$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa File: e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa (raw, json) Hash identifier: mzYen9cPDbz9JufnG6A0jny1Ip3+Qblf3D+hPKWm+TE= Subject key identifier: CE:B5:97:1B:B7:D0:B4:9D:10:B8:7B:75:58:BC:17:D5:21:D3:5F:2D Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285847299B24D418635C823D10F1C0 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 22742 IP address blocks: 162.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:24:d4:18:63:5c:82:3d:10:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=fcf01a50-2efe-4839-88cd-dfa4e8ecadff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:ee:11:6e:4f:cc:f6:75:3c:d5:72:73:32: 93:cd:bc:04:9c:82:05:1f:fd:d3:73:d1:30:35:c0: 92:59:f3:0f:51:36:9c:ca:4d:70:aa:aa:43:ae:f4: ff:aa:96:7e:7a:56:3c:ca:5e:cd:c6:a8:1f:0b:e7: 12:92:e7:43:7e:db:c0:05:54:b2:f2:ef:37:88:13: 7d:99:87:d4:ab:57:4f:c6:ac:10:53:61:9c:bf:67: 36:7a:5e:63:7d:51:fb:ab:ba:98:82:4b:6c:f4:5a: dd:fb:95:17:17:a5:b6:f4:e7:4f:ec:7d:0a:b2:8b: 16:14:2b:41:28:9d:65:04:eb:6b:ed:40:2e:b0:8c: c1:14:e3:4f:89:78:42:7e:aa:70:93:de:1b:19:1b: e7:d6:d1:81:5c:5c:02:7b:0e:8b:d9:e6:0f:b9:4c: ed:64:74:00:45:b8:7c:5e:ad:78:0e:c0:dd:c5:c9: 7d:5d:8d:04:8e:b8:16:e1:31:c9:1c:1f:a9:ab:c1: 78:cb:8c:04:bd:72:02:ae:22:1b:a5:52:33:09:47: 6e:c9:71:b6:3a:79:4c:ce:f2:1b:31:5a:f8:ba:c3: 45:a3:25:a3:80:dc:29:c6:82:c7:6b:85:81:ba:29: f0:1f:be:73:b1:43:c3:26:a8:16:4a:e0:3d:25:c4: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B5:97:1B:B7:D0:B4:9D:10:B8:7B:75:58:BC:17:D5:21:D3:5F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4e:91:d0:08:44:1c:63:c3:73:fc:c2:46:59:2a:de:97:01: ee:ac:c6:2a:06:7e:73:35:f3:43:97:34:d7:98:67:cb:93:8b: 3c:34:f7:68:41:c9:e7:91:d3:1c:31:95:85:e4:43:80:12:2a: d1:db:f7:78:26:ba:49:89:9a:3d:37:7b:bb:ed:4c:e2:a8:0d: cc:69:ae:15:97:71:05:27:59:ab:4f:96:57:4e:ce:e1:5e:00: 19:1e:46:30:5d:74:95:33:e8:c3:87:3d:ae:66:95:09:30:c6: bf:f3:0f:db:d3:6d:ad:c8:ff:7e:bd:75:08:e6:b5:bc:83:7a: 78:21:44:17:c2:f6:45:fa:f6:3d:e9:78:10:1f:3b:51:7f:e5: 1f:22:e2:be:a5:97:12:5d:64:61:1d:9f:e1:92:28:19:76:22: d1:4a:aa:28:c1:25:1b:6f:43:8b:d7:8b:14:81:98:15:05:30: d8:24:1d:ad:0e:8b:cc:37:c8:ff:db:01:2d:da:a2:1c:93:4e: 77:ff:7a:0c:ee:8c:3e:28:d2:88:7d:df:22:95:e5:fa:7b:91: eb:0d:8b:08:ca:1a:ec:c7:45:3c:41:1f:67:fa:dd:fa:e9:de: 52:d2:74:a8:1d:0c:1b:47:5c:a0:79:2b:c2:48:30:2a:79:8b: f3:4f:4d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyTUGGNcgj0Q8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmNmMDFhNTAtMmVmZS00ODM5LTg4Y2QtZGZhNGU4ZWNhZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0zuEW5PzPZ1PNVyczKTzbwEnIIFH/3Tc9Ew NcCSWfMPUTacyk1wqqpDrvT/qpZ+elY8yl7NxqgfC+cSkudDftvABVSy8u83iBN9 mYfUq1dPxqwQU2Gcv2c2el5jfVH7q7qYgkts9Frd+5UXF6W29OdP7H0KsosWFCtB KJ1lBOtr7UAusIzBFONPiXhCfqpwk94bGRvn1tGBXFwCew6L2eYPuUztZHQARbh8 Xq14DsDdxcl9XY0EjrgW4THJHB+pq8F4y4wEvXICriIbpVIzCUduyXG2OnlMzvIb MVr4usNFoyWjgNwpxoLHa4WBuinwH75zsUPDJqgWSuA9JcSQmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM61lxu30LSdELh7dVi8F9Uh018tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZTIyMGFlZDktN2U4OS0z Y2ViLWJkYzQtYjA3OGQ5NWE3ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5OkdAIRBxjw3P8wkZZKt6XAe6sxioGfnM180OXNNeYZ8uTizw092hB yeeR0xwxlYXkQ4ASKtHb93gmukmJmj03e7vtTOKoDcxprhWXcQUnWatPlldOzuFe ABkeRjBddJUz6MOHPa5mlQkwxr/zD9vTba3I/369dQjmtbyDenghRBfC9kX69j3p eBAfO1F/5R8i4r6llxJdZGEdn+GSKBl2ItFKqijBJRtvQ4vXixSBmBUFMNgkHa0O i8w3yP/bAS3aohyTTnf/egzujD4o0oh93yKV5fp7kesNiwjKGuzHRTxBH2f63frp 3lLSdKgdDBtHXKB5K8JIMCp5i/NPTag= -----END CERTIFICATE-----Generated at Sun Nov 24 22:13:01 2024 by rpki-client on console-fra.rpki-client.org