$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa File: f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json) Hash identifier: Wk9hRbDncenrLRqZvCsVnQp7tQxeN0Kxlf5xkwtoNSU= Subject key identifier: 4E:F6:F0:57:18:01:87:DB:05:1B:55:CA:50:71:96:F9:DC:28:2F:29 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F43285847537B7E059DC649C83395E800 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 15404 IP address blocks: 170.200.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:7e:05:9d:c6:49:c8:33:95:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=3d682fa8-8186-40d2-a97b-1e56d8b1c82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:5b:67:01:e8:d6:ab:4d:2e:22:31:9c:c2: 65:9b:a6:7e:9f:73:f2:1a:e4:ce:b5:da:56:63:22: 43:38:c7:8a:a6:fc:ea:b7:8d:f5:d0:2a:13:dc:a3: 57:90:e5:84:4f:bb:98:60:8b:a3:d0:9e:19:c0:23: ef:a2:b3:6e:dd:fa:24:ac:df:8b:78:f9:bb:01:eb: 43:f7:b6:aa:01:f6:51:c4:a2:ab:26:0b:61:db:67: 3e:36:64:08:9e:44:6a:26:e0:48:9d:be:82:20:85: 91:43:58:70:63:6c:8e:23:4b:75:ff:1f:c1:8b:1b: 2b:10:70:97:b9:3a:18:54:28:18:d7:3d:0f:fd:26: 39:08:21:34:11:9e:bf:38:8d:3d:b7:8a:e1:48:1c: 9c:c4:d2:7f:24:0f:32:74:5d:7a:8e:c5:11:19:71: 46:15:51:3c:f3:02:d8:e5:3e:ba:4a:81:28:b9:b6: 2a:2a:9e:23:04:20:89:8a:b0:56:be:47:ab:6a:69: 79:5c:f5:cb:0c:ae:f7:71:86:6f:c2:d8:7d:0f:fb: eb:0b:80:6f:43:6a:53:81:19:6f:1b:25:fe:0e:b6: a3:17:ae:a8:e9:1d:ef:d3:ef:6b:c1:07:0f:72:49: df:3c:c7:09:ff:1d:77:55:fa:5d:32:a0:10:cb:6c: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:F0:57:18:01:87:DB:05:1B:55:CA:50:71:96:F9:DC:28:2F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:19:96:45:88:42:6b:8d:02:36:2b:66:22:3a:1c:aa:c9:8c: 7b:7a:b7:3f:84:f7:31:b0:7e:1d:82:3e:5e:46:46:ae:b2:3e: a7:54:f2:57:b9:c0:e4:c6:3b:70:f8:24:1d:92:66:a7:1a:be: ef:7b:42:aa:bf:1d:45:63:46:43:53:06:a5:12:1c:c1:59:8b: 8a:97:e7:f5:9b:37:dc:03:a5:f4:92:7d:fd:e4:76:69:5f:57: 8e:ac:b7:8d:39:8e:8d:f5:bc:46:31:61:db:02:60:88:0b:2b: 16:1c:8c:4c:9a:84:a7:d6:57:a1:4f:21:86:68:e2:5c:1a:3a: af:72:0b:7b:37:a3:ba:7b:94:62:19:4d:34:9e:cb:37:66:f9: 5b:33:88:7d:ae:2c:dc:53:41:89:c7:c9:b3:d0:45:3a:b6:c1: ba:83:86:af:4c:fc:66:98:e8:5e:ca:87:0c:a7:b2:29:c4:52: ec:cd:b3:de:06:8c:90:4b:5a:64:20:ca:d7:b7:c3:41:bb:00: cf:35:06:4f:0a:36:3c:8d:4e:9b:c4:5b:57:28:b0:b2:62:37: 45:7a:37:47:8a:83:7c:60:7b:72:13:0c:28:dc:dd:5d:18:3a: f2:f4:90:ff:f7:63:0d:ce:da:6e:40:56:4d:65:1d:e3:0f:04: ee:eb:59:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe34FncZJyDOV6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk M2Q2ODJmYTgtODE4Ni00MGQyLWE5N2ItMWU1NmQ4YjFjODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVJbZwHo1qtNLiIxnMJlm6Z+n3PyGuTOtdpW YyJDOMeKpvzqt4310CoT3KNXkOWET7uYYIuj0J4ZwCPvorNu3fokrN+LePm7AetD 97aqAfZRxKKrJgth22c+NmQInkRqJuBInb6CIIWRQ1hwY2yOI0t1/x/BixsrEHCX uToYVCgY1z0P/SY5CCE0EZ6/OI09t4rhSBycxNJ/JA8ydF16jsURGXFGFVE88wLY 5T66SoEoubYqKp4jBCCJirBWvkeraml5XPXLDK73cYZvwth9D/vrC4BvQ2pTgRlv GyX+DrajF66o6R3v0+9rwQcPcknfPMcJ/x13VfpdMqAQy2xQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE728FcYAYfbBRtVylBxlvncKC8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZjU1ZDMyOWItZTIwNi0z MzExLTkzODMtOWU1NDkxYTdmMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYZlkWIQmuNAjYrZiI6HKrJjHt6tz+E9zGwfh2CPl5GRq6yPqdU8le5 wOTGO3D4JB2SZqcavu97Qqq/HUVjRkNTBqUSHMFZi4qX5/WbN9wDpfSSff3kdmlf V46st405jo31vEYxYdsCYIgLKxYcjEyahKfWV6FPIYZo4lwaOq9yC3s3o7p7lGIZ TTSeyzdm+VsziH2uLNxTQYnHybPQRTq2wbqDhq9M/GaY6F7KhwynsinEUuzNs94G jJBLWmQgyte3w0G7AM81Bk8KNjyNTpvEW1cosLJiN0V6N0eKg3xge3ITDCjc3V0Y OvL0kP/3Yw3O2m5AVk1lHeMPBO7rWS0= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:24 2024 by rpki-client on console-ams.rpki-client.org