$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa File: e81bee3c-f5b3-365f-8278-ffb72226e18e.roa (raw, json) Hash identifier: JmZ5l6FpPjGvTGmiTFn3n7Y0G9kKk/Xd/B0eJh7IcxQ= Subject key identifier: B6:DA:79:92:5D:87:76:2B:31:36:C1:BA:30:1F:47:69:FF:5E:BB:69 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F43285847C1DF51FBED9A2114CDA13880 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 8075 IP address blocks: 170.88.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:51:fb:ed:9a:21:14:cd:a1:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=4238138c-66d4-42df-bc19-011227811230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:82:81:a7:c7:01:3e:f3:c8:d8:83:e9:4f: 28:bd:11:78:40:2e:2e:e3:fc:4c:49:86:fa:4d:be: 3c:2c:2b:25:1b:c4:c9:58:64:f1:86:03:78:87:f2: 9e:49:21:e9:34:e2:0a:76:9e:ec:6a:aa:fb:2b:a0: 4f:78:13:d2:c6:86:9d:52:d8:5c:c0:4a:39:17:77: 4e:15:b3:64:c3:2c:f4:c6:e9:58:b4:cd:4b:82:a6: 35:10:ba:04:a6:6c:14:3a:ec:23:03:16:48:b5:27: 0b:a1:2b:8a:21:77:db:fa:5c:69:49:5b:82:f4:49: 03:13:3d:2f:16:88:f8:bf:f4:9f:80:0a:e2:85:9b: 2e:35:3d:6b:38:3f:9b:64:25:fd:3c:b9:04:c1:0c: b4:65:f5:aa:d0:88:97:df:f3:d0:77:d8:47:9a:15: 6c:c4:93:17:d5:45:14:3f:3d:ae:72:d4:15:93:f4: b4:45:fe:0f:eb:eb:43:e6:22:65:27:ee:40:a2:19: 30:23:1d:ad:23:aa:58:17:10:5e:11:e4:59:a0:be: d6:c7:e2:9f:df:97:3f:f6:ba:b4:02:ab:47:eb:a9: 54:5c:23:8c:65:64:84:d5:89:ca:b2:0b:72:e7:8f: 06:06:e6:22:a4:0e:68:fa:03:95:24:9b:05:2a:6c: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:79:92:5D:87:76:2B:31:36:C1:BA:30:1F:47:69:FF:5E:BB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/e81bee3c-f5b3-365f-8278-ffb72226e18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:bf:3c:94:86:fa:10:b1:0c:d3:87:d2:63:1b:c4:6e:19:aa: a1:0f:dd:2b:e5:b7:63:68:64:8e:3e:b5:9f:4b:44:60:08:a7: 6d:7a:3a:e6:15:96:67:b5:d8:7f:ed:e3:18:58:53:67:6c:39: ed:5c:24:19:29:da:0a:06:25:e7:7f:01:09:7f:b8:52:af:3d: 15:d8:26:d9:29:6d:0e:62:06:88:7a:82:d6:c4:5d:e3:4d:05: 63:84:fa:7c:6f:57:b6:ed:52:b8:1d:89:84:6a:6d:c9:e4:f4: 7d:3c:2d:55:93:18:a2:e3:49:e9:9f:84:0c:4e:91:00:af:79: 21:ea:31:44:cf:35:c9:1a:01:f5:df:e6:b5:f3:04:bd:bd:be: b4:12:8d:70:ec:64:0e:8f:47:31:a6:64:d5:de:d6:38:b0:2f: e5:44:2e:dc:27:c7:9a:e8:f1:5b:be:c1:79:0f:2c:3c:cf:04: 1a:29:a5:a2:aa:c5:a1:60:64:68:ed:87:a8:96:ee:c9:ed:3f: 1c:19:d2:8c:d3:a6:65:0c:21:95:be:fc:c1:31:a2:c8:b6:df: 40:e2:9e:49:d9:e6:5e:bc:67:a5:60:54:57:f1:e2:83:82:ce: d2:0d:86:d0:2a:d7:99:a0:c4:f7:f6:10:36:be:98:72:a6:a5: 1c:97:a7:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31H77ZohFM2hOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NDIzODEzOGMtNjZkNC00MmRmLWJjMTktMDExMjI3ODExMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hOCgafHAT7zyNiD6U8ovRF4QC4u4/xMSYb6 Tb48LCslG8TJWGTxhgN4h/KeSSHpNOIKdp7saqr7K6BPeBPSxoadUthcwEo5F3dO FbNkwyz0xulYtM1LgqY1ELoEpmwUOuwjAxZItScLoSuKIXfb+lxpSVuC9EkDEz0v Foj4v/SfgArihZsuNT1rOD+bZCX9PLkEwQy0ZfWq0IiX3/PQd9hHmhVsxJMX1UUU Pz2uctQVk/S0Rf4P6+tD5iJlJ+5AohkwIx2tI6pYFxBeEeRZoL7Wx+Kf35c/9rq0 AqtH66lUXCOMZWSE1YnKsgty548GBuYipA5o+gOVJJsFKmzGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbaeZJdh3YrMTbBujAfR2n/XrtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvZTgxYmVlM2MtZjViMy0z NjVmLTgyNzgtZmZiNzIyMjZlMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG/PJSG+hCxDNOH0mMbxG4ZqqEP3Svlt2NoZI4+tZ9LRGAIp216OuYV lme12H/t4xhYU2dsOe1cJBkp2goGJed/AQl/uFKvPRXYJtkpbQ5iBoh6gtbEXeNN BWOE+nxvV7btUrgdiYRqbcnk9H08LVWTGKLjSemfhAxOkQCveSHqMUTPNckaAfXf 5rXzBL29vrQSjXDsZA6PRzGmZNXe1jiwL+VELtwnx5ro8Vu+wXkPLDzPBBoppaKq xaFgZGjth6iW7sntPxwZ0ozTpmUMIZW+/MExosi230DinknZ5l68Z6VgVFfx4oOC ztINhtAq15mgxPf2EDa+mHKmpRyXp/g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:45:23 2024 by rpki-client on console-ams.rpki-client.org