$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/21574767-0071-3597-aa5d-62c2046687a2.roa File: 21574767-0071-3597-aa5d-62c2046687a2.roa (raw, json) Hash identifier: GTVZxuUiAchYLeze8UEkAlmDPFf2Ybasbd/bz9dTqFE= Subject key identifier: F9:14:CD:82:D0:9D:5A:2C:DA:B2:89:F7:A0:24:6E:3A:1E:90:FF:F7 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F43285847C87EDE4CEF4E302C179327A0 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/21574767-0071-3597-aa5d-62c2046687a2.roa Signing time: Tue 05 Nov 2024 22:57:15 +0000 ROA not before: Tue 05 Nov 2024 22:57:15 +0000 ROA not after: Mon 03 Feb 2025 22:57:15 +0000 asID: 7029 IP address blocks: 170.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:7e:de:4c:ef:4e:30:2c:17:93:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Nov 5 22:57:15 2024 GMT Not After : Feb 3 22:57:15 2025 GMT Subject: CN=32835223-fa8c-401b-962c-87d64138f5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:1b:2d:79:e6:86:53:9a:8a:57:4c:7a:07: 3b:c4:93:19:3a:63:78:c8:a6:4d:88:44:3e:24:e3: b4:7a:8f:6b:3d:bf:8f:28:24:71:bc:c2:c7:61:8f: 39:9c:d3:1f:c4:21:56:1d:5b:cf:a9:b2:8c:11:a4: 3e:15:e6:2f:91:28:80:aa:55:fe:b5:06:74:ae:75: cd:9c:4a:75:0f:7d:24:4e:e6:0f:15:f9:07:73:f8: b2:1d:3d:df:c3:97:2b:b8:ce:22:ef:97:94:4b:c3: 26:9c:57:c3:02:cf:04:68:9d:42:7d:f7:69:0f:c4: d1:5f:3b:d1:15:b1:7c:7e:a9:47:b6:eb:5b:de:02: 9b:2b:82:de:ca:0a:81:38:0f:d0:64:27:50:6e:4f: 60:6d:e2:13:86:e7:95:3f:9b:04:e5:a1:99:d7:c4: 35:6f:4e:dc:7a:ff:b9:ae:66:fa:fd:32:8b:65:01: fc:cd:4e:00:bb:43:1a:41:fc:bc:ab:92:a6:02:e6: 24:38:44:7b:1e:2c:f7:a5:2a:a2:42:ab:15:64:b1: e7:a8:99:ce:ff:5f:44:e0:20:0f:d0:d3:73:1f:44: 7f:ba:1f:ce:b7:c9:70:b5:b1:01:f4:3d:ed:79:38: 35:ad:03:2c:7f:a7:4e:59:21:5e:4a:52:cf:bf:51: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:14:CD:82:D0:9D:5A:2C:DA:B2:89:F7:A0:24:6E:3A:1E:90:FF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/21574767-0071-3597-aa5d-62c2046687a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:70:45:9d:31:5b:e4:50:32:4b:33:54:15:2f:a7:3e:23:22: d4:86:77:37:8a:44:18:d9:03:95:c9:a5:11:a6:99:86:d1:5f: ef:dc:01:09:fb:b5:cb:f2:5c:10:62:28:8c:a0:10:09:9b:47: 4e:35:a3:e0:dd:0c:f8:48:0c:f0:2f:5f:8c:48:06:a4:f4:5f: 82:70:16:ab:fe:b3:c5:ca:2a:b7:65:a1:12:17:68:6d:25:77: 35:03:bf:51:b4:08:e0:a8:3a:57:cb:e3:ed:49:b5:9f:17:3b: 5b:5f:ec:59:87:9a:62:63:d7:f5:98:59:38:0f:b0:17:f4:f0: 8d:40:19:ed:74:3e:21:36:f7:a1:8a:cf:19:6e:95:8e:8f:0d: 0b:69:28:6e:e0:90:19:ed:c1:cc:f0:23:48:4e:b7:57:0f:87: c9:08:05:e4:d2:dc:1d:25:2a:02:74:f4:86:fc:c8:a9:67:9a: df:67:9b:96:92:97:86:ba:c2:6f:81:94:58:5a:bf:49:65:67: c2:e9:21:f3:98:eb:56:54:d0:ea:33:77:1b:f8:bf:bf:5f:9c: 4f:af:9d:93:84:02:6f:69:7f:bc:96:4c:4b:65:0a:42:1f:b6: 48:93:45:7e:51:ae:fa:37:5a:ad:2d:76:e5:41:c8:ef:62:e6: 67:ab:11:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfIft5M704wLBeTJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI0MTEwNTIyNTcxNVoXDTI1MDIwMzIyNTcxNVowLzEtMCsGA1UEAxMk MzI4MzUyMjMtZmE4Yy00MDFiLTk2MmMtODdkNjQxMzhmNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjUbLXnmhlOaildMegc7xJMZOmN4yKZNiEQ+ JOO0eo9rPb+PKCRxvMLHYY85nNMfxCFWHVvPqbKMEaQ+FeYvkSiAqlX+tQZ0rnXN nEp1D30kTuYPFfkHc/iyHT3fw5cruM4i75eUS8MmnFfDAs8EaJ1CffdpD8TRXzvR FbF8fqlHtutb3gKbK4LeygqBOA/QZCdQbk9gbeIThueVP5sE5aGZ18Q1b07cev+5 rmb6/TKLZQH8zU4Au0MaQfy8q5KmAuYkOER7Hiz3pSqiQqsVZLHnqJnO/19E4CAP 0NNzH0R/uh/Ot8lwtbEB9D3teTg1rQMsf6dOWSFeSlLPv1EBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkUzYLQnVos2rKJ96AkbjoekP/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMjE1NzQ3NjctMDA3MS0z NTk3LWFhNWQtNjJjMjA0NjY4N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1wRZ0xW+RQMkszVBUvpz4jItSGdzeKRBjZA5XJpRGmmYbRX+/cAQn7 tcvyXBBiKIygEAmbR041o+DdDPhIDPAvX4xIBqT0X4JwFqv+s8XKKrdloRIXaG0l dzUDv1G0COCoOlfL4+1JtZ8XO1tf7FmHmmJj1/WYWTgPsBf08I1AGe10PiE296GK zxlulY6PDQtpKG7gkBntwczwI0hOt1cPh8kIBeTS3B0lKgJ09Ib8yKlnmt9nm5aS l4a6wm+BlFhav0llZ8LpIfOY61ZU0Oozdxv4v79fnE+vnZOEAm9pf7yWTEtlCkIf tkiTRX5Rrvo3Wq0tduVByO9i5merEQQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org