$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa File: 175419ee-8205-3ea6-95fa-eba20907ad30.roa (raw, json) Hash identifier: J70V6J3ffwWMDAs2L7elYyjt6/m7UxmlKCgdMancsVI= Subject key identifier: 0B:87:D9:BA:A4:C7:04:A0:03:26:01:53:B8:12:C3:62:B1:65:13:74 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F43285847B6FE2B89F594D85FEED267C0 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa Signing time: Wed 30 Oct 2024 16:29:11 +0000 ROA not before: Wed 30 Oct 2024 16:29:11 +0000 ROA not after: Tue 28 Jan 2025 17:29:11 +0000 asID: 16509 IP address blocks: 139.64.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:fe:2b:89:f5:94:d8:5f:ee:d2:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Oct 30 16:29:11 2024 GMT Not After : Jan 28 17:29:11 2025 GMT Subject: CN=61fb9b19-4e6d-43f5-a9de-8ea25d1911d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:d5:53:67:f9:0c:ff:07:3a:f3:37:2d:07: 09:94:23:c2:1c:33:1e:d9:f8:fd:22:35:ba:14:54: 8a:fa:9a:ed:e9:ea:04:26:41:9a:28:a0:0f:0d:c8: 55:f7:8d:43:82:9b:a5:11:a4:5d:b2:e8:03:13:92: cc:5f:b5:9c:78:30:01:c5:2a:49:0b:8b:38:49:58: ff:9e:18:f0:18:ce:e5:10:57:59:61:d3:3d:c0:85: d1:8d:31:c6:22:18:19:13:83:5e:4c:ac:74:4c:3b: 02:ad:24:8a:de:c9:2f:a7:e6:56:36:8d:fa:ed:66: 7a:95:79:80:11:16:f1:a1:f4:6c:a5:51:00:cc:ec: 40:6b:fc:f6:92:03:d0:1a:d6:14:cd:b0:aa:15:a1: 3d:27:36:ea:5c:3c:e4:ae:ca:a3:75:9b:26:d3:49: c2:c1:fc:30:d7:29:be:97:ba:e4:14:2b:17:6e:e4: 14:e3:78:7f:6a:03:54:91:08:ea:6a:d5:8c:46:5a: 91:48:e3:59:dc:1d:a5:59:90:85:d6:8d:88:f4:61: 1c:d5:0e:a8:1a:e4:cb:cb:03:e7:87:6e:0e:4b:d3: 92:23:56:09:d5:49:11:fe:0f:2d:43:35:27:77:83: 5e:e7:44:10:30:8c:b2:75:67:f9:28:ab:0d:b2:53: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:87:D9:BA:A4:C7:04:A0:03:26:01:53:B8:12:C3:62:B1:65:13:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/175419ee-8205-3ea6-95fa-eba20907ad30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b2:d9:7c:db:45:6e:52:84:9f:32:9e:6e:17:36:70:21:91: 2d:f0:33:01:d9:f4:a9:29:40:cc:f9:9b:31:cc:9a:42:16:fd: 5b:1f:ea:03:b7:8a:f6:41:1f:8f:e3:8b:17:1c:77:1e:54:d6: 92:b2:a6:df:e8:8a:fe:30:16:ef:57:7f:8c:47:3f:e3:c1:1b: e5:4b:7f:96:e7:bc:4e:4b:13:6f:b2:cc:04:44:5f:ab:f1:f8: aa:50:8b:5c:e0:f0:8b:af:9f:de:0b:e7:5d:e7:5c:a6:f9:8c: 6d:fe:24:60:b3:bb:2d:cf:46:c3:44:04:8f:34:69:23:84:35: fc:5a:e3:e1:54:fb:6a:b1:0d:b5:0a:26:99:72:41:fb:f4:8a: 49:41:aa:5c:f5:88:ee:43:6c:6d:cc:7d:fd:66:9e:b5:3b:44: f2:f3:c3:df:e1:1f:fe:6c:23:20:2f:6e:ca:5c:31:2e:c8:64: d3:75:14:d6:84:5d:1d:91:62:9d:83:a0:ed:45:fb:06:b8:a2: 7b:dc:97:9e:2d:a8:1f:5e:3f:9e:cd:55:9a:62:b9:b7:09:9a: b9:19:41:f8:03:3d:6e:e0:8a:be:89:ad:54:93:ec:26:a1:08: c9:b6:f9:78:07:ba:9d:0e:4c:2b:7e:d7:20:cd:1c:86:89:32: d4:b6:bb:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2/iuJ9ZTYX+7SZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI0MTAzMDE2MjkxMVoXDTI1MDEyODE3MjkxMVowLzEtMCsGA1UEAxMk NjFmYjliMTktNGU2ZC00M2Y1LWE5ZGUtOGVhMjVkMTkxMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO3VU2f5DP8HOvM3LQcJlCPCHDMe2fj9IjW6 FFSK+prt6eoEJkGaKKAPDchV941DgpulEaRdsugDE5LMX7WceDABxSpJC4s4SVj/ nhjwGM7lEFdZYdM9wIXRjTHGIhgZE4NeTKx0TDsCrSSK3skvp+ZWNo367WZ6lXmA ERbxofRspVEAzOxAa/z2kgPQGtYUzbCqFaE9JzbqXDzkrsqjdZsm00nCwfww1ym+ l7rkFCsXbuQU43h/agNUkQjqatWMRlqRSONZ3B2lWZCF1o2I9GEc1Q6oGuTLywPn h24OS9OSI1YJ1UkR/g8tQzUnd4Ne50QQMIyydWf5KKsNslMcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuH2bqkxwSgAyYBU7gSw2KxZRN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMTc1NDE5ZWUtODIwNS0z ZWE2LTk1ZmEtZWJhMjA5MDdhZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOy2XzbRW5ShJ8ynm4XNnAhkS3wMwHZ9KkpQMz5mzHMmkIW/Vsf6gO3 ivZBH4/jixccdx5U1pKypt/oiv4wFu9Xf4xHP+PBG+VLf5bnvE5LE2+yzAREX6vx +KpQi1zg8Iuvn94L513nXKb5jG3+JGCzuy3PRsNEBI80aSOENfxa4+FU+2qxDbUK JplyQfv0iklBqlz1iO5DbG3Mff1mnrU7RPLzw9/hH/5sIyAvbspcMS7IZNN1FNaE XR2RYp2DoO1F+wa4onvcl54tqB9eP57NVZpiubcJmrkZQfgDPW7gir6JrVST7Cah CMm2+XgHup0OTCt+1yDNHIaJMtS2uzw= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:32 2024 by rpki-client on console-ams.rpki-client.org