$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa File: 49d76c1a-ff7d-31b6-8857-cab10d46025d.roa (raw, json) Hash identifier: kDM86TYE3AFG/6IZbjGOV4YVCYzUq8NvlmfzvnnfbpM= Subject key identifier: B0:7B:68:61:99:11:12:D8:F4:7F:A0:49:96:51:AC:DE:D5:F0:0C:AD Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285847CE6F4172DD1B966EE802B510 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 14297 IP address blocks: 139.131.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:41:72:dd:1b:96:6e:e8:02:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=9b0bb874-0683-4a0c-9dd7-cc39c0a942d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:85:0c:f4:59:34:f7:6f:a8:54:bb:6a:37: a6:95:67:01:87:6b:c6:40:8b:8f:3f:c5:6f:b2:84: 6a:4f:c4:80:45:bc:c4:d1:3e:1d:97:33:ba:e5:13: 3f:a0:f7:42:0c:da:b9:7d:0b:e8:0c:6f:a8:d3:4f: d0:7b:9f:74:1c:13:46:4b:e0:dc:f1:a0:28:0d:d6: 58:f8:5f:70:40:78:ad:96:72:17:15:48:06:89:35: af:80:9c:78:e9:47:1a:d4:53:04:13:e8:af:ab:41: 80:93:29:8a:0e:75:9e:cf:02:0d:15:d0:31:de:de: 04:ca:ba:3f:5c:a6:73:0a:db:99:a9:e2:59:88:e3: 9b:e3:94:ba:90:a1:99:06:c1:84:be:3f:2e:3b:6e: f6:6e:45:3f:17:66:78:b3:b7:22:72:84:13:af:0a: 4d:57:03:e8:59:0e:57:57:84:79:b4:e2:8b:b8:ce: 28:23:21:5e:2c:06:53:a6:64:22:fa:04:af:2c:34: b1:56:72:83:4d:e7:32:e5:2e:31:d3:d5:e2:93:50: aa:a8:e3:ec:f7:aa:a0:59:29:2f:2b:8c:98:ed:d8: e4:30:24:71:56:27:7d:15:85:b9:4a:4f:b4:c6:dd: 02:18:e2:d7:c1:b9:4c:15:5d:25:ca:15:6c:18:36: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:68:61:99:11:12:D8:F4:7F:A0:49:96:51:AC:DE:D5:F0:0C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bb:5d:c0:47:b4:13:f4:cf:b5:65:4b:ca:4e:e7:5a:59:dc: 87:05:84:95:37:0e:92:6a:d7:92:0b:f2:c5:d1:40:b3:81:b7: 4b:89:b3:02:f4:b8:f3:4e:e1:3a:7f:f5:79:a3:3b:9a:e1:d2: 3e:b0:98:fc:32:4c:71:e8:df:36:da:bb:17:23:7d:67:76:e0: 24:8d:f5:52:be:c7:6d:25:cd:30:a9:a0:6a:53:b8:c2:5a:71: c8:5e:08:2a:38:0e:ba:cf:9e:2d:83:a6:1e:d3:5e:43:79:bc: 42:c5:8a:ee:1b:81:c8:d8:2f:75:8a:c0:e7:4f:c6:0e:cc:9d: 57:82:53:05:ae:61:ac:39:75:ed:db:a9:79:39:a9:58:f0:ca: d4:89:30:b3:dd:d0:79:03:db:8c:87:aa:14:69:6c:65:ec:f2: b1:93:6f:49:35:f5:64:f3:9d:62:1e:2d:aa:73:6d:26:6f:1a: c7:aa:95:2e:62:19:ad:0f:5b:65:cf:20:23:e0:bb:46:f1:b6: b0:1e:e5:05:26:1f:09:7e:93:73:9b:41:8f:d2:a4:f1:34:d2: 19:fa:72:78:4e:37:d9:58:64:39:78:94:a4:51:b9:23:10:fb: 4b:2e:8c:d1:0c:6c:1f:8d:24:20:77:64:87:cc:ba:ef:2d:da: 76:ce:f1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb0Fy3RuWbugCtRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk OWIwYmI4NzQtMDY4My00YTBjLTlkZDctY2MzOWMwYTk0MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktaFDPRZNPdvqFS7ajemlWcBh2vGQIuPP8Vv soRqT8SARbzE0T4dlzO65RM/oPdCDNq5fQvoDG+o00/Qe590HBNGS+Dc8aAoDdZY +F9wQHitlnIXFUgGiTWvgJx46Uca1FMEE+ivq0GAkymKDnWezwINFdAx3t4Eyro/ XKZzCtuZqeJZiOOb45S6kKGZBsGEvj8uO272bkU/F2Z4s7cicoQTrwpNVwPoWQ5X V4R5tOKLuM4oIyFeLAZTpmQi+gSvLDSxVnKDTecy5S4x09Xik1CqqOPs96qgWSkv K4yY7djkMCRxVid9FYW5Sk+0xt0CGOLXwblMFV0lyhVsGDYRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB7aGGZERLY9H+gSZZRrN7V8AytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDlkNzZjMWEtZmY3ZC0z MWI2LTg4NTctY2FiMTBkNDYwMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy7XcBHtBP0z7VlS8pO51pZ3IcFhJU3DpJq15IL8sXRQLOBt0uJswL0 uPNO4Tp/9XmjO5rh0j6wmPwyTHHo3zbauxcjfWd24CSN9VK+x20lzTCpoGpTuMJa ccheCCo4DrrPni2Dph7TXkN5vELFiu4bgcjYL3WKwOdPxg7MnVeCUwWuYaw5de3b qXk5qVjwytSJMLPd0HkD24yHqhRpbGXs8rGTb0k19WTznWIeLapzbSZvGseqlS5i Ga0PW2XPICPgu0bxtrAe5QUmHwl+k3ObQY/SpPE00hn6cnhON9lYZDl4lKRRuSMQ +0sujNEMbB+NJCB3ZIfMuu8t2nbO8RE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:50 2024 by rpki-client on console-ams.rpki-client.org