$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa File: 7d3a6f69-a7a5-360a-9bae-570514940a1f.roa (raw, json) Hash identifier: 7RdcIS8cVd+4qjtNW7eOVu9ao+2v94sO2SiyGjIf68A= Subject key identifier: 91:3B:08:58:AB:43:AE:5D:39:6C:15:03:8B:AD:78:0B:17:1C:8D:19 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F432858479C112565964584CC499EE300 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 14618 IP address blocks: 170.200.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:25:65:96:45:84:cc:49:9e:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=b8c1f24d-19ec-48d7-a43d-9a61b8238792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:5b:5b:cd:20:b0:2f:60:fd:a8:32:d1:d2: 7d:91:97:72:d7:a2:62:7f:e4:d6:0e:49:57:71:1c: b0:1a:07:d9:02:4e:1f:d6:7d:a4:a2:eb:3e:a6:a7: 41:88:bd:95:4a:47:32:d9:72:b3:05:ce:8b:ab:93: e7:54:16:24:09:4b:84:25:a6:3a:6a:3d:e9:d7:35: 6b:bf:4b:0b:33:7c:85:09:74:5e:ce:f2:4e:8a:34: 0d:a9:cd:a0:12:17:01:28:a1:01:1a:40:95:c3:1e: 71:d4:62:db:57:cd:e2:3a:cc:b2:df:a8:e9:7b:6a: 7d:84:76:c5:c3:5e:f7:ce:41:f1:f2:b9:ea:8d:2e: 1a:b6:75:25:be:ba:f9:ec:99:f7:79:14:c4:ad:c5: 87:6b:42:7b:89:f0:07:42:f8:d1:cf:16:03:ac:8c: a0:0a:f3:f9:5b:f0:0b:30:8c:44:cf:c5:6e:8e:df: 22:64:0d:a0:dd:ec:94:2e:cb:b5:30:7d:f5:3a:90: a0:d2:bd:01:56:db:be:2e:f1:e1:a9:3d:df:23:60: 46:0d:3a:8c:03:7c:77:6f:74:e1:34:71:04:87:be: 53:e6:9e:c7:06:e9:9f:38:04:7a:d1:43:87:84:f8: 8a:8c:3d:b6:52:03:2e:40:e6:ba:89:9d:e0:c3:1f: 4c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:08:58:AB:43:AE:5D:39:6C:15:03:8B:AD:78:0B:17:1C:8D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6f:3a:64:1a:93:6d:1d:69:09:31:8e:a9:a0:3a:94:b5:46: 9a:1b:b5:60:3a:33:b4:7c:96:38:66:dc:a2:c0:f3:8c:f5:7f: ac:36:5f:80:b6:5b:3e:61:47:ce:40:3c:11:02:f4:45:66:1e: e9:80:61:da:cb:65:d4:a5:a5:68:dd:f3:78:a6:30:68:59:2b: d7:db:5f:7f:c5:21:70:11:e0:15:92:dc:d8:6e:15:78:f2:2b: 3e:b7:9b:4d:53:90:17:ef:8b:7d:41:b4:5b:aa:65:65:8e:8b: 97:0a:57:b4:e4:f7:26:c1:2f:ef:30:db:3a:c9:af:f6:d8:ae: 28:55:86:a6:79:dc:85:ea:41:37:22:0c:2d:18:28:12:31:e8: b2:1c:ee:c6:cc:4d:7d:63:34:1d:c6:f2:d1:8d:e9:f4:b9:bb: 17:8d:7a:e8:5d:63:91:d9:50:3c:89:ed:c7:2d:8d:9a:cc:2b: de:fd:8c:d9:3b:8a:5d:fb:e4:08:1f:a4:62:49:55:3d:e6:fc: 64:3e:1c:3b:0a:38:24:da:e7:91:2f:9f:78:05:99:62:a3:d7: e4:d4:b5:5c:cf:c6:45:46:98:72:b8:c2:08:55:85:66:01:18: 75:51:a1:3e:2e:02:2f:ae:03:95:36:ff:d3:34:dd:e5:4c:25: 20:8a:88:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESVllkWEzEme4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjhjMWYyNGQtMTllYy00OGQ3LWE0M2QtOWE2MWI4MjM4NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ZbW80gsC9g/agy0dJ9kZdy16Jif+TWDklX cRywGgfZAk4f1n2kous+pqdBiL2VSkcy2XKzBc6Lq5PnVBYkCUuEJaY6aj3p1zVr v0sLM3yFCXRezvJOijQNqc2gEhcBKKEBGkCVwx5x1GLbV83iOsyy36jpe2p9hHbF w173zkHx8rnqjS4atnUlvrr57Jn3eRTErcWHa0J7ifAHQvjRzxYDrIygCvP5W/AL MIxEz8Vujt8iZA2g3eyULsu1MH31OpCg0r0BVtu+LvHhqT3fI2BGDTqMA3x3b3Th NHEEh75T5p7HBumfOAR60UOHhPiKjD22UgMuQOa6iZ3gwx9MewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE7CFirQ65dOWwVA4uteAsXHI0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvN2QzYTZmNjktYTdhNS0z NjBhLTliYWUtNTcwNTE0OTQwYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5vOmQak20daQkxjqmgOpS1RpobtWA6M7R8ljhm3KLA84z1f6w2X4C2 Wz5hR85APBEC9EVmHumAYdrLZdSlpWjd83imMGhZK9fbX3/FIXAR4BWS3NhuFXjy Kz63m01TkBfvi31BtFuqZWWOi5cKV7Tk9ybBL+8w2zrJr/bYrihVhqZ53IXqQTci DC0YKBIx6LIc7sbMTX1jNB3G8tGN6fS5uxeNeuhdY5HZUDyJ7cctjZrMK979jNk7 il375AgfpGJJVT3m/GQ+HDsKOCTa55Evn3gFmWKj1+TUtVzPxkVGmHK4wghVhWYB GHVRoT4uAi+uA5U2/9M03eVMJSCKiGY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org