$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa File: c8819cb6-ad46-30d6-a405-084987fa239d.roa (raw, json) Hash identifier: 6Y8LbTxKbLlauSjNpDJDB11fFlI6r2tqK7ey2gvM+Sg= Subject key identifier: 24:D7:5F:8F:62:47:A9:25:75:4C:4A:AE:27:61:FD:21:8F:B8:3B:30 Certificate issuer: /CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Certificate serial: 010D0C9F43285848309B358F9FCB23431D378A00 Authority key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa Signing time: Fri 13 Dec 2024 05:58:25 +0000 ROA not before: Fri 13 Dec 2024 05:58:25 +0000 ROA not after: Thu 13 Mar 2025 04:58:25 +0000 asID: 16509 IP address blocks: 202.37.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:9b:35:8f:9f:cb:23:43:1d:37:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Validity Not Before: Dec 13 05:58:25 2024 GMT Not After : Mar 13 04:58:25 2025 GMT Subject: CN=4cee26ad-6680-4a0d-8127-cd8fc6bc3a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:3e:a7:f8:d5:34:59:28:fc:24:c3:60:94: 92:78:32:d8:35:75:e6:f9:d0:00:55:d0:c0:d2:0b: 62:e7:42:62:99:6d:a5:cc:ba:ee:14:cd:3c:90:9b: 99:09:ed:2c:1c:49:00:cc:50:9d:31:66:12:1c:2e: 43:f0:ec:1a:f4:de:05:0a:ba:50:db:b4:93:99:0a: 67:68:5c:a8:03:02:38:88:62:b1:c5:e8:ee:35:b1: 7b:eb:2e:2e:37:5b:a7:fb:a9:e5:8d:51:6e:64:35: 1f:38:25:7c:d0:ba:8e:79:d9:44:63:f9:87:dc:11: 66:4e:32:67:12:26:a7:60:e4:10:ef:0c:19:9e:ff: 83:41:d9:43:e2:42:e8:1b:15:5a:22:6a:50:37:28: f7:74:e1:f8:c9:5a:7e:8f:af:69:90:8b:f9:f7:46: 4b:ed:98:bc:3f:6a:c9:6a:7c:9a:11:ad:84:79:52: 51:01:0e:0d:33:09:18:7c:69:70:00:c7:70:aa:cd: f8:2c:7a:ae:77:13:44:16:39:6c:5c:14:8c:79:b6: f2:74:e8:41:27:eb:49:78:8d:bd:a5:63:4b:30:53: 72:05:77:73:39:22:db:60:59:c5:11:3b:d3:2d:77: 20:1d:de:18:63:1c:92:c8:1c:4f:b5:83:e5:d8:e0: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:5F:8F:62:47:A9:25:75:4C:4A:AE:27:61:FD:21:8F:B8:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl X509v3 Authority Key Identifier: keyid:D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer sbgp-ipAddrBlock: critical IPv4: 202.37.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8f:64:4a:02:6b:b1:dd:90:99:0c:63:c6:7f:8e:6c:3c:1c: 1b:35:31:44:68:15:02:24:49:76:d5:7f:4f:0f:0b:96:25:bc: 1a:8a:7f:cf:26:d5:a2:b9:2e:e3:94:92:9c:f1:1a:bb:06:2f: 39:11:b0:94:b3:cd:62:1b:51:df:83:63:71:b3:4e:ae:60:f4: ec:63:bc:36:0f:45:32:e4:1c:a1:06:a2:a7:ff:d3:76:84:8e: 7b:28:e6:f9:0d:9f:9b:e0:57:82:9a:aa:62:e4:3b:28:b2:1f: 6d:22:b2:f1:1d:0e:9c:c9:10:5c:aa:d1:5c:9f:3c:e7:8e:f7: 86:b8:e8:86:f6:6f:88:a1:cf:bc:c6:47:2a:9a:4f:b7:d0:a6: 9d:29:b7:26:29:52:f6:d1:ed:ad:ba:02:31:e1:09:96:1d:55: 5c:5d:73:a1:91:72:35:14:84:20:eb:63:56:f5:85:c7:86:f1: 22:0f:7c:b1:7e:38:00:55:08:96:c1:fb:7d:dd:05:e9:01:2f: 1b:52:1e:c5:89:0f:0f:04:67:e5:d5:8f:ee:f7:81:cd:9d:ab: bd:f2:2b:5c:8a:4e:ae:d7:5b:15:1d:7a:c7:a5:21:59:0b:23: 24:9c:79:32:4e:76:08:e0:04:e1:6d:fa:b8:3f:bf:72:68:f1: 51:99:bd:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwmzWPn8sjQx03igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNjcyNDEtM2NkOC00M2ZkLTlmZjctM2UxOGJkODY3 OTI2MB4XDTI0MTIxMzA1NTgyNVoXDTI1MDMxMzA0NTgyNVowLzEtMCsGA1UEAxMk NGNlZTI2YWQtNjY4MC00YTBkLTgxMjctY2Q4ZmM2YmMzYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLM+p/jVNFko/CTDYJSSeDLYNXXm+dAAVdDA 0gti50JimW2lzLruFM08kJuZCe0sHEkAzFCdMWYSHC5D8Owa9N4FCrpQ27STmQpn aFyoAwI4iGKxxejuNbF76y4uN1un+6nljVFuZDUfOCV80LqOedlEY/mH3BFmTjJn EianYOQQ7wwZnv+DQdlD4kLoGxVaImpQNyj3dOH4yVp+j69pkIv590ZL7Zi8P2rJ anyaEa2EeVJRAQ4NMwkYfGlwAMdwqs34LHqudxNEFjlsXBSMebbydOhBJ+tJeI29 pWNLMFNyBXdzOSLbYFnFETvTLXcgHd4YYxySyBxPtYPl2OCSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTXX49iR6kldUxKridh/SGPuDswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MGE2 NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4YmQ4Njc5MjYvYzg4MTljYjYtYWQ0Ni0z MGQ2LWE0MDUtMDg0OTg3ZmEyMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDBhNjcyNDEtM2NkOC00M2ZkLTlm ZjctM2UxOGJkODY3OTI2LzQwYTY3MjQxLTNjZDgtNDNmZC05ZmY3LTNlMThiZDg2 NzkyNi5jcmwwHwYDVR0jBBgwFoAU1bVZn9b+cRz6Dr7OCynaNNsC9Z4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MGE2NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4 YmQ4Njc5MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCPZEoCa7HdkJkMY8Z/jmw8HBs1MURoFQIkSXbVf08PC5YlvBqKf88m 1aK5LuOUkpzxGrsGLzkRsJSzzWIbUd+DY3GzTq5g9OxjvDYPRTLkHKEGoqf/03aE jnso5vkNn5vgV4KaqmLkOyiyH20isvEdDpzJEFyq0VyfPOeO94a46Ib2b4ihz7zG RyqaT7fQpp0ptyYpUvbR7a26AjHhCZYdVVxdc6GRcjUUhCDrY1b1hceG8SIPfLF+ OABVCJbB+33dBekBLxtSHsWJDw8EZ+XVj+73gc2dq73yK1yKTq7XWxUdeselIVkL IySceTJOdgjgBOFt+rg/v3Jo8VGZvas= -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org