$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: ztrFe4POw8eWMmHxBPYEjIzQLVlCqveM32D1SeksbhA= Subject key identifier: 13:38:F3:82:FD:B2:45:C9:96:8E:14:C9:7A:C5:3E:B5:11:57:BD:C6 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285847967BC4BB00B5703D70889E80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:c4:bb:00:b5:70:3d:70:88:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=097b19c5-38d0-421b-b93f-2b17f70a87e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:1a:e4:93:10:b8:46:b4:84:41:33:6f:26: fc:c2:2d:80:8f:29:1c:f7:70:86:d1:85:cb:cd:54: d6:d3:17:ec:ee:85:fd:9a:79:52:6f:c8:90:3e:32: 69:c1:ce:ac:79:77:c9:e3:d1:2a:20:a0:30:6f:72: 5c:da:cd:75:d5:f7:36:ba:77:e5:ad:91:62:04:3f: 04:40:4c:ab:cf:b7:bc:78:6d:9c:e3:ba:73:f1:ba: 33:a7:41:1b:94:ec:ba:59:4e:63:47:eb:a9:b8:1e: 8b:e0:e4:58:ef:d3:a3:ab:05:0e:44:38:34:f6:46: 9d:82:ab:1d:d3:4d:7e:21:c0:22:21:10:c0:f5:33: be:da:0b:52:11:42:32:64:b9:b5:d9:a3:6d:54:60: d1:61:67:05:7e:55:ca:c5:08:2a:49:d8:ba:09:4a: 44:3d:6a:f1:ba:b8:76:e8:24:4d:16:0e:16:e0:04: 4f:2d:44:3a:39:1a:17:8b:2d:35:2b:fd:88:48:67: 7b:3e:74:07:89:6a:80:c7:20:36:9c:a9:a0:db:f4: 9e:38:f7:59:93:fc:73:a3:c5:9c:18:2a:37:7e:7b: 04:cd:40:d6:e9:06:dd:a4:03:97:d7:d9:45:63:90: 65:e5:a1:35:c0:05:b1:61:44:58:6f:06:b8:02:7e: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:38:F3:82:FD:B2:45:C9:96:8E:14:C9:7A:C5:3E:B5:11:57:BD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f3:ce:b1:27:41:cf:7a:e1:37:9d:d4:c6:b1:cb:36:cf:2a: 5a:19:f7:dc:13:64:19:59:20:2b:67:52:d5:0a:fd:65:39:9c: 61:58:86:c6:c9:1b:40:10:5e:07:9c:6a:3a:fe:c6:8b:65:c1: 93:a9:4c:89:32:5d:7c:6b:6f:24:91:ed:3c:32:82:e2:1a:7e: 46:39:2c:ed:38:76:00:4f:8c:c2:78:5a:2a:c0:47:ca:8f:4c: 93:d2:a9:01:3d:b8:a1:4f:db:b6:6d:d1:73:7b:21:26:32:57: 6a:6c:90:a4:12:7a:f9:da:22:68:7f:c6:77:51:cb:6d:53:0a: a9:33:59:68:4b:3d:1d:d1:1a:8a:42:b9:6b:5c:1e:a4:e0:21: 25:96:ed:42:f8:86:71:de:b9:44:40:b8:a9:a0:1e:7d:cf:7e: 9a:85:a2:be:7d:26:f3:6b:9e:5f:6b:56:61:58:b0:7e:2c:6a: c2:23:ef:6a:b5:0d:be:20:fa:6d:81:33:55:f5:2b:1c:5d:0d: cf:b7:b7:33:27:3a:67:3e:c4:f8:d3:4f:ed:de:05:b0:0c:1d: 33:2d:4e:ab:54:1c:d0:47:4b:a4:5a:a2:26:e2:df:43:f7:1b: 9f:53:7c:13:c6:52:a9:04:b6:41:23:2b:c0:39:bb:34:7e:81: a4:88:c1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8S7ALVwPXCInoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk MDk3YjE5YzUtMzhkMC00MjFiLWI5M2YtMmIxN2Y3MGE4N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoka5JMQuEa0hEEzbyb8wi2Ajykc93CG0YXL zVTW0xfs7oX9mnlSb8iQPjJpwc6seXfJ49EqIKAwb3Jc2s111fc2unflrZFiBD8E QEyrz7e8eG2c47pz8bozp0EblOy6WU5jR+upuB6L4ORY79OjqwUORDg09kadgqsd 001+IcAiIRDA9TO+2gtSEUIyZLm12aNtVGDRYWcFflXKxQgqSdi6CUpEPWrxurh2 6CRNFg4W4ARPLUQ6ORoXiy01K/2ISGd7PnQHiWqAxyA2nKmg2/SeOPdZk/xzo8Wc GCo3fnsEzUDW6QbdpAOX19lFY5Bl5aE1wAWxYURYbwa4An5KmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM484L9skXJlo4UyXrFPrURV73GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXzzrEnQc964Ted1MaxyzbPKloZ99wTZBlZICtnUtUK/WU5nGFYhsbJ G0AQXgecajr+xotlwZOpTIkyXXxrbySR7TwyguIafkY5LO04dgBPjMJ4WirAR8qP TJPSqQE9uKFP27Zt0XN7ISYyV2pskKQSevnaImh/xndRy21TCqkzWWhLPR3RGopC uWtcHqTgISWW7UL4hnHeuURAuKmgHn3PfpqFor59JvNrnl9rVmFYsH4sasIj72q1 Db4g+m2BM1X1KxxdDc+3tzMnOmc+xPjTT+3eBbAMHTMtTqtUHNBHS6Raoibi30P3 G59TfBPGUqkEtkEjK8A5uzR+gaSIwRs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org