$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json) Hash identifier: xWxObrDdrU3yRHutQrsSRibN5O4kS7QPw+WDv2h7Z+c= Subject key identifier: 58:02:0D:8F:9E:4A:72:DF:8B:88:12:92:08:11:70:CC:2D:7C:C7:65 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F3EFC1ACF433F106CDE880 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa Signing time: Fri 15 Nov 2024 01:48:20 +0000 ROA not before: Fri 15 Nov 2024 01:48:20 +0000 ROA not after: Thu 13 Feb 2025 01:48:20 +0000 asID: 931 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f3:ef:c1:ac:f4:33:f1:06:cd:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:48:20 2024 GMT Not After : Feb 13 01:48:20 2025 GMT Subject: CN=4766e40c-2bb4-4bba-ad7b-ce67a27efd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:27:95:4a:12:6c:68:ee:6d:aa:04:58:03: d5:ac:9c:30:c5:4d:94:b5:a2:a7:32:b8:55:99:1c: d4:82:d6:fd:55:b7:da:28:a0:a6:88:82:d5:f1:dc: 7c:3b:09:0f:b9:00:d6:ce:1a:98:ad:18:c3:42:91: 5e:54:5c:e0:b0:4f:ee:ab:95:bf:a1:af:6e:3d:be: 11:18:b1:87:be:7a:cf:f4:d2:6f:1c:86:e9:89:b2: b4:7a:aa:61:d4:ca:d8:c2:6e:ec:df:f9:ca:d4:6c: 64:ba:c1:97:cd:6f:c9:01:0c:d6:16:52:80:96:03: 3e:23:e9:a4:c6:76:03:13:d3:55:f0:54:7f:61:a0: 69:ad:17:db:81:f0:d8:4a:9f:03:e7:c9:5e:5e:b5: 04:62:00:97:5c:b5:0e:0b:d8:ba:8f:bd:ca:d1:d8: 12:ac:54:db:08:f4:c2:a8:ac:31:19:d1:20:05:b9: 66:7d:b5:99:97:80:5b:69:0f:db:b5:86:42:0e:80: 4e:61:40:15:cf:56:be:db:4b:f0:9a:5f:e1:0d:09: 72:f3:63:7f:20:7e:1e:c6:47:75:32:36:73:7c:be: 53:9f:70:71:a8:ec:f3:2a:85:ab:24:ff:54:8d:e5: 73:6b:ae:85:ef:46:24:05:62:a3:f2:12:a6:6a:67: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:02:0D:8F:9E:4A:72:DF:8B:88:12:92:08:11:70:CC:2D:7C:C7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:77:ff:2d:44:9f:8d:99:25:4c:95:e0:aa:85:f6:13:55:20: f8:10:24:9f:55:d9:c4:95:ee:bb:b0:ba:ea:d7:39:ac:66:b2: ef:6f:36:f7:23:c1:ed:6e:f1:30:94:2b:e7:87:33:4f:0f:21: f4:c1:91:3a:b2:67:d3:43:20:e0:81:e2:12:f5:1f:1e:90:00: 96:ea:df:0e:75:a5:ec:40:b0:b1:83:5e:39:6c:3f:47:7d:82: a1:d2:0c:c4:35:bb:7c:74:dc:39:b1:81:3a:7e:af:97:dc:5a: 69:b0:48:bd:06:fd:58:55:3e:06:f7:77:7f:a1:fc:3d:82:55: e6:5b:a5:54:68:28:c9:47:cc:83:3d:7e:d5:b7:22:44:50:b3: ef:d6:9e:22:39:5f:4f:6a:6a:a2:47:54:23:3b:a0:09:76:2c: e9:dc:f2:5b:01:9e:f6:bb:ad:41:d0:00:18:65:4d:d2:cf:02: cd:87:c7:e4:31:83:1b:3d:43:50:79:63:b7:65:5d:3c:c6:34: 77:17:eb:49:a0:58:b2:ab:77:f6:64:ec:d5:fe:88:56:9a:a6: 59:74:c4:86:5b:d1:13:6d:9c:2f:57:68:65:cc:58:eb:e4:6d: 61:2a:b8:76:c2:c2:01:6b:f5:bc:f6:0d:81:4a:c3:04:eb:29: b1:a2:7e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh8+/BrPQz8QbN6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNDgyMFoXDTI1MDIxMzAxNDgyMFowLzEtMCsGA1UEAxMk NDc2NmU0MGMtMmJiNC00YmJhLWFkN2ItY2U2N2EyN2VmZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYMnlUoSbGjubaoEWAPVrJwwxU2UtaKnMrhV mRzUgtb9VbfaKKCmiILV8dx8OwkPuQDWzhqYrRjDQpFeVFzgsE/uq5W/oa9uPb4R GLGHvnrP9NJvHIbpibK0eqph1MrYwm7s3/nK1GxkusGXzW/JAQzWFlKAlgM+I+mk xnYDE9NV8FR/YaBprRfbgfDYSp8D58leXrUEYgCXXLUOC9i6j73K0dgSrFTbCPTC qKwxGdEgBblmfbWZl4BbaQ/btYZCDoBOYUAVz1a+20vwml/hDQly82N/IH4exkd1 MjZzfL5Tn3BxqOzzKoWrJP9UjeVza66F70YkBWKj8hKmamfEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgCDY+eSnLfi4gSkggRcMwtfMdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTM2ODkxZTUtODk3My0z MTNiLWE2OGEtNmVkZTQ0YmUzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV3/y1En42ZJUyV4KqF9hNVIPgQJJ9V2cSV7ruwuurXOaxmsu9vNvcj we1u8TCUK+eHM08PIfTBkTqyZ9NDIOCB4hL1Hx6QAJbq3w51pexAsLGDXjlsP0d9 gqHSDMQ1u3x03DmxgTp+r5fcWmmwSL0G/VhVPgb3d3+h/D2CVeZbpVRoKMlHzIM9 ftW3IkRQs+/WniI5X09qaqJHVCM7oAl2LOnc8lsBnva7rUHQABhlTdLPAs2Hx+Qx gxs9Q1B5Y7dlXTzGNHcX60mgWLKrd/Zk7NX+iFaapll0xIZb0RNtnC9XaGXMWOvk bWEquHbCwgFr9bz2DYFKwwTrKbGifok= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:32 2024 by rpki-client on console-fra.rpki-client.org