$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa File: 4206828a-08cf-3ab8-8041-7bebab088add.roa (raw, json) Hash identifier: G/YeMdgjRMLGP+WaR/RaB0uO8pZLLQDtmuyemR5oyMI= Subject key identifier: 74:69:90:57:0A:E1:A7:2E:D1:FC:3B:79:A5:80:DE:B1:4F:C6:38:C7 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F43285847D6CF39D2F3785D19D54F3F00 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 138699 IP address blocks: 71.18.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:39:d2:f3:78:5d:19:d5:4f:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=a5a024e9-f091-4360-a5e0-6cc20554b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:09:04:64:1a:95:ba:77:0c:0d:89:9e:3e:ff: 10:cb:29:d6:b3:fa:d5:76:a9:0b:52:dd:97:95:ef: e3:b4:14:41:58:e8:eb:22:52:fa:4e:fb:9c:9c:6c: 5a:21:54:d9:36:da:28:e9:48:aa:f6:b0:e2:ed:bc: 17:fb:c0:fb:e9:1c:ac:e0:e5:af:3c:04:70:3d:7f: 22:bc:07:17:1d:c5:5f:ad:06:8d:a7:60:c5:5f:5a: d6:e0:09:01:8e:45:0d:c2:5f:2b:33:20:d0:c3:35: 08:17:81:fc:5f:2b:ec:ba:73:71:10:a4:98:4e:42: 27:07:dc:95:02:58:a6:a9:3d:22:66:48:f5:b2:dd: 38:09:cb:f6:61:14:4f:6c:f7:54:93:ca:7e:c6:97: 75:63:f1:10:d8:29:70:88:a8:f7:86:7a:07:f2:18: 3d:51:f4:9c:9f:5f:9c:5b:a7:ca:6d:f7:cf:5e:1d: e4:10:52:8b:8d:4c:b8:0e:27:ce:f7:da:83:08:9a: f0:2c:e3:8f:92:31:01:d6:0e:39:37:a6:2f:38:12: 60:cc:12:57:ad:3e:e1:51:25:74:8a:37:90:cf:41: 76:54:23:30:64:fd:ef:d3:4b:25:04:f4:ba:7e:34: 24:2a:83:72:6c:94:85:06:e0:c3:59:e3:b9:6e:d8: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:90:57:0A:E1:A7:2E:D1:FC:3B:79:A5:80:DE:B1:4F:C6:38:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:75:22:9a:1d:db:f2:36:f8:f0:2e:21:a7:4c:49:74:a5:a7: dc:25:28:34:ed:82:5f:f8:90:c7:53:26:08:6f:4b:9b:b8:8c: 11:f8:60:3d:ea:b7:42:1d:03:72:cb:a2:8b:ad:70:1e:2e:db: 8b:54:31:f7:0f:01:8e:26:70:d0:7d:78:6e:49:96:ce:7b:96: c4:c7:b7:78:d3:f2:95:55:a7:39:c7:63:41:c5:8c:eb:03:31: 7f:53:53:6c:bf:d0:27:05:75:93:27:29:5f:1d:63:8e:bb:78: 66:4d:f2:51:06:cd:27:55:22:1e:d9:73:8a:6b:d1:52:c8:03: ec:3f:40:08:6f:58:91:cd:45:04:5b:73:22:77:4a:4c:7e:1a: a0:3a:e9:05:45:21:f4:1f:05:c4:fb:81:26:67:f4:23:92:d4: 05:37:60:16:0c:10:2c:58:b4:15:2d:3a:f0:7e:be:b4:cc:18: 92:2b:a6:b5:35:08:ed:c0:3d:77:53:02:35:f4:f1:c2:1b:3e: d0:a5:0e:5a:29:a9:f3:97:03:e3:af:8d:c5:26:5a:a1:ff:e6: 08:70:5e:b1:5f:ee:4d:c8:de:cd:7a:71:93:d0:30:b6:64:ba: 1e:ea:5c:64:20:b8:31:07:41:e5:b1:ac:a5:a3:6e:35:83:c7: 8c:c4:b3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWzznS83hdGdVPPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk YTVhMDI0ZTktZjA5MS00MzYwLWE1ZTAtNmNjMjA1NTRiODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wkEZBqVuncMDYmePv8QyynWs/rVdqkLUt2X le/jtBRBWOjrIlL6TvucnGxaIVTZNtoo6Uiq9rDi7bwX+8D76Rys4OWvPARwPX8i vAcXHcVfrQaNp2DFX1rW4AkBjkUNwl8rMyDQwzUIF4H8XyvsunNxEKSYTkInB9yV AlimqT0iZkj1st04Ccv2YRRPbPdUk8p+xpd1Y/EQ2ClwiKj3hnoH8hg9UfScn1+c W6fKbffPXh3kEFKLjUy4DifO99qDCJrwLOOPkjEB1g45N6YvOBJgzBJXrT7hUSV0 ijeQz0F2VCMwZP3v00slBPS6fjQkKoNybJSFBuDDWeO5btj14QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRpkFcK4acu0fw7eaWA3rFPxjjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNDIwNjgyOGEtMDhjZi0z YWI4LTgwNDEtN2JlYmFiMDg4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN1Ipod2/I2+PAuIadMSXSlp9wlKDTtgl/4kMdTJghvS5u4jBH4YD3q t0IdA3LLooutcB4u24tUMfcPAY4mcNB9eG5Jls57lsTHt3jT8pVVpznHY0HFjOsD MX9TU2y/0CcFdZMnKV8dY467eGZN8lEGzSdVIh7Zc4pr0VLIA+w/QAhvWJHNRQRb cyJ3Skx+GqA66QVFIfQfBcT7gSZn9COS1AU3YBYMECxYtBUtOvB+vrTMGJIrprU1 CO3APXdTAjX08cIbPtClDlopqfOXA+OvjcUmWqH/5ghwXrFf7k3I3s16cZPQMLZk uh7qXGQguDEHQeWxrKWjbjWDx4zEs+c= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org