$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa File: 651c7010-2779-3e43-956b-dcc22baffc29.roa (raw, json) Hash identifier: kqYG+96xhpw7gObbk8/RDHrHbnE6yhKofx5MF1NclEo= Subject key identifier: 09:5D:39:58:9A:D9:33:2A:B5:7A:4B:3F:BE:91:1A:BD:FF:D4:87:F2 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F432858477FA5621E87DF5678F5EA9F80 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa Signing time: Thu 10 Oct 2024 20:40:50 +0000 ROA not before: Thu 10 Oct 2024 20:40:50 +0000 ROA not after: Wed 08 Jan 2025 21:40:50 +0000 asID: 14618 IP address blocks: 159.172.202.0/24 maxlen: 24 159.172.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7f:a5:62:1e:87:df:56:78:f5:ea:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Oct 10 20:40:50 2024 GMT Not After : Jan 8 21:40:50 2025 GMT Subject: CN=b5439f84-e4b9-4711-ba7d-6b8313de0ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:ff:f2:c6:d8:fc:8f:83:c9:76:64:fc:13: c0:1c:01:4e:fe:0c:8f:66:ea:50:3e:1b:8f:fa:d4: 57:30:8b:e3:14:52:70:66:d0:d4:ec:89:9f:68:4f: 43:9d:2a:86:92:13:7c:59:6b:a7:61:86:1e:06:d7: 46:6e:58:8e:b8:7f:c8:4d:81:b2:29:80:5f:dc:7f: 06:5c:ed:b8:cf:49:93:d4:7a:02:95:ac:be:d2:f6: 28:5b:8a:e5:ef:64:54:de:da:97:e5:69:2a:71:79: fe:72:de:88:ee:63:60:97:8e:f8:e7:6e:7c:ea:c6: af:ea:5a:85:1f:61:2f:46:71:f5:d3:b2:6d:76:13: 9b:0f:11:5a:a8:d8:0f:b0:14:8b:c0:1d:b6:70:3b: 08:c9:fb:48:43:e8:3b:5b:68:74:3c:f6:6f:39:a8: 28:b8:7a:3d:c4:1e:6d:09:4d:3e:7b:68:bf:c0:9f: 46:66:55:2c:f0:00:f1:12:7d:fe:5e:99:86:55:2a: d9:88:36:06:5b:0c:9c:4c:b2:cc:e5:9a:c7:b8:58: 3b:6c:c6:8d:c0:a1:2b:a9:4c:30:18:6b:25:9e:f9: 31:4c:d7:2f:b0:55:1f:2e:19:75:ce:d4:fd:c1:fd: 0d:fb:a9:1e:41:db:4a:dd:00:c9:9a:2d:be:cd:05: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:39:58:9A:D9:33:2A:B5:7A:4B:3F:BE:91:1A:BD:FF:D4:87:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9b:64:0c:e9:3a:b3:5c:1a:30:41:4a:5a:ef:ee:dd:74:38: 64:dd:da:39:59:33:e9:c5:ab:16:07:3b:73:70:93:e4:76:e4: 9f:25:e3:0f:44:b1:3c:c3:4b:12:0f:b8:d6:fc:1a:0b:b0:53: 39:af:03:ce:a2:32:41:fe:7b:a9:f6:78:24:6b:1d:25:5f:c9: b0:39:de:08:38:c7:df:49:8b:de:de:35:f8:5c:af:cb:a2:78: 17:46:88:91:b9:94:95:27:07:26:f4:9f:68:e6:cd:4a:e6:de: 3a:21:7b:71:7e:c5:62:1b:90:bb:71:98:df:70:73:37:14:ac: 0a:e3:e2:17:26:d8:53:ce:fe:92:05:a4:91:3b:c8:70:ee:5f: eb:c6:df:40:4c:6e:eb:06:c0:ac:63:7f:00:85:40:1c:43:57: 54:ef:43:9c:ab:b6:f2:24:96:3b:15:68:14:f5:95:e8:22:44: cd:db:0d:18:b3:24:5e:7d:a5:4a:b4:65:4e:03:fa:e1:4d:a8: 94:cd:25:a3:56:bf:6a:5d:76:cb:a4:01:2f:1a:09:88:00:b3: 50:40:d8:a0:62:84:eb:50:60:a8:8b:30:20:10:62:0f:e4:9a: d1:01:7f:fb:94:fe:c4:38:2f:78:0d:26:3a:ab:90:1f:81:f9: b0:6a:4d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd/pWIeh99WePXqn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI0MTAxMDIwNDA1MFoXDTI1MDEwODIxNDA1MFowLzEtMCsGA1UEAxMk YjU0MzlmODQtZTRiOS00NzExLWJhN2QtNmI4MzEzZGUwYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvan/8sbY/I+DyXZk/BPAHAFO/gyPZupQPhuP +tRXMIvjFFJwZtDU7ImfaE9DnSqGkhN8WWunYYYeBtdGbliOuH/ITYGyKYBf3H8G XO24z0mT1HoClay+0vYoW4rl72RU3tqX5WkqcXn+ct6I7mNgl47452586sav6lqF H2EvRnH107JtdhObDxFaqNgPsBSLwB22cDsIyftIQ+g7W2h0PPZvOagouHo9xB5t CU0+e2i/wJ9GZlUs8ADxEn3+XpmGVSrZiDYGWwycTLLM5ZrHuFg7bMaNwKErqUww GGslnvkxTNcvsFUfLhl1ztT9wf0N+6keQdtK3QDJmi2+zQWBsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAldOVia2TMqtXpLP76RGr3/1IfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNjUxYzcwMTAtMjc3OS0z ZTQzLTk1NmItZGNjMjJiYWZmYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn6zKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIebZAzpOrNcGjBBSlrv7t10OGTd2jlZM+nFqxYHO3Nwk+R25J8l4w9E sTzDSxIPuNb8GguwUzmvA86iMkH+e6n2eCRrHSVfybA53gg4x99Ji97eNfhcr8ui eBdGiJG5lJUnByb0n2jmzUrm3johe3F+xWIbkLtxmN9wczcUrArj4hcm2FPO/pIF pJE7yHDuX+vG30BMbusGwKxjfwCFQBxDV1TvQ5yrtvIkljsVaBT1legiRM3bDRiz JF59pUq0ZU4D+uFNqJTNJaNWv2pddsukAS8aCYgAs1BA2KBihOtQYKiLMCAQYg/k mtEBf/uU/sQ4L3gNJjqrkB+B+bBqTQ8= -----END CERTIFICATE-----Generated at Tue Oct 22 21:27:31 2024 by rpki-client on console-fra.rpki-client.org