$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa File: d33ddacc-232f-3cc5-a6c6-833156127de4.roa (raw, json) Hash identifier: 0hNYuc6/BMQB7076u4sxvSOQ7O1T8bQ4b3uyguoPXDA= Subject key identifier: 68:A6:32:31:14:DC:1F:69:08:C9:16:2B:9A:A7:79:4B:35:5B:10:F4 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F432858478E1BBFA061365F9FCF6EBB40 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 53927 IP address blocks: 139.131.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:bf:a0:61:36:5f:9f:cf:6e:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=1cf12f3a-0bc4-4fd2-b0b9-311bf9f4fc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:f3:6b:18:0f:c3:aa:10:53:b0:65:7a:79: 1c:3e:07:e5:7d:c4:3c:3a:f9:84:5f:9e:fc:f2:77: 88:f7:d6:38:d3:00:a6:e0:a4:77:ea:ff:83:bb:36: 26:c6:b7:66:85:7c:06:6a:ce:8d:88:43:44:32:85: a9:43:0b:c6:9d:4b:de:20:5e:29:3f:a7:17:09:07: 4f:0b:05:0e:53:1d:f0:a2:19:96:9f:1e:74:06:0e: 2b:64:9a:37:c1:1c:97:15:1c:4d:ae:85:d8:a2:65: 24:97:11:7f:42:af:ac:f8:9a:8b:34:e2:36:77:2d: 86:f3:8c:f2:8a:d1:f8:09:a8:fa:5b:c2:10:f1:c5: 39:22:52:21:21:a5:f5:d1:1f:89:17:b6:ad:46:b5: 24:aa:b2:31:a2:83:61:b9:ec:ba:b4:df:6d:66:c7: dc:d9:79:ee:6c:73:16:d8:45:43:fe:6c:1b:81:e3: 3c:fd:e4:97:84:16:25:a2:93:43:df:17:4d:5e:35: a7:74:e7:b9:63:6b:4c:34:57:dd:6f:16:39:80:aa: c7:7a:a2:26:f2:4f:80:2f:48:5c:0f:1d:3b:a4:00: 01:50:2b:a4:e9:20:fa:00:6a:5a:30:72:58:4a:ea: 43:c6:c7:16:38:26:da:8f:96:4d:99:e2:c4:26:ff: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:32:31:14:DC:1F:69:08:C9:16:2B:9A:A7:79:4B:35:5B:10:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d33ddacc-232f-3cc5-a6c6-833156127de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cd:7d:c4:65:cb:ef:dc:a0:05:14:9f:82:82:12:d8:e1:3a: 80:45:45:1c:29:47:e6:5d:66:53:1c:60:18:de:b3:13:ce:ed: 37:21:21:23:25:85:63:1f:10:9c:42:ba:21:01:25:b8:63:b7: 7b:c2:3d:c6:15:33:6e:c2:83:59:4f:a1:c7:be:37:3a:e9:14: 48:dc:85:e7:3d:4c:20:e8:6e:c7:f2:ab:15:df:91:f6:18:91: 48:07:99:ad:6f:7e:5d:94:b0:a7:bb:30:a9:4a:45:97:7f:37: 36:7c:ee:c3:b3:12:f4:c4:51:35:39:98:f1:00:e5:53:b9:e2: 65:c3:9e:3f:b1:a1:c7:b0:8c:b4:57:4b:e4:e7:0c:92:24:f8: ed:8a:7b:6b:e4:2e:28:81:92:99:37:43:56:a8:de:34:e6:99: 09:32:f0:6e:ee:b9:f5:c3:76:ab:fe:f3:a7:98:37:ba:2b:b9: 23:e9:9a:84:f0:58:ec:83:e0:3d:56:a5:69:0a:ce:01:0e:32: 82:4d:bc:82:bc:82:43:ca:96:6b:3e:58:a7:be:0d:75:aa:e2: 7a:ec:48:42:bc:ab:9f:fc:7a:ff:c6:1c:b6:68:a5:73:9c:f3: 81:d3:30:a0:94:8b:ef:da:55:14:5a:8a:3f:09:a0:f5:9a:06: f2:90:c5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7+gYTZfn89uu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MWNmMTJmM2EtMGJjNC00ZmQyLWIwYjktMzExYmY5ZjRmYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRLzaxgPw6oQU7BlenkcPgflfcQ8OvmEX578 8neI99Y40wCm4KR36v+DuzYmxrdmhXwGas6NiENEMoWpQwvGnUveIF4pP6cXCQdP CwUOUx3wohmWnx50Bg4rZJo3wRyXFRxNroXYomUklxF/Qq+s+JqLNOI2dy2G84zy itH4Caj6W8IQ8cU5IlIhIaX10R+JF7atRrUkqrIxooNhuey6tN9tZsfc2XnubHMW 2EVD/mwbgeM8/eSXhBYlopND3xdNXjWndOe5Y2tMNFfdbxY5gKrHeqIm8k+AL0hc Dx07pAABUCuk6SD6AGpaMHJYSupDxscWOCbaj5ZNmeLEJv8xwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGimMjEU3B9pCMkWK5qneUs1WxD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDMzZGRhY2MtMjMyZi0z Y2M1LWE2YzYtODMzMTU2MTI3ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4PUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7NfcRly+/coAUUn4KCEtjhOoBFRRwpR+ZdZlMcYBjesxPO7TchISMl hWMfEJxCuiEBJbhjt3vCPcYVM27Cg1lPoce+NzrpFEjchec9TCDobsfyqxXfkfYY kUgHma1vfl2UsKe7MKlKRZd/NzZ87sOzEvTEUTU5mPEA5VO54mXDnj+xocewjLRX S+TnDJIk+O2Ke2vkLiiBkpk3Q1ao3jTmmQky8G7uufXDdqv+86eYN7oruSPpmoTw WOyD4D1WpWkKzgEOMoJNvIK8gkPKlms+WKe+DXWq4nrsSEK8q5/8ev/GHLZopXOc 84HTMKCUi+/aVRRaij8JoPWaBvKQxQs= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:51 2024 by rpki-client on console-ams.rpki-client.org