$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa File: 395c0dc9-2753-334d-8d45-7b06bbeef517.roa (raw, json) Hash identifier: A9GyU1fGldVxZo4KWte/uWFwEVpzixwUaHXv9jXA6z8= Subject key identifier: B2:20:B0:32:7E:84:0D:F2:5A:7A:55:BF:87:FF:15:1B:FB:02:0B:CA Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F432858472C65DBDB42DB93288D988280 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 40948 IP address blocks: 162.247.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:db:db:42:db:93:28:8d:98:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=852e376f-95a0-43a0-8142-8a517d236116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:23:40:22:bb:59:a2:05:85:34:e0:25:ee: 82:57:79:b8:39:23:3f:cb:42:22:da:63:a7:f7:93: 6b:17:2b:cc:96:e5:f9:8d:3d:60:c8:77:57:9e:17: 9b:7c:e5:f1:90:72:01:6a:37:0a:ec:72:a0:ee:c9: a5:73:23:17:05:6b:b6:a5:da:fa:0c:60:e5:16:47: db:cc:01:e2:a2:ed:bf:10:6d:fb:76:7c:af:60:b4: 8d:88:5f:0a:b8:06:4a:98:f1:a8:b5:2b:f0:dc:7a: 06:b3:a8:1f:02:3d:a8:3a:56:e5:fd:47:50:2f:45: 6e:49:6c:0e:72:70:0c:40:b4:4c:de:38:25:79:0b: fb:d8:0c:9b:6b:ba:10:7f:89:d6:3c:c0:4f:9e:3f: 7b:d9:a8:81:79:9e:ca:e0:16:a6:16:92:23:84:cb: e8:b9:17:db:a2:d6:35:86:14:c5:6b:d0:92:be:fa: 74:06:e8:80:09:13:e2:11:b9:79:53:02:b1:0b:35: 3a:d6:b5:91:60:6b:38:4b:79:cf:57:19:9e:3b:7b: e4:24:b7:d4:4a:24:1b:64:c8:b7:2c:4a:a2:ad:61: b1:cb:3e:47:4c:75:40:f1:da:c2:d2:33:a4:bf:fb: b3:4c:fb:1a:44:c7:12:9a:19:e1:67:9e:4b:0e:f6: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:B0:32:7E:84:0D:F2:5A:7A:55:BF:87:FF:15:1B:FB:02:0B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/395c0dc9-2753-334d-8d45-7b06bbeef517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.247.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:eb:f3:87:31:8e:cb:c8:47:e1:16:44:2f:cf:98:4d:51:73: 02:62:d3:4d:32:68:7b:7c:05:8f:4a:15:69:95:0a:84:ee:f4: 21:a6:ae:0e:e8:e3:d1:81:0c:44:e2:c1:b5:7b:3c:a8:05:81: 62:94:39:89:29:90:69:27:31:c3:8f:43:7a:0b:8a:b5:fc:62: b1:33:c1:ca:4d:6d:58:50:68:10:51:26:35:9e:e6:68:23:aa: 2a:be:da:47:39:cc:45:6d:72:cd:e3:72:bf:9a:0a:3d:f5:71: 29:a9:22:3c:c4:52:7e:f4:85:d7:f5:04:3c:2e:6c:be:c3:da: d4:ad:e4:50:da:5f:5e:e9:0b:51:92:f3:a8:9c:b4:4a:8d:46: d4:d4:81:b5:99:ad:98:b8:65:be:2b:3e:c1:fb:63:e4:a9:f7: 64:5f:b3:d1:70:be:49:6d:e2:06:84:c5:b1:aa:e3:60:49:cc: a9:50:5f:b9:23:94:0f:6b:33:55:87:35:32:81:d8:7d:bb:a6: 26:97:37:31:d3:d7:94:67:c6:71:2e:45:ea:07:dc:0f:19:3e: 24:a4:22:f3:37:f9:7b:ef:5b:58:96:57:35:a5:9c:eb:94:22: 9b:6d:d0:11:71:95:98:db:46:88:84:98:0d:e7:2d:5e:fc:20: ed:60:f9:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdvbQtuTKI2YgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk ODUyZTM3NmYtOTVhMC00M2EwLTgxNDItOGE1MTdkMjM2MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2MjQCK7WaIFhTTgJe6CV3m4OSM/y0Ii2mOn 95NrFyvMluX5jT1gyHdXnhebfOXxkHIBajcK7HKg7smlcyMXBWu2pdr6DGDlFkfb zAHiou2/EG37dnyvYLSNiF8KuAZKmPGotSvw3HoGs6gfAj2oOlbl/UdQL0VuSWwO cnAMQLRM3jgleQv72Ayba7oQf4nWPMBPnj972aiBeZ7K4BamFpIjhMvouRfbotY1 hhTFa9CSvvp0BuiACRPiEbl5UwKxCzU61rWRYGs4S3nPVxmeO3vkJLfUSiQbZMi3 LEqirWGxyz5HTHVA8drC0jOkv/uzTPsaRMcSmhnhZ55LDvaIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIgsDJ+hA3yWnpVv4f/FRv7AgvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMzk1YzBkYzktMjc1My0z MzRkLThkNDUtN2IwNmJiZWVmNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoveEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvr84cxjsvIR+EWRC/PmE1RcwJi000yaHt8BY9KFWmVCoTu9CGmrg7o 49GBDETiwbV7PKgFgWKUOYkpkGknMcOPQ3oLirX8YrEzwcpNbVhQaBBRJjWe5mgj qiq+2kc5zEVtcs3jcr+aCj31cSmpIjzEUn70hdf1BDwubL7D2tSt5FDaX17pC1GS 86ictEqNRtTUgbWZrZi4Zb4rPsH7Y+Sp92Rfs9Fwvklt4gaExbGq42BJzKlQX7kj lA9rM1WHNTKB2H27piaXNzHT15RnxnEuReoH3A8ZPiSkIvM3+XvvW1iWVzWlnOuU Iptt0BFxlZjbRoiEmA3nLV78IO1g+f0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org