$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7a39d534-dc11-32b8-8c29-349f6fffbe3b.roa File: 7a39d534-dc11-32b8-8c29-349f6fffbe3b.roa (raw, json) Hash identifier: PR08ofOKNhbntQnpAH8y2EkTl0hBcEVgjNB7hPyUL2M= Subject key identifier: 21:1D:DC:98:A1:27:6F:0A:4D:EA:3B:2A:27:EC:1D:5E:60:77:CA:59 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F43285847A30BE81ECE1BE915970CE580 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7a39d534-dc11-32b8-8c29-349f6fffbe3b.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 212238 IP address blocks: 216.177.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:e8:1e:ce:1b:e9:15:97:0c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=fee7d70d-2a07-4e5a-b271-a4b93568aba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:5d:09:b8:2d:b6:49:de:9f:6d:81:8c:05: 38:51:0c:7c:ea:9a:74:ff:56:0e:96:a5:a5:52:71: bf:91:53:ed:db:1d:e2:ea:82:a4:3e:df:11:52:d4: 7f:ae:49:00:b5:34:ed:ca:63:34:b0:5f:76:e0:83: 58:02:1e:8d:21:b1:e1:fc:d3:11:ac:4a:c6:b9:3b: 21:3b:d8:4a:6f:12:6a:d4:f1:a4:26:c8:5d:fa:e6: 2e:18:33:76:a4:31:e9:75:61:20:c7:95:93:64:86: 0b:4a:cf:38:3a:05:71:67:be:b8:99:0b:86:a2:3d: d5:e7:68:05:df:d0:c4:d5:43:fa:4b:0a:b9:33:3c: 22:52:aa:e3:c1:72:6e:1d:b3:b5:84:0b:26:49:ad: b2:6f:5b:84:f1:23:ac:d3:2e:fb:fa:17:20:ea:c2: e9:f3:86:bc:22:76:01:e6:c4:2c:b9:ce:1f:d6:b3: f8:9c:4a:f7:f0:81:22:a2:d7:45:9d:36:18:bf:74: 16:f3:9b:84:bf:3a:1e:ed:08:4b:cb:0e:76:c8:fa: f9:8e:bf:cd:a2:09:36:a1:c7:de:26:96:ba:b0:4d: c0:2a:85:80:c1:26:f4:bd:d4:e6:c3:1e:8f:55:ed: b8:1d:fe:32:33:67:4e:23:df:15:c0:94:a4:a6:73: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1D:DC:98:A1:27:6F:0A:4D:EA:3B:2A:27:EC:1D:5E:60:77:CA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7a39d534-dc11-32b8-8c29-349f6fffbe3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 216.177.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1d:dd:08:e6:9a:80:92:8d:f6:38:50:8d:5e:8d:91:ff:3a: 1d:13:49:fe:45:7b:fc:bb:19:d8:96:3c:e9:b0:fc:f3:df:78: 68:85:4e:8d:92:67:44:1c:5c:75:a9:c5:75:9b:31:f0:27:58: 2e:1e:b3:f7:84:99:f5:00:e0:ca:94:33:08:be:38:66:bb:d4: 7e:25:05:2e:18:23:ce:fc:a4:c8:fc:df:26:4b:09:89:48:d4: d2:01:f8:28:ca:a0:0d:6f:25:07:7b:95:67:4a:e2:ce:89:c3: fd:6f:a3:8a:17:8f:2f:a7:83:62:cd:41:df:75:63:3b:66:8d: 14:2d:b9:b2:f5:c2:27:2f:19:81:7f:c4:68:b1:46:ee:30:5b: f6:46:96:10:d8:67:ec:91:8c:97:72:02:d9:b8:02:a7:4c:c5: 91:6e:af:6d:b2:4c:4c:ce:03:87:26:d9:9b:cc:68:f6:ee:60: 6c:c5:a4:cc:7c:83:11:fc:66:e3:6d:04:0c:8d:cf:87:d6:1a: fa:c6:55:c0:90:9b:8f:b7:a5:91:b7:48:03:d7:44:1e:bf:f9: 4f:f7:a8:c8:8c:87:2a:cf:1c:d5:a5:13:5f:a2:41:7f:82:f2: 61:31:c1:db:ed:c3:9d:17:fe:8a:26:94:97:cf:ac:90:05:b8: 77:ca:be:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC+gezhvpFZcM5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZmVlN2Q3MGQtMmEwNy00ZTVhLWIyNzEtYTRiOTM1NjhhYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJdCbgttknen22BjAU4UQx86pp0/1YOlqWl UnG/kVPt2x3i6oKkPt8RUtR/rkkAtTTtymM0sF924INYAh6NIbHh/NMRrErGuTsh O9hKbxJq1PGkJshd+uYuGDN2pDHpdWEgx5WTZIYLSs84OgVxZ764mQuGoj3V52gF 39DE1UP6Swq5MzwiUqrjwXJuHbO1hAsmSa2yb1uE8SOs0y77+hcg6sLp84a8InYB 5sQsuc4f1rP4nEr38IEiotdFnTYYv3QW85uEvzoe7QhLyw52yPr5jr/Nogk2ocfe Jpa6sE3AKoWAwSb0vdTmwx6PVe24Hf4yM2dOI98VwJSkpnMsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEd3JihJ28KTeo7KifsHV5gd8pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvN2EzOWQ1MzQtZGMxMS0z MmI4LThjMjktMzQ5ZjZmZmZiZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkd3QjmmoCSjfY4UI1ejZH/Oh0TSf5Fe/y7GdiWPOmw/PPfeGiFTo2S Z0QcXHWpxXWbMfAnWC4es/eEmfUA4MqUMwi+OGa71H4lBS4YI878pMj83yZLCYlI 1NIB+CjKoA1vJQd7lWdK4s6Jw/1vo4oXjy+ng2LNQd91YztmjRQtubL1wicvGYF/ xGixRu4wW/ZGlhDYZ+yRjJdyAtm4AqdMxZFur22yTEzOA4cm2ZvMaPbuYGzFpMx8 gxH8ZuNtBAyNz4fWGvrGVcCQm4+3pZG3SAPXRB6/+U/3qMiMhyrPHNWlE1+iQX+C 8mExwdvtw50X/oomlJfPrJAFuHfKvsk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:26:18 2024 by rpki-client on console-fra.rpki-client.org