$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: Bp6HN+mqBr7Drqgwf1sUDkwl/vn+3P/Lw2YopmkltRk= Subject key identifier: 9F:D0:51:EA:CF:6E:9E:3E:3A:33:AC:A6:CC:DB:73:9F:8F:CE:2A:82 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584773965CB7E1755CF06BC2FDE0 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:5c:b7:e1:75:5c:f0:6b:c2:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=24c37e1d-338c-4d99-9a57-ff98839cd638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:48:26:92:6f:76:67:8f:2b:9f:1e:b1:ee: 04:08:62:16:9d:ab:5d:78:71:55:1a:b2:5e:32:82: fa:61:93:8f:dd:23:d1:d9:28:99:35:ce:45:7b:10: ea:75:00:e3:1c:97:8f:6e:50:0c:ca:6a:aa:19:28: 49:52:62:11:e5:44:ef:db:27:52:05:b0:0e:91:eb: 99:6b:8e:f8:16:83:27:21:3b:5a:01:ea:47:03:f0: 1c:9b:be:db:18:13:e3:5b:6e:64:3a:41:c2:62:a0: 39:ef:fa:42:74:9f:f7:86:a2:bb:42:24:db:1f:67: 3f:b7:d1:b0:e2:6c:56:30:da:77:1b:57:15:90:62: 9f:99:c8:da:e0:ce:e6:a1:a1:ea:73:00:ec:f0:50: 83:f1:b6:95:1a:54:4a:96:bc:9e:82:fe:88:b9:36: 69:96:ab:d0:cc:c4:39:21:8d:7d:50:ed:d9:98:b3: 01:6d:92:92:32:b6:3d:59:b5:77:97:50:64:17:0b: ac:7c:ed:00:ed:9f:44:a1:f2:9b:22:ad:86:ad:fb: ec:eb:b6:bb:e9:d4:75:00:f3:86:1d:13:ce:f3:6c: f0:43:81:5c:15:ef:0d:3a:87:38:ca:d6:1d:be:18: 67:1e:ca:80:73:96:34:71:d9:0b:1d:7e:9f:86:c7: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:51:EA:CF:6E:9E:3E:3A:33:AC:A6:CC:DB:73:9F:8F:CE:2A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0b:fc:d5:6c:91:99:96:11:8d:54:2a:33:3f:fd:10:78:b6: 8e:0e:5d:7a:f8:42:a8:57:45:a1:74:51:52:38:1c:59:b2:21: 17:32:af:43:e3:ed:0e:80:19:77:a0:d1:ce:fe:42:1f:39:f9: 50:11:6c:86:71:d3:11:ce:f1:de:e1:02:7e:3d:34:83:9f:6b: 52:18:ab:60:73:c2:df:d2:91:23:08:db:47:1a:1c:05:11:53: c8:c7:e9:15:43:42:7e:d8:d7:b4:ef:39:13:0f:ae:3d:76:e8: d8:22:f2:1f:ea:38:b5:71:d0:fb:bc:d2:11:fe:78:e8:80:40: 0f:18:61:93:70:f4:cd:84:cc:b6:cc:1d:3d:19:37:fc:3e:2a: a0:69:34:ae:26:64:ec:5a:52:e1:ca:19:35:6d:60:06:2f:88: 2c:cc:59:55:2b:a0:a0:8b:b0:a4:ad:c0:d4:f3:24:81:6d:c1: d3:3e:37:5d:d3:89:39:ef:7d:c3:53:86:42:bd:67:d7:78:e3: 35:08:bf:4e:6b:39:1e:ed:b6:ef:79:cd:74:d9:29:00:84:4e: 24:c1:e0:77:14:15:bd:b8:a0:6f:de:f2:0a:09:64:48:d0:73: a6:53:70:d8:ed:2e:8c:24:dc:28:bd:3b:39:58:9b:49:f2:5b: 41:ca:64:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlly34XVc8GvC/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjRjMzdlMWQtMzM4Yy00ZDk5LTlhNTctZmY5ODgzOWNkNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpFIJpJvdmePK58ese4ECGIWnatdeHFVGrJe MoL6YZOP3SPR2SiZNc5FexDqdQDjHJePblAMymqqGShJUmIR5UTv2ydSBbAOkeuZ a474FoMnITtaAepHA/Acm77bGBPjW25kOkHCYqA57/pCdJ/3hqK7QiTbH2c/t9Gw 4mxWMNp3G1cVkGKfmcja4M7moaHqcwDs8FCD8baVGlRKlryegv6IuTZplqvQzMQ5 IY19UO3ZmLMBbZKSMrY9WbV3l1BkFwusfO0A7Z9EofKbIq2Grfvs67a76dR1APOG HRPO82zwQ4FcFe8NOoc4ytYdvhhnHsqAc5Y0cdkLHX6fhsd0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/QUerPbp4+OjOspszbc5+PziqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYL/NVskZmWEY1UKjM//RB4to4OXXr4QqhXRaF0UVI4HFmyIRcyr0Pj 7Q6AGXeg0c7+Qh85+VARbIZx0xHO8d7hAn49NIOfa1IYq2Bzwt/SkSMI20caHAUR U8jH6RVDQn7Y17TvORMPrj126Ngi8h/qOLVx0Pu80hH+eOiAQA8YYZNw9M2EzLbM HT0ZN/w+KqBpNK4mZOxaUuHKGTVtYAYviCzMWVUroKCLsKStwNTzJIFtwdM+N13T iTnvfcNThkK9Z9d44zUIv05rOR7ttu95zXTZKQCETiTB4HcUFb24oG/e8goJZEjQ c6ZTcNjtLowk3Ci9OzlYm0nyW0HKZKk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org