$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/e86501c4-163b-3931-bc06-d732014e4373.roa File: e86501c4-163b-3931-bc06-d732014e4373.roa (raw, json) Hash identifier: e9fuqCspT/ytihBIWMXihvhD+sVMT8n0yqnrg6u6ciU= Subject key identifier: D5:BE:92:77:F2:D9:BF:90:8D:7B:5C:D0:3E:AE:E9:C2:EC:DD:C2:75 Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Certificate serial: 010D0C9F4328584771F676C2B921C160C74D6380 Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/e86501c4-163b-3931-bc06-d732014e4373.roa Signing time: Sat 05 Oct 2024 23:02:53 +0000 ROA not before: Sat 05 Oct 2024 23:02:53 +0000 ROA not after: Sat 04 Jan 2025 00:02:53 +0000 asID: 23470 IP address blocks: 165.140.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:71:f6:76:c2:b9:21:c1:60:c7:4d:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Validity Not Before: Oct 5 23:02:53 2024 GMT Not After : Jan 4 00:02:53 2025 GMT Subject: CN=c4837dd7-0ffd-442a-ac07-e4c59cf02904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:29:ac:70:31:f4:d1:fe:3e:10:23:8e:d8: 1a:7e:fc:43:1b:e8:73:2f:ca:50:d1:b8:0c:4e:e5: 16:a3:0c:e7:27:92:db:a2:66:dd:68:42:25:09:95: 20:ad:16:d2:10:2a:41:89:62:67:b7:cf:6b:ca:33: 19:54:ce:0a:55:98:a7:06:5b:51:1a:43:40:1b:f4: 6e:26:a9:be:7f:12:3f:fd:17:5e:89:c3:8b:3b:d6: f5:64:f9:97:f0:0a:11:89:db:f7:d3:48:4b:05:30: 04:cb:6c:d5:48:d5:1a:06:ff:af:ba:e4:a5:10:6e: a6:05:08:cc:33:ed:0b:69:be:9a:94:98:74:cc:a4: 44:7d:92:90:85:60:fd:d8:1b:9f:5f:f4:b6:0f:06: fe:89:9b:67:32:24:ac:5f:05:be:c6:1e:24:8c:83: 2a:16:8b:c7:d9:3c:e6:b3:cd:c6:67:14:07:05:60: 4c:1f:d8:01:fa:1c:17:38:17:6d:b6:cf:be:0e:21: 9d:7c:9f:c4:9b:1d:61:32:ef:54:53:bf:0b:9f:8f: f5:ff:ad:6f:90:d1:0a:f1:24:d0:2d:ce:c5:a8:d3: 0b:63:f0:be:be:56:db:03:9f:96:0c:b5:32:7a:d4: 50:2a:fa:95:8e:96:b8:5d:b6:06:f8:3e:61:cd:fe: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:92:77:F2:D9:BF:90:8D:7B:5C:D0:3E:AE:E9:C2:EC:DD:C2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/e86501c4-163b-3931-bc06-d732014e4373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl X509v3 Authority Key Identifier: keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer sbgp-ipAddrBlock: critical IPv4: 165.140.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:07:0d:1a:cd:85:ae:2d:df:e8:05:08:0e:0a:68:b9:40:b7: 5b:56:01:ed:a2:22:88:73:74:31:84:23:06:bd:f5:11:22:72: fd:4e:24:bc:a8:e6:84:c5:02:49:3e:c1:90:8d:db:23:39:dd: 8b:38:9f:4f:24:43:f9:de:09:b0:8b:42:9a:53:c8:0d:2e:24: b2:7c:ba:62:6a:d4:7c:2a:23:ec:5f:ff:cb:8c:c0:e1:f6:0c: 9b:40:3a:3d:fa:26:ad:4f:a8:6b:4b:2e:db:31:75:c8:e6:49: f1:1e:c0:21:a0:71:b7:65:5d:dd:b9:b9:fb:e0:c8:be:eb:91: eb:31:b7:60:94:0a:8a:1c:63:5e:98:97:8a:1e:34:35:f8:51: 2b:4c:88:f4:54:63:a4:22:7a:f4:80:a7:c5:d5:ea:a7:e1:fa: 07:e5:2a:59:e6:07:d2:4d:0d:8d:c6:a9:ce:05:2b:25:b8:56: 86:0a:f9:16:d6:99:52:39:41:01:f8:c5:67:a5:13:17:09:aa: 79:aa:00:97:d3:f2:fd:43:e5:71:60:28:68:1f:1d:72:47:bd: 13:d0:63:2c:62:21:cf:af:64:4e:d8:39:ba:a8:23:f5:b3:a0: f0:63:59:88:17:2d:c6:fa:c2:30:08:73:47:cc:b8:57:0b:6d: 2e:87:a7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdx9nbCuSHBYMdNY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5YmZjZTEtNWU3NC00YzkyLTk1NGQtODcyODk2OWQ4 ODM1MB4XDTI0MTAwNTIzMDI1M1oXDTI1MDEwNDAwMDI1M1owLzEtMCsGA1UEAxMk YzQ4MzdkZDctMGZmZC00NDJhLWFjMDctZTRjNTljZjAyOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UoprHAx9NH+PhAjjtgafvxDG+hzL8pQ0bgM TuUWowznJ5LbombdaEIlCZUgrRbSECpBiWJnt89ryjMZVM4KVZinBltRGkNAG/Ru Jqm+fxI//RdeicOLO9b1ZPmX8AoRidv300hLBTAEy2zVSNUaBv+vuuSlEG6mBQjM M+0Lab6alJh0zKREfZKQhWD92BufX/S2Dwb+iZtnMiSsXwW+xh4kjIMqFovH2Tzm s83GZxQHBWBMH9gB+hwXOBdtts++DiGdfJ/Emx1hMu9UU78Ln4/1/61vkNEK8STQ Lc7FqNMLY/C+vlbbA5+WDLUyetRQKvqVjpa4XbYG+D5hzf6Y+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+knfy2b+QjXtc0D6u6cLs3cJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYzli ZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4OTY5ZDg4MzUvZTg2NTAxYzQtMTYzYi0z OTMxLWJjMDYtZDczMjAxNGU0MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2M5YmZjZTEtNWU3NC00YzkyLTk1 NGQtODcyODk2OWQ4ODM1L2NjOWJmY2UxLTVlNzQtNGM5Mi05NTRkLTg3Mjg5Njlk ODgzNS5jcmwwHwYDVR0jBBgwFoAUWSOVY38ODRqcqJwYgOE4O8qtc+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYzliZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4 OTY5ZDg4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIHDRrNha4t3+gFCA4KaLlAt1tWAe2iIohzdDGEIwa99REicv1OJLyo 5oTFAkk+wZCN2yM53Ys4n08kQ/neCbCLQppTyA0uJLJ8umJq1HwqI+xf/8uMwOH2 DJtAOj36Jq1PqGtLLtsxdcjmSfEewCGgcbdlXd25ufvgyL7rkesxt2CUCoocY16Y l4oeNDX4UStMiPRUY6QievSAp8XV6qfh+gflKlnmB9JNDY3Gqc4FKyW4VoYK+RbW mVI5QQH4xWelExcJqnmqAJfT8v1D5XFgKGgfHXJHvRPQYyxiIc+vZE7YObqoI/Wz oPBjWYgXLcb6wjAIc0fMuFcLbS6Hp5Q= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org