$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: erwA/WJTRoXFLLIJArhePQcACH+lyrcHPyEAU0vZlV8= Subject key identifier: 44:87:E2:6A:C9:FD:4C:94:D6:73:13:5D:93:22:B7:48:28:8B:B6:EF Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285847967BC468982B032517819180 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:c4:68:98:2b:03:25:17:81:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=a872639c-463c-41a2-be4d-8bc5407a824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:03:c1:9a:34:49:91:a2:cc:8f:d2:67:1f:94: ad:89:0a:36:3b:55:6a:60:26:aa:a6:9f:1a:9e:e2: 29:ed:8e:94:3a:39:7d:b5:88:2e:de:d7:30:88:ca: 48:89:06:e1:ad:d8:66:36:e3:ce:1a:d7:94:96:04: 51:85:61:ca:27:52:c0:cc:c3:b7:9b:83:36:35:50: 3f:75:48:72:37:13:d0:04:ab:e1:5c:11:8f:c7:21: 1f:d2:8a:fc:48:23:60:76:20:7e:08:f2:d2:81:f4: fa:97:e8:3b:90:16:79:e3:64:a3:05:cc:fc:6c:22: be:be:22:b0:68:9f:3d:bf:bd:bc:c4:6b:a1:79:84: 89:e7:18:81:09:d0:67:d4:f7:c1:f6:91:de:48:9a: 7c:c6:c8:c1:a8:fd:f4:f1:02:ea:51:f6:64:07:97: 9c:ba:d3:dc:37:cb:85:ca:a6:40:bf:b9:dd:9c:35: 8f:36:8e:bc:a4:b3:6a:a0:59:71:22:4a:91:1f:a9: b2:a5:54:4a:26:66:b0:88:67:ad:50:9f:27:26:35: b5:ee:c5:aa:03:a4:84:e5:ce:1b:65:4f:65:8a:9b: 99:59:96:c5:da:fd:65:ab:d2:8b:be:54:57:96:14: 7b:87:44:04:82:9f:cb:81:34:7b:95:68:76:b7:94: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:E2:6A:C9:FD:4C:94:D6:73:13:5D:93:22:B7:48:28:8B:B6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c7:b2:3f:3b:bc:fc:63:40:b0:33:4a:48:52:74:74:d4:ab: 4b:a3:e3:6e:6e:c7:8d:38:61:e3:68:37:12:dc:41:86:30:65: 8b:1a:94:32:63:83:19:2d:06:1a:28:6d:7b:5c:d8:0a:8a:06: f1:85:fd:53:81:fb:61:40:29:07:c7:48:d8:69:32:37:b3:4f: d6:1c:73:78:bd:e2:15:23:40:e4:34:4d:93:14:00:c8:d9:bd: 90:fc:ea:68:f2:e8:d3:b3:3d:e5:57:ac:9d:d0:14:c9:ac:7c: 3e:16:37:48:2c:ae:5f:e8:a4:c5:da:f4:c8:2d:fc:3d:fe:44: 73:73:24:58:84:bf:51:a1:d8:93:4b:d3:50:bf:eb:9b:8b:43: dd:91:d5:76:a9:e1:d3:6b:c9:d3:54:49:f3:6e:ba:ed:82:4a: 7d:a3:54:89:25:da:ac:c9:32:1e:44:24:cc:d4:ea:6c:ff:a6: 51:b5:97:02:d9:eb:de:5f:f3:29:88:5a:6c:eb:5c:d0:f1:33: 09:bc:bf:d9:b9:f7:5e:7d:35:87:7c:e3:92:3f:9a:cf:32:ce: b8:59:e2:2c:3f:01:27:77:3a:bd:8e:d1:92:d5:12:d3:02:28: 7e:c9:47:ed:c5:6f:1e:64:70:dd:7f:41:d5:27:94:8c:8a:50: f5:af:43:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8RomCsDJReBkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk YTg3MjYzOWMtNDYzYy00MWEyLWJlNGQtOGJjNTQwN2E4MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAPBmjRJkaLMj9JnH5StiQo2O1VqYCaqpp8a nuIp7Y6UOjl9tYgu3tcwiMpIiQbhrdhmNuPOGteUlgRRhWHKJ1LAzMO3m4M2NVA/ dUhyNxPQBKvhXBGPxyEf0or8SCNgdiB+CPLSgfT6l+g7kBZ542SjBcz8bCK+viKw aJ89v728xGuheYSJ5xiBCdBn1PfB9pHeSJp8xsjBqP308QLqUfZkB5ecutPcN8uF yqZAv7ndnDWPNo68pLNqoFlxIkqRH6mypVRKJmawiGetUJ8nJjW17sWqA6SE5c4b ZU9lipuZWZbF2v1lq9KLvlRXlhR7h0QEgp/LgTR7lWh2t5TnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESH4mrJ/UyU1nMTXZMit0goi7bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrHsj87vPxjQLAzSkhSdHTUq0uj425ux404YeNoNxLcQYYwZYsalDJj gxktBhoobXtc2AqKBvGF/VOB+2FAKQfHSNhpMjezT9Ycc3i94hUjQOQ0TZMUAMjZ vZD86mjy6NOzPeVXrJ3QFMmsfD4WN0gsrl/opMXa9Mgt/D3+RHNzJFiEv1Gh2JNL 01C/65uLQ92R1Xap4dNrydNUSfNuuu2CSn2jVIkl2qzJMh5EJMzU6mz/plG1lwLZ 695f8ymIWmzrXNDxMwm8v9m59159NYd845I/ms8yzrhZ4iw/ASd3Or2O0ZLVEtMC KH7JR+3Fbx5kcN1/QdUnlIyKUPWvQ64= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org