$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64018ea3-d1d8-3860-b425-5ced71bc7769.roa File: 64018ea3-d1d8-3860-b425-5ced71bc7769.roa (raw, json) Hash identifier: MvUggZXGpkkJSyoLJ8eo1TNWYRi5+kzxRB+e1nmzorc= Subject key identifier: 4B:DC:AB:CE:25:70:74:D6:82:74:D5:73:FC:09:25:60:D4:9F:C8:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847BC2C206E3F418B53BEE04568 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64018ea3-d1d8-3860-b425-5ced71bc7769.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 63949 IP address blocks: 139.144.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:20:6e:3f:41:8b:53:be:e0:45:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=dc385f46-2905-432c-a0c4-7f16796991c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:8e:db:73:4c:f3:50:5e:34:25:84:1c:d3: 15:e3:82:0b:e4:80:0c:14:7d:cd:05:35:a8:6f:25: 37:0d:f3:b3:e6:ac:0c:62:cc:e5:b0:ee:78:28:46: c5:0c:e4:82:17:da:da:36:f2:ad:f5:64:e6:07:6d: b8:c8:77:64:a7:83:2f:fb:21:1e:67:53:50:ea:4a: 5f:60:7e:7b:df:b4:b7:cf:15:8a:b8:ad:58:48:ea: 79:31:34:ee:35:c6:a0:44:63:10:f7:82:51:16:38: 8e:64:9d:55:5d:da:b0:8e:fb:8f:70:fd:2a:60:83: 6e:5a:28:02:b7:bf:75:3b:70:5a:6e:4a:42:82:94: 6c:0c:42:51:b0:92:9a:0d:9c:0f:23:97:3c:37:2b: 0b:c9:c9:df:b3:54:27:bd:63:1c:12:2f:d3:98:ea: 48:9d:7f:bc:20:8e:b3:a4:b6:0d:76:79:78:be:0b: 05:79:cf:0c:74:2c:38:39:6b:3d:d2:0b:d7:52:af: f0:4a:ff:60:0a:9c:b2:c4:18:50:77:78:a1:6c:61: ec:ef:fb:64:65:91:76:63:40:ed:9b:5b:f8:23:db: 31:ee:0f:22:c1:e7:28:a1:89:82:b5:b4:19:fa:11: ff:88:51:60:14:f2:06:c6:aa:6f:3f:67:59:81:7a: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:AB:CE:25:70:74:D6:82:74:D5:73:FC:09:25:60:D4:9F:C8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64018ea3-d1d8-3860-b425-5ced71bc7769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:51:81:3f:87:6c:ae:f4:40:aa:f3:4b:82:40:16:dc:4c:99: 9b:9e:82:4c:51:87:f5:6d:d1:42:6e:05:42:3a:65:10:9e:a1: aa:54:72:ba:59:48:59:a9:4a:53:21:6c:c9:48:53:f8:b7:18: 8d:44:95:db:c7:07:96:5a:0f:db:c1:c6:45:10:e7:36:a6:61: 20:5e:03:97:b9:7b:dc:c7:5e:3f:32:66:a3:39:47:17:0a:7b: 15:fe:34:52:62:69:65:d5:f0:a2:79:95:81:8d:77:f0:d9:5e: 83:f5:03:67:f2:ee:cf:87:82:35:fe:06:5f:b7:85:44:72:da: 09:e5:d8:c3:a0:bb:08:8b:09:a3:c2:70:5b:06:09:dd:92:65: cf:83:0d:01:f4:cb:10:3c:76:29:7a:c3:9d:c6:02:fb:58:ae: 70:31:a0:11:c6:c1:8e:f2:4a:7e:56:f2:c8:ea:4c:bd:e1:cd: 11:1e:24:99:ae:44:7b:93:37:73:e0:6b:df:f4:02:9e:ce:73: 79:2e:9c:4c:4c:30:c7:19:3e:34:74:b4:30:e0:3a:5a:49:ea: d8:34:9b:47:e7:b8:80:62:15:45:a1:05:c8:c2:11:c5:99:2c: c0:6c:83:52:ec:00:a0:f3:4c:ff:e1:af:cf:bf:b3:46:32:2c: 93:c1:8a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LCBuP0GLU77gRWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGMzODVmNDYtMjkwNS00MzJjLWEwYzQtN2YxNjc5Njk5MWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGGO23NM81BeNCWEHNMV44IL5IAMFH3NBTWo byU3DfOz5qwMYszlsO54KEbFDOSCF9raNvKt9WTmB224yHdkp4Mv+yEeZ1NQ6kpf YH5737S3zxWKuK1YSOp5MTTuNcagRGMQ94JRFjiOZJ1VXdqwjvuPcP0qYINuWigC t791O3BabkpCgpRsDEJRsJKaDZwPI5c8NysLycnfs1QnvWMcEi/TmOpInX+8II6z pLYNdnl4vgsFec8MdCw4OWs90gvXUq/wSv9gCpyyxBhQd3ihbGHs7/tkZZF2Y0Dt m1v4I9sx7g8iwecooYmCtbQZ+hH/iFFgFPIGxqpvP2dZgXr8WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvcq84lcHTWgnTVc/wJJWDUn8gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQwMThlYTMtZDFkOC0z ODYwLWI0MjUtNWNlZDcxYmM3NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5RgT+HbK70QKrzS4JAFtxMmZuegkxRh/Vt0UJuBUI6ZRCeoapUcrpZ SFmpSlMhbMlIU/i3GI1EldvHB5ZaD9vBxkUQ5zamYSBeA5e5e9zHXj8yZqM5RxcK exX+NFJiaWXV8KJ5lYGNd/DZXoP1A2fy7s+HgjX+Bl+3hURy2gnl2MOguwiLCaPC cFsGCd2SZc+DDQH0yxA8dil6w53GAvtYrnAxoBHGwY7ySn5W8sjqTL3hzREeJJmu RHuTN3Pga9/0Ap7Oc3kunExMMMcZPjR0tDDgOlpJ6tg0m0fnuIBiFUWhBcjCEcWZ LMBsg1LsAKDzTP/hr8+/s0YyLJPBiv8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:28 2024 by rpki-client on console-fra.rpki-client.org