$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa File: 5a789292-2e18-3e5d-9145-faab5fa7d256.roa (raw, json) Hash identifier: IHHTT4+kJzK8QbHwRWdLPXWL0sIxrtr5M41vHmo9EGE= Subject key identifier: 16:61:63:E9:17:80:61:7F:0C:D9:4F:98:4C:CE:44:D1:8D:E5:DE:CA Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285847AB6C0BFF375CC1989E551670 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 394688 IP address blocks: 162.221.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:0b:ff:37:5c:c1:98:9e:55:16:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=28022f39-55b2-40b8-8b7c-08275e0deb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:a3:33:bf:d5:45:9d:ee:ed:20:e3:c4:97: 3b:7d:49:cf:86:30:7b:b9:f6:66:be:54:ba:88:2c: 3d:92:a4:2f:b6:fd:90:ef:cf:0c:64:bc:6d:77:ca: 3b:0b:02:6e:71:03:34:1a:3c:56:8b:ed:c3:f9:0e: 3c:41:dc:ea:c8:77:eb:8c:6e:f6:00:d9:8d:7c:f7: 21:b8:5a:37:a6:fb:c2:cf:e5:42:d2:2d:bb:f7:ba: ff:d7:9e:a8:0a:5c:4d:49:86:cc:64:5e:a2:9c:b8: c5:fb:5f:b9:e7:82:28:1d:79:92:1c:e5:11:88:b8: b7:2f:06:81:7f:2b:de:d5:6f:af:96:61:47:e4:6d: 34:98:6e:08:90:19:83:05:4a:1b:aa:45:49:d1:77: 99:85:b3:3b:78:6e:50:41:fe:60:25:a2:58:f0:47: 7c:50:df:76:b7:5b:2c:33:59:c3:6b:61:ec:0a:3a: 96:a8:e4:66:51:04:85:f8:12:1c:02:ff:49:a6:03: e8:0c:6a:a0:96:14:21:67:de:70:a4:ac:28:25:6b: 26:c0:7d:3d:f6:c9:5d:ff:81:6e:27:2e:de:94:3a: 80:45:b2:07:6a:56:9d:35:ad:1a:88:7b:3d:b6:1d: e7:f5:6c:f0:18:c5:f4:df:36:33:e5:a6:50:c9:a1: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:63:E9:17:80:61:7F:0C:D9:4F:98:4C:CE:44:D1:8D:E5:DE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/5a789292-2e18-3e5d-9145-faab5fa7d256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ad:7f:83:49:f7:7a:77:a8:1d:f1:4a:17:71:c4:48:f1:9e: 33:78:6a:1b:3c:1a:f7:7b:34:07:8f:5a:24:c9:a6:72:3d:49: 31:d8:12:96:54:69:21:f3:b3:dc:96:80:43:2e:37:13:65:d4: 52:30:ed:d5:b1:67:0a:4f:e8:c6:56:87:f5:93:aa:02:a2:c5: a3:bb:40:07:50:c1:84:a0:3a:58:13:57:91:5a:fc:3d:6c:12: c0:95:ac:ce:ad:a9:e1:a2:f4:d6:ac:5f:12:ef:53:90:be:02: 0c:3c:2c:ee:5d:20:3b:57:6d:c4:19:89:09:67:35:7e:8c:47: b7:25:ed:29:c3:08:7a:02:27:a8:6a:b1:f8:0d:63:7b:aa:f3: c8:bb:07:93:cf:89:ef:69:3e:58:e5:b1:6f:3d:a2:f4:98:66: 09:95:b4:6f:81:6d:54:a1:a7:79:5c:d6:28:d1:fb:69:4b:5a: d8:45:32:77:11:c4:dc:1a:45:f9:66:44:ac:e3:fb:e6:ba:f1: 8e:ab:88:67:b0:0a:d5:5b:18:6b:cc:8d:85:96:5e:b0:c6:77: a2:c6:1c:08:2a:c1:e4:e7:b9:22:4a:e7:b0:6e:22:4c:fc:4a: db:0a:8e:69:0b:e7:76:24:8c:8b:cf:7d:2d:bf:1d:72:2c:3f: aa:8d:5e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAv/N1zBmJ5VFnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MjgwMjJmMzktNTViMi00MGI4LThiN2MtMDgyNzVlMGRlYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxCjM7/VRZ3u7SDjxJc7fUnPhjB7ufZmvlS6 iCw9kqQvtv2Q788MZLxtd8o7CwJucQM0GjxWi+3D+Q48QdzqyHfrjG72ANmNfPch uFo3pvvCz+VC0i2797r/156oClxNSYbMZF6inLjF+1+554IoHXmSHOURiLi3LwaB fyve1W+vlmFH5G00mG4IkBmDBUobqkVJ0XeZhbM7eG5QQf5gJaJY8Ed8UN92t1ss M1nDa2HsCjqWqORmUQSF+BIcAv9JpgPoDGqglhQhZ95wpKwoJWsmwH099sld/4Fu Jy7elDqARbIHaladNa0aiHs9th3n9WzwGMX03zYz5aZQyaFV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZhY+kXgGF/DNlPmEzORNGN5d7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNWE3ODkyOTItMmUxOC0z ZTVkLTkxNDUtZmFhYjVmYTdkMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGtf4NJ93p3qB3xShdxxEjxnjN4ahs8Gvd7NAePWiTJpnI9STHYEpZU aSHzs9yWgEMuNxNl1FIw7dWxZwpP6MZWh/WTqgKixaO7QAdQwYSgOlgTV5Fa/D1s EsCVrM6tqeGi9NasXxLvU5C+Agw8LO5dIDtXbcQZiQlnNX6MR7cl7SnDCHoCJ6hq sfgNY3uq88i7B5PPie9pPljlsW89ovSYZgmVtG+BbVShp3lc1ijR+2lLWthFMncR xNwaRflmRKzj++a68Y6riGewCtVbGGvMjYWWXrDGd6LGHAgqweTnuSJK57BuIkz8 StsKjmkL53YkjIvPfS2/HXIsP6qNXkE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:09 2024 by rpki-client on console-fra.rpki-client.org