$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa File: b95b81d1-8202-323e-b222-9be2fa53333c.roa (raw, json) Hash identifier: kRJCwVn6/XZxq6JSf4Y0zD+WeaQl00qHzokxc+0qO8Q= Subject key identifier: DF:59:6A:90:8C:84:E8:A7:CC:AF:A2:CB:77:A8:B5:35:AB:B3:B2:64 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F4328584726D07C3E193F2E81A8D53B00 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 170.176.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7c:3e:19:3f:2e:81:a8:d5:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=708f3cbf-3d6a-4ff9-bc7a-5b56c58ec0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:56:84:97:9a:c8:b5:e3:39:75:55:af:bb: d7:f1:da:5c:60:d6:46:3a:f7:9b:7f:10:93:42:f4: 6c:f2:93:95:03:06:5b:d0:e3:2b:6b:a9:5f:b6:fa: 5b:71:f2:3f:d9:1d:54:a0:03:35:61:3e:93:07:6a: fe:6f:99:35:89:e4:89:9a:44:db:4a:9b:d1:ee:38: bb:05:29:ee:5e:51:23:30:91:e7:6d:17:81:3a:48: db:1c:e4:cb:97:c6:92:7e:7b:75:e9:f1:f1:57:50: e6:c4:d9:48:f8:21:8a:45:3b:9c:0d:23:00:35:b5: 8e:74:f3:e1:f2:c8:9e:07:1a:58:58:16:cd:05:66: 87:32:ba:ad:90:df:c3:95:85:a1:09:54:b2:b8:72: 60:5e:b1:5a:d2:e3:da:e3:bc:30:70:e8:e5:91:b9: df:0a:06:bf:ab:37:07:f2:83:eb:17:ea:b9:d8:dc: f9:0b:74:6c:3a:34:9a:75:51:54:21:b2:93:0a:33: 60:78:79:82:17:b9:8f:15:95:5a:bb:af:e5:52:6c: 29:df:17:45:56:eb:a6:62:ef:68:dd:7b:32:41:b7: da:99:39:8d:f9:8a:35:97:fd:82:0d:39:8f:f4:fb: 90:13:b1:5b:05:fe:d2:ff:08:da:a2:a1:1b:af:f6: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:59:6A:90:8C:84:E8:A7:CC:AF:A2:CB:77:A8:B5:35:AB:B3:B2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:30:21:04:e6:1a:b5:59:42:43:c6:27:98:45:9d:eb:d4:3c: 6e:e5:fb:98:4d:dd:4c:e1:8f:d8:66:51:7c:d7:e3:b1:37:57: 81:0a:71:96:ee:8f:ae:bf:e9:d7:b9:0b:54:16:7a:5a:73:30: 3d:d4:c9:6c:c6:88:b6:b9:cc:5d:25:56:f4:02:5b:c6:1f:30: 9b:ac:fb:b3:ba:48:21:ea:17:a8:fe:65:9f:68:7d:f3:21:64: f3:f5:67:54:d5:94:9f:98:e7:cd:bc:ca:87:0d:6c:ed:e4:0f: 4c:33:44:37:bf:34:78:32:f9:8b:ad:ed:4b:91:01:d2:13:84: 01:a7:c0:84:32:df:1b:20:4c:b6:0a:bb:0c:34:70:20:aa:82: 93:aa:af:04:b6:f7:0d:7f:31:06:31:2c:4a:ea:87:d2:5b:c2: aa:36:f4:cc:61:4f:27:1f:d9:1d:37:1c:b0:b9:3b:97:bf:ef: ad:fa:f8:39:d8:02:97:32:0a:14:d5:7c:35:27:8d:6d:04:6e: 07:d0:70:3f:de:a3:2a:b2:07:02:d4:f5:3a:ae:79:9b:5c:62: 5e:bb:f9:e6:76:d7:38:63:56:7a:c5:88:14:32:2a:67:62:a0: 87:13:ef:31:fe:e0:fe:65:07:59:50:72:15:5e:fb:ad:0e:29: ec:49:93:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0Hw+GT8ugajVOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk NzA4ZjNjYmYtM2Q2YS00ZmY5LWJjN2EtNWI1NmM1OGVjMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsxWhJeayLXjOXVVr7vX8dpcYNZGOvebfxCT QvRs8pOVAwZb0OMra6lftvpbcfI/2R1UoAM1YT6TB2r+b5k1ieSJmkTbSpvR7ji7 BSnuXlEjMJHnbReBOkjbHOTLl8aSfnt16fHxV1DmxNlI+CGKRTucDSMANbWOdPPh 8sieBxpYWBbNBWaHMrqtkN/DlYWhCVSyuHJgXrFa0uPa47wwcOjlkbnfCga/qzcH 8oPrF+q52Nz5C3RsOjSadVFUIbKTCjNgeHmCF7mPFZVau6/lUmwp3xdFVuumYu9o 3XsyQbfamTmN+Yo1l/2CDTmP9PuQE7FbBf7S/wjaoqEbr/bwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9ZapCMhOinzK+iy3eotTWrs7JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvYjk1YjgxZDEtODIwMi0z MjNlLWIyMjItOWJlMmZhNTMzMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgwIQTmGrVZQkPGJ5hFnevUPG7l+5hN3Uzhj9hmUXzX47E3V4EKcZbu j66/6de5C1QWelpzMD3UyWzGiLa5zF0lVvQCW8YfMJus+7O6SCHqF6j+ZZ9offMh ZPP1Z1TVlJ+Y5828yocNbO3kD0wzRDe/NHgy+Yut7UuRAdIThAGnwIQy3xsgTLYK uww0cCCqgpOqrwS29w1/MQYxLErqh9Jbwqo29MxhTycf2R03HLC5O5e/7636+DnY ApcyChTVfDUnjW0EbgfQcD/eoyqyBwLU9TqueZtcYl67+eZ21zhjVnrFiBQyKmdi oIcT7zH+4P5lB1lQchVe+60OKexJk/E= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org