXzUYR9Zh9One/NJk0QgScBVkFA6GYb3sEGGF3f1kW3/H+iMxrjVFn6Kmnm5EvSm OfsqA9G8VHCWeJeDnhe7IZO6JvMX8OxZMoSutVB6ThoJNa17rtU6btrifE0E2kP2 FnhFn1nFEyiZ7d8hyBSEzi4PIYDJvVLKg8ya+4ln1JiTVzIB3WZqwYB+oYntr/bc 5qMXmT14kh38Sa9HLjfAQ213Blhrp+MBZMIUB8oMm4BBK+Wdh2BWjxSj443riNp+ rs8AQvSv5gWosJl+Ad0+bisiBXmgG1Q= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org