$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa File: 85befa1b-cd80-3af9-861d-226b5949597f.roa (raw, json) Hash identifier: 2CN733iD81dJtIpDehWTzqiFNhiWy8NEhTM6pxIy1mo= Subject key identifier: 99:D1:31:DA:90:79:C5:99:BE:2E:43:98:35:B1:6A:D2:60:43:2B:16 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F8070D2CB4637B86DC9180 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa Signing time: Fri 15 Nov 2024 01:56:34 +0000 ROA not before: Fri 15 Nov 2024 01:56:34 +0000 ROA not after: Thu 13 Feb 2025 01:56:34 +0000 asID: 213122 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f8:07:0d:2c:b4:63:7b:86:dc:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:56:34 2024 GMT Not After : Feb 13 01:56:34 2025 GMT Subject: CN=0ef823da-d377-4601-85d1-8b1d1f8f0cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:39:4d:11:a7:64:bc:a3:be:4f:43:95:cc: 0c:bd:5a:fa:88:3e:77:8d:30:79:b5:07:0e:46:d9: 1d:67:dc:4a:72:da:83:d4:a7:48:8f:a0:94:90:c6: 6c:50:3b:16:2f:63:b2:65:a0:a3:e3:f9:c8:12:8d: df:5b:f4:41:a3:1b:82:11:a2:5a:67:de:4a:d3:9a: 99:43:20:6c:dc:50:aa:d0:ff:e9:40:12:88:89:92: eb:82:5b:b7:da:72:d3:43:9f:b8:54:67:72:98:85: 2d:67:ba:dd:e8:9c:22:ab:7e:28:0f:2e:86:07:b2: 38:bf:84:42:aa:2e:f6:f1:d8:b3:23:b1:f7:fe:59: 5f:59:f7:07:bb:9e:5e:63:a0:8b:8f:6f:51:de:47: f5:76:06:7b:65:0e:2e:51:b4:5b:86:cb:3e:84:4b: bf:31:b5:21:39:70:49:b4:5d:8f:fb:27:00:6d:13: 8b:f3:0f:8e:58:4d:ba:0f:cb:9d:ba:e3:58:76:05: ba:d8:aa:11:6e:c8:a3:7e:79:dc:46:f1:21:96:6a: 5c:e5:60:65:ac:49:f0:9d:07:a6:f6:36:77:d1:68: ad:95:4c:5e:94:92:58:20:da:6b:b4:34:a8:98:75: 8d:eb:37:a1:f8:58:dd:4e:0f:cf:c7:6c:3e:bd:ff: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:31:DA:90:79:C5:99:BE:2E:43:98:35:B1:6A:D2:60:43:2B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8e:7d:5f:5c:f1:c2:13:67:64:f8:96:87:2c:bc:04:d5:e8: a1:d7:42:b6:44:4f:c2:4c:ee:e7:7c:02:93:44:38:a0:e5:ef: f8:b3:42:46:09:e5:03:62:c0:2e:b8:d3:dc:22:88:62:98:81: ab:15:68:c8:b3:ad:21:07:6e:59:18:e4:5e:a4:98:87:54:16: a6:36:af:d7:e3:0f:61:ed:63:51:a4:a3:17:6c:c3:16:fa:8f: 74:ce:37:59:0a:60:43:2f:70:02:95:9e:ad:de:ac:c7:8e:cc: a8:e9:cb:c0:d3:71:a5:8d:28:e9:8b:ef:13:d7:b3:56:ba:f6: af:05:7a:18:78:17:ef:36:6d:f3:b4:fe:2e:63:fc:06:79:7d: e1:90:b3:f7:d5:a9:c6:cf:da:b8:40:5c:b9:c8:e8:02:4c:e8: bf:48:fa:02:a6:a5:24:e6:ab:5c:84:30:d9:b4:b6:1f:d2:62: 65:ee:92:4c:58:94:7f:13:c7:86:73:6d:7a:4e:91:62:d7:25: 4f:09:7b:41:64:51:14:76:10:5e:04:d7:ad:a8:96:4c:42:64: 4d:53:27:b2:18:47:bf:8c:de:05:f0:67:df:12:7b:6b:5c:fb: ef:c5:66:66:5b:1c:fd:24:e9:ea:3f:8a:f6:e1:9e:70:e8:33: a8:45:bb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+AcNLLRje4bckYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNTYzNFoXDTI1MDIxMzAxNTYzNFowLzEtMCsGA1UEAxMk MGVmODIzZGEtZDM3Ny00NjAxLTg1ZDEtOGIxZDFmOGYwY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJQ5TRGnZLyjvk9DlcwMvVr6iD53jTB5tQcO RtkdZ9xKctqD1KdIj6CUkMZsUDsWL2OyZaCj4/nIEo3fW/RBoxuCEaJaZ95K05qZ QyBs3FCq0P/pQBKIiZLrglu32nLTQ5+4VGdymIUtZ7rd6Jwiq34oDy6GB7I4v4RC qi728dizI7H3/llfWfcHu55eY6CLj29R3kf1dgZ7ZQ4uUbRbhss+hEu/MbUhOXBJ tF2P+ycAbROL8w+OWE26D8uduuNYdgW62KoRbsijfnncRvEhlmpc5WBlrEnwnQem 9jZ30WitlUxelJJYINprtDSomHWN6zeh+FjdTg/Px2w+vf+RhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnRMdqQecWZvi5DmDWxatJgQysWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZWZhMWItY2Q4MC0z YWY5LTg2MWQtMjI2YjU5NDk1OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6OfV9c8cITZ2T4locsvATV6KHXQrZET8JM7ud8ApNEOKDl7/izQkYJ 5QNiwC6409wiiGKYgasVaMizrSEHblkY5F6kmIdUFqY2r9fjD2HtY1Gkoxdswxb6 j3TON1kKYEMvcAKVnq3erMeOzKjpy8DTcaWNKOmL7xPXs1a69q8Fehh4F+82bfO0 /i5j/AZ5feGQs/fVqcbP2rhAXLnI6AJM6L9I+gKmpSTmq1yEMNm0th/SYmXukkxY lH8Tx4ZzbXpOkWLXJU8Je0FkURR2EF4E162olkxCZE1TJ7IYR7+M3gXwZ98Se2tc ++/FZmZbHP0k6eo/ivbhnnDoM6hFuyk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org