$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa File: aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa (raw, json) Hash identifier: DazduxwAMxtI9me9tx/C1uGGo0LL/kMyiQfjjP1G30M= Subject key identifier: 52:13:60:53:9D:50:01:F4:25:2E:3E:FD:1F:58:C8:37:AD:D5:06:C9 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F43285847B10166AE678561C9AA7D5600 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 46475 IP address blocks: 185.167.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:66:ae:67:85:61:c9:aa:7d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=673754aa-c3d2-4afa-bf78-391f32b16532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:64:51:1c:2f:7d:64:75:b7:49:e9:92:4b: 82:f5:af:2f:da:e3:97:fb:ef:e4:4b:28:49:23:53: 4a:05:09:9f:a6:2c:f1:d8:b4:76:1e:91:b2:f5:7c: 55:df:5f:f7:b6:3b:17:20:be:b4:9a:f4:f2:88:a5: 1c:9c:07:3f:90:6b:9e:76:94:d2:68:91:12:c7:b7: 83:b7:1f:50:f8:59:a6:ab:91:90:2f:8c:84:dc:c0: c8:30:cd:af:e2:b6:98:4f:50:fa:48:d5:32:89:3b: 6f:0e:4a:de:49:80:ab:30:8a:f2:d2:15:f0:2d:77: af:2b:6b:1a:11:57:a5:eb:5e:0e:6a:8e:67:3d:e9: 4c:aa:c7:be:e2:c5:78:7d:ce:66:4e:8c:cf:55:9e: ef:8e:8d:11:91:49:44:a5:dc:d8:10:62:f5:1c:0d: f5:14:9d:63:b8:d6:83:c4:f1:3e:0e:3d:56:c4:c6: be:4b:d6:ea:a5:5b:66:bc:c8:d3:3d:90:62:30:5d: 36:f9:ff:14:7f:04:e4:e3:c5:fa:2d:87:c1:9a:de: 84:4b:6e:f6:18:e9:7a:e3:ae:85:32:9c:9c:5b:9c: 89:74:ed:1f:2c:4a:d8:74:cd:95:cf:81:ff:08:b5: be:59:ae:67:ce:bb:4d:a6:ed:2c:21:7d:86:20:d6: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:60:53:9D:50:01:F4:25:2E:3E:FD:1F:58:C8:37:AD:D5:06:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 185.167.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ff:61:6f:82:66:f9:69:b0:d5:60:38:31:c5:44:26:14:07: e6:96:1c:9e:5b:31:86:15:a6:c0:66:38:48:8a:1d:ba:f1:ec: 07:45:32:4d:65:66:ae:6b:73:67:4e:aa:f6:5a:b8:49:46:a3: ba:c7:71:2f:6a:40:5f:71:c0:82:c9:ac:54:dd:6b:0b:7f:85: 1a:e5:06:40:d2:bd:07:f9:75:99:07:21:78:00:d0:46:a2:cf: ed:e1:13:4e:0b:3d:a3:02:38:e2:2e:9d:b2:cd:48:8d:4b:ba: 71:7d:95:38:b2:a2:49:8d:ea:e7:d3:65:07:fd:5a:7c:0b:f5: 96:15:04:ba:e6:67:f5:03:1a:9f:09:39:92:b2:a4:05:d8:a3: 60:40:60:da:79:b9:36:cc:f4:07:57:34:e6:8e:ee:e3:c4:33: ae:a5:db:a3:ce:e5:bc:2d:d4:9d:e8:30:4b:19:a4:cc:8a:e2: f1:59:db:4c:4c:e6:b4:8e:6c:3d:99:b3:47:e8:9a:16:72:33: 99:8f:eb:b8:40:07:6f:7a:3c:65:49:0b:81:59:1c:48:98:fc: e1:b8:2c:51:8a:01:51:3f:22:5a:a1:57:de:f9:eb:07:8a:bc: ee:bc:87:c2:99:ee:ea:73:a8:ff:a2:09:a3:ef:bd:d2:dd:9f: 0d:17:55:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWauZ4Vhyap9VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NjczNzU0YWEtYzNkMi00YWZhLWJmNzgtMzkxZjMyYjE2NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R1kURwvfWR1t0npkkuC9a8v2uOX++/kSyhJ I1NKBQmfpizx2LR2HpGy9XxV31/3tjsXIL60mvTyiKUcnAc/kGuedpTSaJESx7eD tx9Q+Fmmq5GQL4yE3MDIMM2v4raYT1D6SNUyiTtvDkreSYCrMIry0hXwLXevK2sa EVel614Oao5nPelMqse+4sV4fc5mTozPVZ7vjo0RkUlEpdzYEGL1HA31FJ1juNaD xPE+Dj1WxMa+S9bqpVtmvMjTPZBiMF02+f8UfwTk48X6LYfBmt6ES272GOl6466F MpycW5yJdO0fLErYdM2Vz4H/CLW+Wa5nzrtNpu0sIX2GINb3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFITYFOdUAH0JS4+/R9YyDet1QbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvYWE1ZWMxOWMtZjI5My0z OTlhLTk2MWUtZjFmZTRmNmJjYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuac8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz/YW+CZvlpsNVgODHFRCYUB+aWHJ5bMYYVpsBmOEiKHbrx7AdFMk1l Zq5rc2dOqvZauElGo7rHcS9qQF9xwILJrFTdawt/hRrlBkDSvQf5dZkHIXgA0Eai z+3hE04LPaMCOOIunbLNSI1LunF9lTiyokmN6ufTZQf9WnwL9ZYVBLrmZ/UDGp8J OZKypAXYo2BAYNp5uTbM9AdXNOaO7uPEM66l26PO5bwt1J3oMEsZpMyK4vFZ20xM 5rSObD2Zs0fomhZyM5mP67hAB296PGVJC4FZHEiY/OG4LFGKAVE/IlqhV9756weK vO68h8KZ7upzqP+iCaPvvdLdnw0XVec= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org