$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: 3w9m9YPSEaC1JMQsHDMbOQ8ixcX/0lMslW67uYHvToI= Subject key identifier: 7A:32:08:46:57:C9:66:B5:4C:9D:A5:86:08:1B:59:7C:60:DB:AF:B1 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285847967BC4E1775B45E60BB53F20 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:c4:e1:77:5b:45:e6:0b:b5:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=696d3300-eada-49e4-b2f1-09299c0ac8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:77:46:ae:04:d8:4f:5b:e8:8e:ab:d3:bf: 1c:04:67:0c:e2:ba:8d:35:b6:a5:ae:ee:d9:58:8d: 73:06:29:23:b1:47:74:f3:d1:48:30:7b:2b:e2:7a: 06:62:5b:0d:87:a6:b3:fa:23:4f:8a:f5:c3:18:c5: e7:59:01:3e:07:9e:60:05:5a:18:c7:5f:9b:6f:30: cb:a3:76:b9:50:9c:bf:04:0f:45:1f:07:9f:6e:74: 9e:fd:0c:d3:8e:d5:c2:20:96:79:f8:0f:f1:ee:38: 18:31:c2:41:e2:d3:0e:d6:f1:3b:5e:8c:07:92:47: 95:f1:ee:df:38:39:6b:1b:8e:4d:87:22:c8:04:60: af:65:00:91:c8:c0:83:32:e4:8b:76:13:95:12:9a: 07:f4:62:aa:b2:66:ae:f5:f7:5d:b4:1a:f6:7c:06: 5a:33:5b:d8:91:d7:3c:b6:34:15:64:e8:6a:d6:6e: 5f:16:d1:38:1a:8b:67:97:ef:65:0e:ca:f3:f1:44: c1:7c:cb:99:84:59:f5:d4:69:35:5b:ca:5d:95:2d: 29:8a:14:c0:74:0f:e5:15:b9:57:bf:4c:f9:4c:fc: 47:87:a2:d5:a0:f5:e5:41:96:ad:e8:61:df:e7:26: ba:f0:b3:2a:89:b0:a4:2a:44:47:0c:ac:1e:8a:1d: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:08:46:57:C9:66:B5:4C:9D:A5:86:08:1B:59:7C:60:DB:AF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:74:65:02:66:a7:2d:a2:d8:bd:47:a7:4a:ac:45:a5:1d:67: a5:bf:c0:1f:fe:e2:b8:0a:a6:21:68:31:c9:a9:4a:a8:d0:c5: b6:97:88:ca:d6:1d:10:cc:cc:c1:bd:cc:e3:f3:4b:0c:0c:66: f3:68:d6:75:58:7b:e0:be:fc:14:f7:de:18:e3:fa:d0:ad:0a: 27:c4:15:2d:70:b0:e8:b6:a1:76:60:ec:56:fb:68:d3:e8:4f: 3b:9a:cf:b4:fe:85:3d:44:62:0d:23:cc:5e:39:ce:17:1a:b3: 36:e9:d4:14:11:dd:9d:2b:c1:9b:54:c7:00:21:1f:7d:e7:ce: 26:ba:d4:e5:06:83:b7:0b:09:8f:e4:cd:49:cb:c7:07:70:f5: f7:2a:25:e6:6c:e6:55:58:88:94:09:e5:f0:52:68:d2:96:67: 7e:06:96:54:bd:d2:b9:99:46:88:85:81:b7:a7:71:5a:53:d3: f3:6e:bf:fe:ed:a6:d0:f7:c0:13:50:02:99:de:84:95:0b:de: 65:a6:1f:15:20:ed:96:ec:b0:95:24:94:d9:72:ac:c3:57:04: 2d:e0:74:b0:a8:0f:1c:84:aa:a5:9d:6e:96:31:e0:f3:c0:3b: 92:56:05:e6:9a:68:24:74:41:1f:c3:d5:f2:1d:47:e1:bd:c9: 82:03:c1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8Thd1tF5gu1PyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk Njk2ZDMzMDAtZWFkYS00OWU0LWIyZjEtMDkyOTljMGFjOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEV3Rq4E2E9b6I6r078cBGcM4rqNNbalru7Z WI1zBikjsUd089FIMHsr4noGYlsNh6az+iNPivXDGMXnWQE+B55gBVoYx1+bbzDL o3a5UJy/BA9FHwefbnSe/QzTjtXCIJZ5+A/x7jgYMcJB4tMO1vE7XowHkkeV8e7f ODlrG45NhyLIBGCvZQCRyMCDMuSLdhOVEpoH9GKqsmau9fddtBr2fAZaM1vYkdc8 tjQVZOhq1m5fFtE4Gotnl+9lDsrz8UTBfMuZhFn11Gk1W8pdlS0pihTAdA/lFblX v0z5TPxHh6LVoPXlQZat6GHf5ya68LMqibCkKkRHDKweih07cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoyCEZXyWa1TJ2lhggbWXxg26+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE90ZQJmpy2i2L1Hp0qsRaUdZ6W/wB/+4rgKpiFoMcmpSqjQxbaXiMrW HRDMzMG9zOPzSwwMZvNo1nVYe+C+/BT33hjj+tCtCifEFS1wsOi2oXZg7Fb7aNPo Tzuaz7T+hT1EYg0jzF45zhcaszbp1BQR3Z0rwZtUxwAhH33nzia61OUGg7cLCY/k zUnLxwdw9fcqJeZs5lVYiJQJ5fBSaNKWZ34GllS90rmZRoiFgbencVpT0/Nuv/7t ptD3wBNQApnehJUL3mWmHxUg7ZbssJUklNlyrMNXBC3gdLCoDxyEqqWdbpYx4PPA O5JWBeaaaCR0QR/D1fIdR+G9yYIDwX0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org