$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa File: 10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json) Hash identifier: Ls2z0BMOW5pnNDnGXyWUztcjGvVV2KaMWupqeIF1Nf4= Subject key identifier: FE:47:3C:6C:45:41:76:BC:B7:F7:64:22:17:44:D5:A6:D7:71:E0:90 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F43285847EFEF80BD3DD91052EE389460 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 205627 IP address blocks: 170.2.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:80:bd:3d:d9:10:52:ee:38:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=38bf5afa-143c-4473-bb7b-34094c0d21fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:1e:32:ba:a7:ae:e5:db:2a:8e:ba:2c:53: 72:ab:96:00:23:9d:01:e8:d4:d8:1b:f3:8f:a7:0d: 82:da:96:4f:b2:a1:e0:5c:76:be:a2:70:49:4c:64: 15:fc:22:d5:e3:39:e4:bb:67:d9:d2:be:44:ba:af: 74:c7:ce:da:4d:11:2b:aa:37:5a:de:be:3d:84:95: b3:16:6a:25:61:ce:1c:ce:da:bc:04:bd:bf:6d:bf: b2:b6:c6:54:a3:5c:ff:20:65:8e:56:b6:38:d0:78: 0c:78:0b:d5:0b:9d:d9:be:f3:09:bd:42:db:01:14: 16:8b:d7:07:cb:f4:01:e7:7b:1c:81:eb:c7:3d:4c: 68:ac:62:08:a1:a6:b0:74:9e:6a:88:79:a6:ed:35: 75:83:37:b0:25:7d:bf:6a:1e:98:a1:99:9f:cd:78: e3:3c:68:b1:f2:e1:ff:be:6d:12:63:54:07:fd:2f: a9:9e:2d:db:f1:3d:c4:5a:6e:93:f5:45:e8:eb:e7: b9:ac:6d:ab:40:cf:04:0c:11:7e:99:28:75:df:4c: 16:bc:ed:37:14:12:13:2b:ff:58:00:a7:b0:de:8e: 3f:7a:fa:76:94:45:ce:19:88:bf:4e:46:01:d4:69: 3e:c0:e1:c3:d4:a6:11:f7:8b:df:1a:d1:bd:d0:27: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:47:3C:6C:45:41:76:BC:B7:F7:64:22:17:44:D5:A6:D7:71:E0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:08:34:21:37:7e:50:cf:ec:68:c6:73:cd:b0:6a:b1:80:05: 2d:f4:65:e1:90:b0:eb:38:93:34:7a:f8:f3:ea:04:52:a9:04: 87:e9:9c:2f:73:9e:f4:15:8f:49:40:72:06:15:6e:fa:9b:c5: 35:7b:3f:45:c8:7b:06:90:01:4f:8a:ea:4e:24:53:03:56:90: 3c:ca:3d:f6:67:2e:19:25:23:96:07:8f:d4:49:e0:a7:c0:e1: 46:9d:b1:59:c5:e4:21:86:7b:d8:7f:37:6f:10:31:ab:f4:48: 8a:78:95:2c:45:d3:4c:e8:bc:64:23:44:f9:40:f1:36:b3:77: 56:10:6a:72:59:cc:54:90:32:5a:b0:b2:5d:3e:97:1d:f2:bb: f4:0c:35:ae:ff:ca:7d:ce:89:da:c1:65:82:7c:3e:7c:42:b6: fc:a1:f2:21:1e:8a:80:0f:51:ce:52:1b:6f:07:7c:85:db:a3: c9:0e:f0:b8:1f:19:e1:29:65:90:23:7c:bf:a5:61:39:59:fc: 77:b5:00:58:eb:43:8e:49:8d:1f:d3:1a:7f:2a:46:04:0f:1c: da:88:9f:e9:3b:fd:28:21:ce:82:d6:71:77:52:89:bb:62:6e: 84:36:ce:2e:62:08:0c:91:0d:c6:cc:67:67:27:1e:22:3b:24: 59:26:1c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74C9PdkQUu44lGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk MzhiZjVhZmEtMTQzYy00NDczLWJiN2ItMzQwOTRjMGQyMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXceMrqnruXbKo66LFNyq5YAI50B6NTYG/OP pw2C2pZPsqHgXHa+onBJTGQV/CLV4znku2fZ0r5Euq90x87aTRErqjda3r49hJWz FmolYc4cztq8BL2/bb+ytsZUo1z/IGWOVrY40HgMeAvVC53ZvvMJvULbARQWi9cH y/QB53scgevHPUxorGIIoaawdJ5qiHmm7TV1gzewJX2/ah6YoZmfzXjjPGix8uH/ vm0SY1QH/S+pni3b8T3EWm6T9UXo6+e5rG2rQM8EDBF+mSh130wWvO03FBITK/9Y AKew3o4/evp2lEXOGYi/TkYB1Gk+wOHD1KYR94vfGtG90CccNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5HPGxFQXa8t/dkIhdE1abXceCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUINCE3flDP7GjGc82warGABS30ZeGQsOs4kzR6+PPqBFKpBIfpnC9z nvQVj0lAcgYVbvqbxTV7P0XIewaQAU+K6k4kUwNWkDzKPfZnLhklI5YHj9RJ4KfA 4UadsVnF5CGGe9h/N28QMav0SIp4lSxF00zovGQjRPlA8Tazd1YQanJZzFSQMlqw sl0+lx3yu/QMNa7/yn3OidrBZYJ8PnxCtvyh8iEeioAPUc5SG28HfIXbo8kO8Lgf GeEpZZAjfL+lYTlZ/He1AFjrQ45JjR/TGn8qRgQPHNqIn+k7/SghzoLWcXdSibti boQ2zi5iCAyRDcbMZ2cnHiI7JFkmHJc= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org