$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa File: 587fa17e-6074-36b9-a166-4b4cac46f9a8.roa (raw, json) Hash identifier: hgCwA+uo2SiwAFWJtABQYhcsVje14h3VlF69d4EzTLs= Subject key identifier: 63:FD:1F:E4:FC:C6:19:5A:90:00:04:A8:A2:76:22:67:A7:DD:3E:57 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F7EB57360B51D9298F6F80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa Signing time: Fri 15 Nov 2024 01:56:21 +0000 ROA not before: Fri 15 Nov 2024 01:56:21 +0000 ROA not after: Thu 13 Feb 2025 01:56:21 +0000 asID: 213122 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f7:eb:57:36:0b:51:d9:29:8f:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:56:21 2024 GMT Not After : Feb 13 01:56:21 2025 GMT Subject: CN=f4f3e8a8-bf87-419b-aacd-71e415c0216a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:14:ae:63:ab:43:7f:9a:82:b4:f8:62:dd: 4e:f4:b0:1c:e5:34:cf:31:38:39:30:33:3b:8d:90: 16:1c:3d:8e:a4:a4:d2:82:7c:f1:e6:a6:3f:20:8f: 80:29:da:56:33:f7:b4:e6:03:d9:41:ed:2f:ac:d3: a4:89:82:f2:4b:16:51:19:7a:75:c6:ea:e0:0a:6c: ff:99:10:7e:99:51:0d:b8:a4:8c:c2:5d:7e:d3:ef: c1:dc:00:ed:61:cd:90:8e:64:b3:93:44:9d:86:e2: f4:f2:24:7d:56:e9:cb:c5:19:5a:e5:62:c1:8d:ce: c1:b3:b1:14:b6:37:59:f4:ac:85:94:b0:4b:5d:81: ac:a4:c6:2f:e7:ba:97:95:1e:34:75:37:c2:4b:dc: 65:d9:29:54:4f:43:00:1f:e1:52:9b:cb:67:b4:49: 35:c9:a9:47:94:83:cf:98:fb:a4:54:31:96:78:63: 3a:19:21:38:37:35:bc:12:c2:58:f2:e2:aa:a4:7b: 7d:e0:72:fa:90:02:05:b8:d9:58:18:e3:75:ed:29: 87:81:cb:f5:18:ba:ee:83:fa:0a:06:a2:65:31:77: 7c:bc:9a:20:cb:60:9d:45:e1:6e:d8:63:3f:cc:18: 4c:a5:22:6d:a5:75:b8:e3:84:de:83:db:35:b6:48: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:1F:E4:FC:C6:19:5A:90:00:04:A8:A2:76:22:67:A7:DD:3E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:63:6b:c3:14:ee:ef:57:d9:68:4d:ac:ad:9c:13:b4:5f:7a: 2f:69:18:31:9a:f2:a0:73:1c:6e:f1:d4:7c:e6:1d:0d:44:61: 6f:ac:d2:c8:85:1e:1f:6f:98:e8:5b:51:0b:6f:8e:e1:8e:58: 14:ee:e0:6f:2e:f0:5c:77:f0:76:13:fb:e0:2d:2a:e3:9b:48: bf:9a:c4:54:86:80:9e:ac:60:cb:5b:2b:33:ad:7b:f3:3d:66: dc:92:85:f1:b4:b7:3c:fe:13:d2:92:a7:b1:11:f8:d9:2a:61: cf:d7:f3:b7:76:25:13:c5:5d:6b:c3:29:c6:43:35:d1:c8:35: 4f:70:7b:60:3f:21:f3:30:7b:b1:c6:94:12:3e:c3:b9:d2:9c: e0:ac:f4:b3:3a:46:11:30:49:b4:57:e9:59:76:82:f0:8e:4b: d4:a2:ce:be:66:27:bf:12:2e:6a:c0:24:ee:65:0d:6a:dd:44: 32:7f:63:ef:0f:af:2d:e0:c2:0e:fc:03:4d:22:d3:4c:17:30: 47:0b:d7:59:08:b7:ab:94:b2:c3:06:4a:87:45:c8:da:9b:1f: af:4a:71:22:54:a2:89:88:93:f9:0a:87:41:c6:45:1d:6b:08: d6:38:a8:28:85:33:36:7b:b5:04:58:24:73:28:b1:9a:2b:d5: b9:50:31:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh9+tXNgtR2SmPb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNTYyMVoXDTI1MDIxMzAxNTYyMVowLzEtMCsGA1UEAxMk ZjRmM2U4YTgtYmY4Ny00MTliLWFhY2QtNzFlNDE1YzAyMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql0UrmOrQ3+agrT4Yt1O9LAc5TTPMTg5MDM7 jZAWHD2OpKTSgnzx5qY/II+AKdpWM/e05gPZQe0vrNOkiYLySxZRGXp1xurgCmz/ mRB+mVENuKSMwl1+0+/B3ADtYc2QjmSzk0SdhuL08iR9VunLxRla5WLBjc7Bs7EU tjdZ9KyFlLBLXYGspMYv57qXlR40dTfCS9xl2SlUT0MAH+FSm8tntEk1yalHlIPP mPukVDGWeGM6GSE4NzW8EsJY8uKqpHt94HL6kAIFuNlYGON17SmHgcv1GLrug/oK BqJlMXd8vJogy2CdReFu2GM/zBhMpSJtpXW444Teg9s1tkjNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP9H+T8xhlakAAEqKJ2Imen3T5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTg3ZmExN2UtNjA3NC0z NmI5LWExNjYtNGI0Y2FjNDZmOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZja8MU7u9X2WhNrK2cE7Rfei9pGDGa8qBzHG7x1HzmHQ1EYW+s0siF Hh9vmOhbUQtvjuGOWBTu4G8u8Fx38HYT++AtKuObSL+axFSGgJ6sYMtbKzOte/M9 ZtyShfG0tzz+E9KSp7ER+NkqYc/X87d2JRPFXWvDKcZDNdHINU9we2A/IfMwe7HG lBI+w7nSnOCs9LM6RhEwSbRX6Vl2gvCOS9Sizr5mJ78SLmrAJO5lDWrdRDJ/Y+8P ry3gwg78A00i00wXMEcL11kIt6uUssMGSodFyNqbH69KcSJUoomIk/kKh0HGRR1r CNY4qCiFMzZ7tQRYJHMosZor1blQMZA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:32 2024 by rpki-client on console-fra.rpki-client.org