$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9608ffd1-e9a4-3721-8b67-83fb3d0f9661.roa File: 9608ffd1-e9a4-3721-8b67-83fb3d0f9661.roa (raw, json) Hash identifier: rpJuK9H3DMyWphIj5mnP+E8aVENC943eHOd4hSLUl1E= Subject key identifier: 4F:CF:C2:D2:BA:B7:27:C6:60:34:BB:55:DF:EA:B7:A1:98:F9:EA:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C1DF539C495BFA57838B8100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9608ffd1-e9a4-3721-8b67-83fb3d0f9661.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 63949 IP address blocks: 143.42.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:53:9c:49:5b:fa:57:83:8b:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=e8e871e1-ef5a-4ae5-ae21-d97824df9324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:d1:bd:63:bb:22:6d:a8:13:29:cc:e3:e5: 25:1e:75:27:18:e8:6d:6b:ab:9f:42:c8:a5:82:fc: a2:b3:00:4b:1c:84:30:37:c3:48:d9:89:39:56:d1: 89:ef:36:aa:c4:bc:9f:14:28:25:8a:eb:4e:60:89: 0e:0d:af:c1:23:80:0e:49:d4:3c:bf:d3:b1:3e:79: b6:c1:8d:77:6a:98:21:08:f0:ef:e1:2b:8d:2b:9b: 7b:6a:44:42:a5:cb:e4:0c:b4:ba:02:f2:09:1f:b9: b3:dd:9f:a4:9f:a5:d2:17:ad:84:23:23:89:dc:21: 87:6c:c8:db:97:0a:29:33:61:ae:0d:40:43:fc:5b: 41:5c:be:a4:98:a2:fa:88:a3:72:ee:a0:ce:fe:01: c6:2b:dd:15:f7:79:b9:5c:68:db:83:90:bd:bc:0c: 50:2e:b2:06:2c:e8:3d:c8:d4:ca:53:71:95:24:87: 08:b1:81:4a:7f:63:ea:8c:1a:79:f1:14:76:e4:b3: ad:6e:48:5c:79:d7:a6:ef:9a:c1:55:73:5b:81:cc: c8:73:14:2f:4d:39:34:90:34:96:5c:a1:85:ac:c0: 0b:61:13:43:d1:b6:f3:cd:6b:45:95:b9:7a:1a:d2: 81:58:0d:37:a9:4d:c5:66:fa:02:80:54:8f:ae:e9: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:C2:D2:BA:B7:27:C6:60:34:BB:55:DF:EA:B7:A1:98:F9:EA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9608ffd1-e9a4-3721-8b67-83fb3d0f9661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:76:54:5c:9b:38:9c:e7:0c:53:a7:63:b1:4b:2f:23:80:6d: 09:0c:e8:5a:1c:70:9c:5a:2e:92:d9:a0:93:b2:eb:4a:47:b3: 70:77:72:2d:5a:62:71:ad:31:5b:fb:b0:c7:21:b0:28:a5:e1: ba:d9:58:de:0a:0d:a9:40:80:62:f3:6d:ae:40:57:62:59:21: 1b:78:6a:77:e6:e1:8f:86:57:f8:58:37:5b:ca:3e:6c:8d:a8: 89:6e:30:fb:5d:72:28:83:98:e3:b7:8f:71:b5:03:5a:39:04: 4b:f5:74:e3:e7:60:88:db:d9:14:4c:ee:87:d3:5a:a8:20:eb: bd:96:d0:91:ab:a5:56:e5:19:af:58:0e:64:85:54:67:5f:86: 8d:c0:a9:e0:0e:8d:2b:b9:29:98:73:86:91:7f:17:3c:20:6f: 33:c0:2c:2f:ab:5d:60:9a:a9:ed:3e:04:01:96:66:e9:51:7d: 05:01:dd:d0:0f:45:0c:c4:ac:76:ba:63:10:84:74:4f:b5:97: 5e:a0:40:b8:f7:6d:b2:65:1f:90:3a:bd:e2:ca:dd:d8:59:95: b2:9d:96:ec:f9:3e:79:cb:3d:fc:9e:72:a8:c0:c4:1d:2d:19: dd:d6:7f:8f:3d:af:17:52:06:4a:4c:3c:86:8e:80:e2:ac:42: a3:59:63:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31OcSVv6V4OLgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk ZThlODcxZTEtZWY1YS00YWU1LWFlMjEtZDk3ODI0ZGY5MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSvRvWO7Im2oEynM4+UlHnUnGOhta6ufQsil gvyiswBLHIQwN8NI2Yk5VtGJ7zaqxLyfFCgliutOYIkODa/BI4AOSdQ8v9OxPnm2 wY13apghCPDv4SuNK5t7akRCpcvkDLS6AvIJH7mz3Z+kn6XSF62EIyOJ3CGHbMjb lwopM2GuDUBD/FtBXL6kmKL6iKNy7qDO/gHGK90V93m5XGjbg5C9vAxQLrIGLOg9 yNTKU3GVJIcIsYFKf2PqjBp58RR25LOtbkhcedem75rBVXNbgczIcxQvTTk0kDSW XKGFrMALYRND0bbzzWtFlbl6GtKBWA03qU3FZvoCgFSPrulvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/PwtK6tyfGYDS7Vd/qt6GY+eo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTYwOGZmZDEtZTlhNC0z NzIxLThiNjctODNmYjNkMGY5NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjyoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx2VFybOJznDFOnY7FLLyOAbQkM6FoccJxaLpLZoJOy60pHs3B3ci1a YnGtMVv7sMchsCil4brZWN4KDalAgGLzba5AV2JZIRt4anfm4Y+GV/hYN1vKPmyN qIluMPtdciiDmOO3j3G1A1o5BEv1dOPnYIjb2RRM7ofTWqgg672W0JGrpVblGa9Y DmSFVGdfho3AqeAOjSu5KZhzhpF/FzwgbzPALC+rXWCaqe0+BAGWZulRfQUB3dAP RQzErHa6YxCEdE+1l16gQLj3bbJlH5A6veLK3dhZlbKdluz5PnnLPfyecqjAxB0t Gd3Wf489rxdSBkpMPIaOgOKsQqNZY/M= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:44 2024 by rpki-client on console-fra.rpki-client.org