$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa File: 3e87e11c-8c61-3665-888b-beee4180b6af.roa (raw, json) Hash identifier: jTBp9mD1TGxNIzr6qk70d0iPJGcMjq0xIvD9TpPysUc= Subject key identifier: 62:7B:9D:E0:45:CC:EC:2E:5D:DC:00:A8:7D:71:8A:91:71:1A:15:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847BEF6CF6F623D5DC1162071C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 63949 IP address blocks: 139.144.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:cf:6f:62:3d:5d:c1:16:20:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=00f7b612-5792-42c2-93e6-48a8f7d70846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:3f:82:95:64:5c:22:29:5d:f6:56:a7:3c: 4a:2b:1b:aa:e3:31:3a:63:20:7e:4a:2f:79:1a:e6: 17:f3:ab:e3:35:67:06:53:bb:4b:d3:9f:ad:1d:75: 49:d3:2a:28:af:e3:c0:86:cd:95:14:ce:1a:63:0b: 8a:c9:3c:34:cc:b8:1d:44:0b:73:90:4a:76:4b:c2: 3f:c0:35:f0:c3:1a:67:ec:c2:51:75:a3:cd:f1:d1: 1f:c4:5f:9b:5f:1f:82:9d:9f:da:5a:b2:0b:c8:ff: 0d:b5:7f:ba:8c:c4:ff:e8:04:e6:d3:68:cd:2d:f3: b9:72:9f:fd:82:e0:de:ec:c0:de:bd:c9:64:b1:fd: b7:37:59:18:b3:79:86:0c:a4:0b:8a:d9:dc:cb:da: f3:3f:47:a6:a4:fb:40:1b:d2:6a:d1:88:1f:33:c1: 23:ec:ec:7b:2d:57:11:73:a9:f2:d2:81:8e:46:43: a8:59:2b:6e:7e:f1:3c:51:0e:01:de:06:ea:96:81: b2:71:d6:c7:0d:03:ee:3b:2b:77:40:4d:a1:9c:68: 95:a7:6e:2b:16:59:62:e4:c0:aa:f3:98:cf:b2:77: 5b:17:76:2c:05:16:e2:3d:e6:2e:5b:85:38:1d:f5: 70:ee:4d:fe:a4:d4:6a:88:54:b7:ba:f7:52:dc:0c: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:9D:E0:45:CC:EC:2E:5D:DC:00:A8:7D:71:8A:91:71:1A:15:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e87e11c-8c61-3665-888b-beee4180b6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:29:e9:9b:b4:23:b6:d5:e6:ee:ab:c6:c1:85:84:63:a6:63: a6:e4:06:7e:7c:0d:a9:d5:22:11:f7:05:81:c1:bf:a9:4e:b5: 86:05:59:dc:ec:da:5f:31:fc:a3:bb:13:b8:d9:3b:f7:65:28: 24:e2:fc:65:ca:67:ef:ab:f9:55:17:be:94:08:e3:5e:aa:90: 46:fa:cb:85:84:a7:55:40:f6:f3:44:e5:14:8b:19:4a:ad:da: 25:d7:0a:25:de:5a:02:13:a8:e6:30:0f:98:0d:ad:af:32:00: e6:a0:ed:84:e1:4b:b2:9c:8a:a6:40:bf:b2:20:db:83:23:87: b9:b1:ff:18:65:f1:ba:22:34:d9:d1:81:ca:8e:45:a6:1b:58: 5b:16:e9:b7:d0:c3:fc:3f:d8:d0:ba:44:53:a2:64:ae:5e:8a: d4:85:e1:7c:b1:59:99:f1:cf:21:0c:78:2e:2a:89:7d:cf:d7: 78:f1:5b:43:31:5c:06:31:57:8a:6f:51:db:be:a1:7b:75:f5: eb:df:5e:29:31:d0:d0:a6:ca:cd:06:13:36:03:b2:59:f6:51: 50:d5:05:e1:72:f0:83:34:29:e6:b7:bc:ba:f9:12:5d:84:7c: 3a:10:29:b9:53:47:97:28:41:30:58:65:74:5d:2c:f6:79:34: 03:5f:77:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9s9vYj1dwRYgccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MDBmN2I2MTItNTc5Mi00MmMyLTkzZTYtNDhhOGY3ZDcwODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl0/gpVkXCIpXfZWpzxKKxuq4zE6YyB+Si95 GuYX86vjNWcGU7tL05+tHXVJ0yoor+PAhs2VFM4aYwuKyTw0zLgdRAtzkEp2S8I/ wDXwwxpn7MJRdaPN8dEfxF+bXx+CnZ/aWrILyP8NtX+6jMT/6ATm02jNLfO5cp/9 guDe7MDevclksf23N1kYs3mGDKQLitncy9rzP0empPtAG9Jq0YgfM8Ej7Ox7LVcR c6ny0oGORkOoWStufvE8UQ4B3gbqloGycdbHDQPuOyt3QE2hnGiVp24rFlli5MCq 85jPsndbF3YsBRbiPeYuW4U4HfVw7k3+pNRqiFS3uvdS3AwZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ7neBFzOwuXdwAqH1xipFxGhVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U4N2UxMWMtOGM2MS0z NjY1LTg4OGItYmVlZTQxODBiNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQp6Zu0I7bV5u6rxsGFhGOmY6bkBn58DanVIhH3BYHBv6lOtYYFWdzs 2l8x/KO7E7jZO/dlKCTi/GXKZ++r+VUXvpQI416qkEb6y4WEp1VA9vNE5RSLGUqt 2iXXCiXeWgITqOYwD5gNra8yAOag7YThS7KciqZAv7Ig24Mjh7mx/xhl8boiNNnR gcqORaYbWFsW6bfQw/w/2NC6RFOiZK5eitSF4XyxWZnxzyEMeC4qiX3P13jxW0Mx XAYxV4pvUdu+oXt19evfXikx0NCmys0GEzYDsln2UVDVBeFy8IM0Kea3vLr5El2E fDoQKblTR5coQTBYZXRdLPZ5NANfdyA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:33 2024 by rpki-client on console-fra.rpki-client.org