$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: 7iw7ITkESUJxualk+Vr2uAGReUIJF5f8l9MkkNxx1dU= Subject key identifier: 73:24:A8:54:ED:4F:B2:47:E8:FF:F8:DF:B8:34:D5:14:D2:42:9B:64 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F43285847A73BE6566A878B974853F300 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e6:56:6a:87:8b:97:48:53:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=5e6f2630-6b57-4ce3-876f-68639a5c6f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:fd:f0:46:f2:0a:4a:a5:81:f8:e0:9b:9c: cf:e5:97:30:74:78:29:8c:8f:01:00:8a:2f:3f:b9: a1:f7:a9:ee:04:5e:8e:07:98:47:a7:75:0c:38:59: b5:5f:a7:06:90:8e:7f:13:c5:9f:7c:bc:27:c6:3c: 9e:2e:1c:ac:73:21:b7:63:58:8c:7e:13:a0:c0:5f: 0a:d5:5c:8b:57:a2:f6:71:c9:7c:5d:d0:ef:67:cf: ec:fa:05:ce:cc:24:a1:7f:09:90:6d:bd:b3:10:a0: b6:76:90:46:c8:b8:68:e0:7c:fa:87:70:08:d6:88: 38:39:34:65:32:35:08:56:d3:bb:c2:5b:4c:48:55: 0d:6b:1e:db:7b:47:22:a1:bc:3a:4b:50:9b:b5:a7: 76:2b:2c:a8:77:af:37:23:c7:07:36:47:dc:78:db: fb:10:b8:36:85:05:9a:39:d6:55:e2:19:a6:a5:44: 36:e2:4d:29:3d:dd:65:72:51:50:a6:e4:5c:dd:30: fa:f5:92:72:fb:9c:f2:96:a9:f1:79:a0:6e:4a:3c: d7:3e:ad:7c:b6:ac:fc:76:ae:33:d8:a7:b6:ad:c2: 4e:af:a8:26:df:3b:73:93:32:8f:16:77:d3:2c:7e: 76:97:70:d2:96:8d:ed:d9:e3:29:ad:40:74:a6:92: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:A8:54:ED:4F:B2:47:E8:FF:F8:DF:B8:34:D5:14:D2:42:9B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:de:98:15:92:ea:f1:41:73:57:f4:38:98:56:08:ff:f6: 45:9a:21:d3:19:08:02:4d:07:44:9d:b5:aa:fd:58:f6:49:30: 0c:e5:95:01:c0:6b:d3:3c:50:39:cf:7e:32:38:d8:87:c0:fc: c9:1f:00:93:e1:0c:11:c8:56:23:a4:fa:9e:59:11:bc:0c:54: 05:c1:0e:cb:e7:ce:80:2a:f6:9a:87:6f:76:d0:ed:bc:e8:96: 2a:f2:b7:f8:a5:6d:6d:00:3a:44:68:ed:80:2a:e2:b1:f3:21: 40:f2:16:a7:fb:5e:14:84:d6:22:c1:87:2e:a9:03:25:b9:1b: 31:af:da:69:6b:aa:b6:6f:de:06:22:0b:65:dc:bb:a9:10:bc: b1:35:ce:26:5d:66:db:73:a3:11:7b:a9:f2:7e:76:c7:f5:67: 66:f3:13:91:eb:d8:25:c3:a8:aa:b3:1e:69:2b:b6:c3:17:84: f3:13:2b:2b:7f:cb:b0:b9:ed:24:db:d2:25:8b:75:9d:cf:8e: 9d:b7:4e:3f:97:87:97:e2:50:3e:e2:d5:f7:9f:77:58:6d:66: 59:0c:37:67:22:ae:b1:c9:55:a3:c5:ca:b6:8a:82:fd:b0:7c: f2:bf:e1:e9:ba:cd:c4:8c:f9:d1:46:8d:04:5e:dc:aa:68:0e: 12:a9:db:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+ZWaoeLl0hT8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NWU2ZjI2MzAtNmI1Ny00Y2UzLTg3NmYtNjg2MzlhNWM2ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOj98EbyCkqlgfjgm5zP5ZcwdHgpjI8BAIov P7mh96nuBF6OB5hHp3UMOFm1X6cGkI5/E8WffLwnxjyeLhyscyG3Y1iMfhOgwF8K 1VyLV6L2ccl8XdDvZ8/s+gXOzCShfwmQbb2zEKC2dpBGyLho4Hz6h3AI1og4OTRl MjUIVtO7wltMSFUNax7be0ciobw6S1Cbtad2Kyyod683I8cHNkfceNv7ELg2hQWa OdZV4hmmpUQ24k0pPd1lclFQpuRc3TD69ZJy+5zylqnxeaBuSjzXPq18tqz8dq4z 2Ke2rcJOr6gm3ztzkzKPFnfTLH52l3DSlo3t2eMprUB0ppIn7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMkqFTtT7JH6P/437g01RTSQptkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Q3pgVkurxQXNX9DiYVgj/9kWaIdMZCAJNB0Sdtar9WPZJMAzllQHA a9M8UDnPfjI42IfA/MkfAJPhDBHIViOk+p5ZEbwMVAXBDsvnzoAq9pqHb3bQ7bzo liryt/ilbW0AOkRo7YAq4rHzIUDyFqf7XhSE1iLBhy6pAyW5GzGv2mlrqrZv3gYi C2Xcu6kQvLE1ziZdZttzoxF7qfJ+dsf1Z2bzE5Hr2CXDqKqzHmkrtsMXhPMTKyt/ y7C57STb0iWLdZ3Pjp23Tj+Xh5fiUD7i1fefd1htZlkMN2cirrHJVaPFyraKgv2w fPK/4em6zcSM+dFGjQRe3KpoDhKp20w= -----END CERTIFICATE-----Generated at Sat Nov 23 07:48:05 2024 by rpki-client on console-ams.rpki-client.org