$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: Jims1KUsWP056TFhmb2jFJNOe5RfuMecE3HBNKjBsV4= Subject key identifier: 0E:A1:64:96:7A:16:A0:BD:F1:34:D4:98:AA:17:17:1F:23:14:D9:03 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584780265A009FE7081227211E00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:5a:00:9f:e7:08:12:27:21:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=156237cc-5ccb-4754-a559-7f72e966afc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b6:92:af:48:71:0e:98:4b:9d:77:fb:fc:19: 11:ad:7b:56:e1:f5:4e:f3:5f:d9:d6:21:cb:39:0d: 87:be:f1:48:d9:51:2f:33:5a:74:40:19:09:68:9d: ff:21:0d:7e:12:ea:e6:64:79:d3:a4:06:c9:98:86: 03:10:f1:af:ad:ee:db:92:69:ad:85:de:66:61:16: 28:3f:47:37:92:e9:23:c3:66:28:39:03:49:ac:14: 7e:00:51:fd:35:84:d0:ae:26:4c:5d:c9:07:63:de: 41:8c:37:68:92:ee:1a:5f:a6:24:11:53:26:c8:f0: 6a:88:1d:30:9d:24:6e:31:93:db:7a:12:cd:62:bb: 07:23:42:84:03:2d:d3:7b:0a:e2:a0:49:83:04:b6: ca:f8:42:d4:75:0d:23:34:8d:06:05:cf:e6:a3:16: d4:58:63:00:7c:b0:e9:a7:03:58:21:4d:d5:85:d3: a2:58:21:f0:d1:71:c8:d2:41:cf:70:0d:3d:47:31: f1:22:b3:75:36:9e:8a:28:08:2a:54:06:3c:14:d9: 89:bc:1c:03:24:1d:1b:5f:2b:fc:dd:13:7e:49:d9: 81:0a:70:ae:1a:94:0e:dd:ec:93:8f:03:85:ce:13: df:d3:af:1f:e5:d2:0f:1d:8e:80:39:da:71:8b:91: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A1:64:96:7A:16:A0:BD:F1:34:D4:98:AA:17:17:1F:23:14:D9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5b:58:dc:00:01:8d:45:da:01:96:2f:a9:e6:65:81:ae:30: d4:f6:a1:2d:38:e7:16:88:07:41:49:71:e1:92:47:92:59:f5: 42:52:ba:8b:09:b9:a0:4c:cc:c1:6e:d5:87:94:fd:c1:9c:70: c1:7e:b9:43:06:b4:62:a4:29:a7:14:45:7c:8c:62:ad:1f:c9: 76:82:ae:1d:e8:ec:86:f4:8b:f4:6a:39:88:11:7b:34:3a:d9: 97:5d:52:ee:6a:4c:af:22:2f:21:b4:07:ae:2e:62:a7:6f:de: 60:1b:05:f2:12:e2:5b:29:5e:cc:18:65:a7:90:1d:ee:3a:0b: c0:83:db:64:43:04:5b:ff:b4:76:fc:28:1f:52:58:ff:e5:f1: 73:02:cb:f1:cd:61:d6:f4:38:1a:83:ac:8f:82:9c:44:10:e5: 9c:a4:3a:d0:a6:7b:a8:ec:b8:75:68:97:00:d7:a9:0b:ee:c8: bd:ad:d6:43:9b:cd:1d:e9:a7:db:b7:0b:d2:28:97:65:88:0b: 78:b4:3a:e9:a1:6d:36:57:54:b6:a0:8b:24:7f:8f:3d:72:e0: 7f:4b:97:06:f1:93:e8:3e:2f:a7:cb:f4:7e:46:fe:d8:eb:ec: f5:db:23:98:4d:c0:16:1b:66:a0:e0:97:b2:bd:36:55:5d:cf: a5:3e:41:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJloAn+cIEichHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk MTU2MjM3Y2MtNWNjYi00NzU0LWE1NTktN2Y3MmU5NjZhZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbaSr0hxDphLnXf7/BkRrXtW4fVO81/Z1iHL OQ2HvvFI2VEvM1p0QBkJaJ3/IQ1+EurmZHnTpAbJmIYDEPGvre7bkmmthd5mYRYo P0c3kukjw2YoOQNJrBR+AFH9NYTQriZMXckHY95BjDdoku4aX6YkEVMmyPBqiB0w nSRuMZPbehLNYrsHI0KEAy3TewrioEmDBLbK+ELUdQ0jNI0GBc/moxbUWGMAfLDp pwNYIU3VhdOiWCHw0XHI0kHPcA09RzHxIrN1Np6KKAgqVAY8FNmJvBwDJB0bXyv8 3RN+SdmBCnCuGpQO3eyTjwOFzhPf068f5dIPHY6AOdpxi5GULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6hZJZ6FqC98TTUmKoXFx8jFNkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhbWNwAAY1F2gGWL6nmZYGuMNT2oS045xaIB0FJceGSR5JZ9UJSuosJ uaBMzMFu1YeU/cGccMF+uUMGtGKkKacURXyMYq0fyXaCrh3o7Ib0i/RqOYgRezQ6 2ZddUu5qTK8iLyG0B64uYqdv3mAbBfIS4lspXswYZaeQHe46C8CD22RDBFv/tHb8 KB9SWP/l8XMCy/HNYdb0OBqDrI+CnEQQ5ZykOtCme6jsuHVolwDXqQvuyL2t1kOb zR3pp9u3C9Iol2WIC3i0OumhbTZXVLagiyR/jz1y4H9Llwbxk+g+L6fL9H5G/tjr 7PXbI5hNwBYbZqDgl7K9NlVdz6U+QSM= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org