$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa File: 9929da4e-946a-3592-bfea-22b4659f8ef7.roa (raw, json) Hash identifier: l+KwaCTSDyial0hQ1Ls+T49vyiygI7KZis+ROSlW/fU= Subject key identifier: AC:E2:34:6E:B3:AB:F2:66:8C:13:45:DB:B1:88:5B:EA:03:02:9B:D2 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285847994670B4E93AB34F5C15E6C0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa Signing time: Sun 20 Oct 2024 01:00:30 +0000 ROA not before: Sun 20 Oct 2024 01:00:30 +0000 ROA not after: Sat 18 Jan 2025 02:00:30 +0000 asID: 25645 IP address blocks: 137.239.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:99:46:70:b4:e9:3a:b3:4f:5c:15:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 20 01:00:30 2024 GMT Not After : Jan 18 02:00:30 2025 GMT Subject: CN=e9f5f6f3-23e5-4630-80d8-9e4deed4d28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:2f:1b:a1:95:7e:6b:7c:b2:e3:db:28:b3: 08:1c:68:5f:83:c3:a3:7e:c3:54:52:b4:c0:25:05: 52:50:26:97:c0:80:9e:c4:14:31:6a:76:ea:6a:56: 05:87:8f:26:2f:13:ab:9e:c4:a8:17:b2:9c:45:86: 63:9a:2c:0e:f6:5a:fc:87:41:f6:98:92:ef:55:02: 99:5c:c9:ad:a8:17:ba:2c:40:73:ac:23:8b:10:67: f8:f9:4d:bb:be:58:61:14:6d:7a:91:4a:83:c7:c1: ec:e1:d2:13:30:6e:a8:c0:cb:49:6b:bd:d9:0a:3c: c4:4c:cf:80:c4:dc:1d:54:bc:f5:76:c6:1e:d5:21: 45:8b:c5:73:81:17:b0:81:31:1a:26:f0:c6:5c:bf: a4:db:41:9c:06:ed:73:db:00:3d:15:d8:7c:a5:14: a3:ab:49:8f:6a:33:64:d7:3c:33:90:fc:a7:d5:bd: 35:26:5e:93:34:dd:eb:b7:16:71:af:39:91:3b:2c: db:63:57:44:81:8d:20:2a:0f:f6:f3:c7:95:5a:85: bf:51:9c:96:eb:40:5d:c0:4b:84:bc:52:ff:88:e6: 94:1a:10:00:79:9d:d4:76:31:bf:56:8d:8e:4d:e1: dd:22:60:7c:fb:f7:70:c6:f0:c3:9e:c3:87:53:cf: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:34:6E:B3:AB:F2:66:8C:13:45:DB:B1:88:5B:EA:03:02:9B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:91:b9:81:52:e0:ff:d7:53:cb:38:07:ef:44:26:63:fc:af: 5e:0b:b0:8d:05:8c:b5:aa:93:a8:30:c9:72:28:e8:6c:1b:e4: 00:2b:36:9f:7b:c7:0c:1d:1e:f9:97:b9:9f:02:3f:05:c9:6e: 9f:2e:85:ab:90:c4:d4:c8:e7:f0:22:a8:11:79:38:61:f4:da: 49:05:9b:93:b9:77:7e:7c:4d:0a:fa:3a:e6:3b:a2:96:11:7f: 52:ca:d8:f1:84:7b:e2:09:7b:4b:7f:00:8f:24:29:11:38:fe: b9:22:24:fc:49:e7:fe:05:cf:c2:6c:72:fb:88:01:27:5a:e4: c5:0e:1c:a6:68:fc:f0:ad:ac:bc:78:33:28:de:eb:a7:37:e3: 2a:a0:eb:6e:f7:05:17:ee:af:b1:27:fa:a4:fb:76:a2:ea:b9: 42:0a:13:27:6c:df:2a:56:eb:05:b5:ca:f7:be:26:65:a2:7d: 2b:67:82:21:95:b6:be:46:e8:30:cb:bc:34:16:62:d0:cd:91: bf:e5:a8:58:cb:78:8e:49:d7:de:35:fc:c3:fc:75:27:3d:59: 1a:47:f9:e1:2d:e9:d3:4f:42:51:92:a5:38:cc:44:13:e2:de: f2:7a:6a:aa:bb:5e:68:ac:e4:e5:2e:b8:ad:be:10:1b:8e:28: fb:66:0f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeZRnC06TqzT1wV5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTAyMDAxMDAzMFoXDTI1MDExODAyMDAzMFowLzEtMCsGA1UEAxMk ZTlmNWY2ZjMtMjNlNS00NjMwLTgwZDgtOWU0ZGVlZDRkMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXovG6GVfmt8suPbKLMIHGhfg8OjfsNUUrTA JQVSUCaXwICexBQxanbqalYFh48mLxOrnsSoF7KcRYZjmiwO9lr8h0H2mJLvVQKZ XMmtqBe6LEBzrCOLEGf4+U27vlhhFG16kUqDx8Hs4dITMG6owMtJa73ZCjzETM+A xNwdVLz1dsYe1SFFi8VzgRewgTEaJvDGXL+k20GcBu1z2wA9Fdh8pRSjq0mPajNk 1zwzkPyn1b01Jl6TNN3rtxZxrzmROyzbY1dEgY0gKg/288eVWoW/UZyW60BdwEuE vFL/iOaUGhAAeZ3UdjG/Vo2OTeHdImB8+/dwxvDDnsOHU88iLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKziNG6zq/JmjBNF27GIW+oDApvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOTkyOWRhNGUtOTQ2YS0z NTkyLWJmZWEtMjJiNDY1OWY4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGRuYFS4P/XU8s4B+9EJmP8r14LsI0FjLWqk6gwyXIo6Gwb5AArNp97 xwwdHvmXuZ8CPwXJbp8uhauQxNTI5/AiqBF5OGH02kkFm5O5d358TQr6OuY7opYR f1LK2PGEe+IJe0t/AI8kKRE4/rkiJPxJ5/4Fz8JscvuIASda5MUOHKZo/PCtrLx4 Myje66c34yqg6273BRfur7En+qT7dqLquUIKEyds3ypW6wW1yve+JmWifStngiGV tr5G6DDLvDQWYtDNkb/lqFjLeI5J1941/MP8dSc9WRpH+eEt6dNPQlGSpTjMRBPi 3vJ6aqq7Xmis5OUuuK2+EBuOKPtmD9c= -----END CERTIFICATE-----Generated at Mon Nov 25 16:00:54 2024 by rpki-client on console-fra.rpki-client.org