$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa File: 3d3cb45a-61fe-3633-8f13-e51266e75732.roa (raw, json) Hash identifier: XyLp9Drize0RndJS0X8Usyv/NMOPuggjojChwqTnHRg= Subject key identifier: AD:8A:69:3E:94:EE:58:2B:3B:C3:9B:AB:0E:0E:72:EF:63:A7:11:6C Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285847E1FA1A238BA8DA86AB25FF70 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 14618 IP address blocks: 159.172.195.0/24 maxlen: 24 159.172.200.0/24 maxlen: 24 159.172.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:fa:1a:23:8b:a8:da:86:ab:25:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=4978e89e-9945-4960-a7b3-7bc49da77636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:20:b4:3b:67:8a:c7:ab:20:68:1c:ee:6d: b5:f0:8b:19:3b:33:c9:54:74:84:9e:db:d6:7e:8c: 0b:03:93:29:53:1d:94:76:5d:a0:55:11:6d:02:cd: 15:14:a7:24:78:f5:af:df:7f:a4:98:b1:ad:36:9a: 65:c4:00:34:4d:d2:4f:e8:45:97:46:4e:6e:b4:31: d1:2c:4f:bc:db:e0:a9:f3:84:d5:9d:fb:0a:f8:76: a6:d0:48:20:f3:bc:e2:84:7e:0a:ed:0b:77:b8:b4: b2:ea:29:ff:68:80:53:35:b5:8d:b1:fc:f5:cc:ba: e5:f7:57:89:51:24:8b:98:a7:f6:c4:51:76:47:f5: 44:b2:8a:cc:ea:87:ee:66:5a:eb:e9:68:86:cd:85: 66:58:36:4f:3d:10:e4:06:cb:ab:76:ca:e3:25:a8: f6:9c:12:ef:42:52:26:05:e7:6f:b2:85:18:ea:86: 24:ef:29:86:fd:64:24:4f:d1:b9:85:4d:9e:78:f7: fc:6e:23:8e:05:57:dd:04:65:3e:d0:e7:ce:be:2e: 30:be:03:c3:d6:fd:d4:80:6d:4e:68:ae:79:32:5b: 96:fd:ba:5a:12:6c:f7:a0:05:cc:a4:41:e3:33:51: be:f6:f7:00:56:b2:96:1a:b5:58:f2:49:01:68:f8: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8A:69:3E:94:EE:58:2B:3B:C3:9B:AB:0E:0E:72:EF:63:A7:11:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.195.0/24 159.172.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:87:a8:56:45:92:bb:8b:ee:e4:51:66:4f:8a:ba:83:b2:bb: 52:72:5c:54:51:21:dd:e9:dc:3b:b1:59:e4:41:e6:0a:74:d2: db:58:a4:16:e6:7c:eb:c4:9a:36:a4:d4:a0:21:f6:e1:50:d7: 7d:90:a5:6d:e4:2a:e0:cb:53:74:1e:51:47:ff:9c:78:24:70: 74:ac:a3:8c:0e:02:b3:ec:77:c3:17:d8:bd:e6:f6:3d:92:30: 04:15:71:49:98:df:8c:8d:db:22:81:16:fd:35:9a:db:8c:ea: 87:30:fc:f6:dc:82:17:7e:cd:72:2c:37:cb:c8:32:84:3a:54: d0:d5:aa:87:a7:0d:5f:3b:af:9a:69:d1:c3:29:70:ab:02:fa: 37:c5:1c:f6:1c:47:27:8c:76:42:61:25:75:8b:b6:54:ae:4d: 64:38:cc:6d:16:50:84:62:ef:b8:9c:10:77:aa:99:22:6a:d1: bd:98:ce:ce:8a:f0:de:51:de:56:56:1a:f3:3e:b5:b7:94:4c: 57:66:6f:95:6a:a5:83:25:2a:01:39:ab:d9:42:0b:2b:a5:98: 9b:2b:f5:37:86:fd:f8:72:be:47:bc:85:d1:bd:33:89:60:48: 74:d1:94:fb:92:c6:b1:1f:75:78:7c:9b:49:63:88:e6:7b:f8: 23:52:ce:c9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfh+hoji6jahqsl/3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk NDk3OGU4OWUtOTk0NS00OTYwLWE3YjMtN2JjNDlkYTc3NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMsgtDtniserIGgc7m218IsZOzPJVHSEntvW fowLA5MpUx2Udl2gVRFtAs0VFKckePWv33+kmLGtNpplxAA0TdJP6EWXRk5utDHR LE+82+Cp84TVnfsK+Ham0Egg87zihH4K7Qt3uLSy6in/aIBTNbWNsfz1zLrl91eJ USSLmKf2xFF2R/VEsorM6ofuZlrr6WiGzYVmWDZPPRDkBsurdsrjJaj2nBLvQlIm BedvsoUY6oYk7ymG/WQkT9G5hU2eePf8biOOBVfdBGU+0OfOvi4wvgPD1v3UgG1O aK55MluW/bpaEmz3oAXMpEHjM1G+9vcAVrKWGrVY8kkBaPj14QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK2KaT6U7lgrO8Obqw4Ocu9jpxFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvM2QzY2I0NWEtNjFmZS0z NjMzLThmMTMtZTUxMjY2ZTc1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn6zDAwQB n6zIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHeHqFZFkruL7uRRZk+KuoOyu1JyXFRRId3p3DuxWeRB5gp0 0ttYpBbmfOvEmjak1KAh9uFQ132QpW3kKuDLU3QeUUf/nHgkcHSso4wOArPsd8MX 2L3m9j2SMAQVcUmY34yN2yKBFv01mtuM6ocw/Pbcghd+zXIsN8vIMoQ6VNDVqoen DV87r5pp0cMpcKsC+jfFHPYcRyeMdkJhJXWLtlSuTWQ4zG0WUIRi77icEHeqmSJq 0b2Yzs6K8N5R3lZWGvM+tbeUTFdmb5VqpYMlKgE5q9lCCyulmJsr9TeG/fhyvke8 hdG9M4lgSHTRlPuSxrEfdXh8m0ljiOZ7+CNSzsk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org