$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: YpoIjein6uzigfmugc8ji2b0QuZLlNkyZNMtqW2Bpds= Subject key identifier: 1B:D6:DA:E5:CA:0B:DD:5A:4F:BD:35:3A:B8:F0:74:51:AB:1D:93:41 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F432858478026597B4271D23197C13C80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:59:7b:42:71:d2:31:97:c1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=5ecb9dcb-65b0-4dfe-8bba-a55ec655e9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:34:5a:72:3a:2e:4e:74:de:d2:39:03:9e: 79:ae:b0:d5:10:10:36:76:f5:57:09:23:9b:5c:76: 1f:65:a8:5b:7a:cc:6a:3c:a1:1a:34:0f:b5:96:52: 5a:21:f7:c1:89:f7:70:da:ed:d5:ea:0a:07:11:45: 72:ea:87:ae:14:0c:b7:3f:96:57:4c:c9:19:a5:4e: f1:fe:57:10:87:26:11:4e:dd:05:8a:63:1e:cb:ef: 6b:10:6d:18:a1:ed:3e:40:52:75:e5:63:a1:42:b1: ac:7d:83:ed:63:f9:48:0e:be:8b:8b:5c:06:7c:96: d2:4f:20:20:8e:03:95:47:75:14:55:5a:56:16:8b: f8:d9:15:41:31:df:b4:82:cf:83:eb:62:09:20:16: 18:8f:de:69:a8:f1:b2:ff:2f:4e:35:ea:8c:26:86: 34:fa:08:43:90:24:e8:fc:e7:ca:83:2c:60:c2:4e: c3:72:3f:11:e3:dc:0e:cc:1c:7a:a6:21:b4:c3:7f: c3:f3:94:67:3c:24:fe:16:56:79:4c:75:45:91:cf: 67:e1:90:12:13:dd:60:c9:5b:9f:dd:89:3f:0a:22: 90:76:fc:ee:59:3c:20:29:74:99:15:08:3c:f1:e0: fb:02:fc:2a:d4:48:42:6b:df:50:fb:5e:c8:c9:91: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D6:DA:E5:CA:0B:DD:5A:4F:BD:35:3A:B8:F0:74:51:AB:1D:93:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2c:d4:7a:25:88:c5:62:e1:2d:3d:43:2e:58:6b:67:96:aa: ec:ef:9b:2b:16:f1:86:41:58:51:7e:ec:25:61:af:bb:c5:28: 09:81:3b:98:62:ac:45:18:d5:79:d9:39:fc:b9:92:3b:8f:cd: ef:6f:1c:1c:91:58:3f:17:71:a5:6d:78:95:ea:74:8f:33:4c: 8c:07:7d:e6:bd:98:1f:5e:66:9c:72:34:cc:63:bb:54:9a:0a: 54:44:52:f5:e7:68:ef:33:b1:c4:a6:99:9e:ea:03:73:01:54: d4:55:a9:27:8e:70:9e:77:44:82:3f:8b:9b:1d:2a:fd:8a:64: 1b:5c:74:9e:4f:3a:f3:6b:3b:ee:e2:4a:b0:de:14:2c:a6:c0: 42:c1:93:07:9b:ed:e2:4e:4d:3b:1c:5f:49:9c:7d:e8:36:64: 51:d7:27:65:f3:c9:55:b4:04:fa:7c:2e:9d:7d:71:1c:48:e8: 6d:3c:63:66:2e:df:15:11:b3:2c:88:ae:d7:0f:3a:34:5d:63: 7e:2a:e1:a4:9e:d3:52:f9:de:4e:4e:08:fb:27:d3:42:d6:dd: 8f:a6:e3:0e:fe:79:07:5e:1f:77:00:5d:35:ce:67:6f:85:0a: 6c:b7:1a:6e:5d:cd:bf:1c:6e:e4:6b:01:56:ca:55:b4:01:77: c9:2d:ee:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJll7QnHSMZfBPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk NWVjYjlkY2ItNjViMC00ZGZlLThiYmEtYTU1ZWM2NTVlOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/s0WnI6Lk503tI5A555rrDVEBA2dvVXCSOb XHYfZahbesxqPKEaNA+1llJaIffBifdw2u3V6goHEUVy6oeuFAy3P5ZXTMkZpU7x /lcQhyYRTt0FimMey+9rEG0Yoe0+QFJ15WOhQrGsfYPtY/lIDr6Li1wGfJbSTyAg jgOVR3UUVVpWFov42RVBMd+0gs+D62IJIBYYj95pqPGy/y9ONeqMJoY0+ghDkCTo /OfKgyxgwk7Dcj8R49wOzBx6piG0w3/D85RnPCT+FlZ5THVFkc9n4ZASE91gyVuf 3Yk/CiKQdvzuWTwgKXSZFQg88eD7Avwq1EhCa99Q+17IyZEiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvW2uXKC91aT701OrjwdFGrHZNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADws1HoliMVi4S09Qy5Ya2eWquzvmysW8YZBWFF+7CVhr7vFKAmBO5hi rEUY1XnZOfy5kjuPze9vHByRWD8XcaVteJXqdI8zTIwHfea9mB9eZpxyNMxju1Sa ClREUvXnaO8zscSmmZ7qA3MBVNRVqSeOcJ53RII/i5sdKv2KZBtcdJ5POvNrO+7i SrDeFCymwELBkweb7eJOTTscX0mcfeg2ZFHXJ2XzyVW0BPp8Lp19cRxI6G08Y2Yu 3xURsyyIrtcPOjRdY34q4aSe01L53k5OCPsn00LW3Y+m4w7+eQdeH3cAXTXOZ2+F Cmy3Gm5dzb8cbuRrAVbKVbQBd8kt7tI= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org