$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa File: c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa (raw, json) Hash identifier: NwyOVXLkHmd2H10vJXAgP1ofXkdNWJktmrlHG3uUyHc= Subject key identifier: 44:0D:CA:AA:FA:37:A4:D4:0F:9F:9E:84:49:63:B6:AA:F8:07:54:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847BC2C23242D510E6A05AE9000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 63949 IP address blocks: 139.144.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:23:24:2d:51:0e:6a:05:ae:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=4db36815-6598-404f-bf11-ef9f56431644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:a2:9d:93:ce:fd:9e:bd:12:2f:9e:32:59: d0:f8:cd:21:22:43:94:24:27:2d:dd:9e:08:9d:37: 12:96:b0:5f:9b:12:0d:c6:16:eb:54:78:7a:db:4d: b8:d2:97:2e:8d:7a:00:13:02:67:49:38:56:6a:79: 93:e6:71:75:0c:1e:66:a1:81:65:fb:a4:5f:48:a2: 89:fb:79:9b:ad:a5:6d:4e:92:4c:a0:35:6a:5d:5a: c5:03:85:a6:1a:32:95:48:86:9d:af:46:16:36:a8: ab:70:a9:51:ad:47:0d:dc:58:03:9d:c0:e1:2f:45: b8:ec:c6:d6:c8:ce:7d:13:02:b6:95:b1:c6:8a:ab: 48:e5:9e:14:6f:30:d6:5e:29:5c:0a:25:c0:27:21: 09:6f:35:88:a9:69:8e:45:11:2e:5d:c4:48:74:ce: 56:43:9c:24:80:8a:0b:9a:47:a0:de:36:12:94:6d: ce:b6:82:ba:8b:78:e1:ec:8f:02:51:a5:0c:a3:e6: 87:c1:73:c6:4f:70:53:63:13:7f:47:b5:03:2b:1e: d1:61:0f:4c:f5:41:33:e0:5b:27:ea:61:0a:0b:54: 38:c0:8c:dc:b5:ed:d5:43:16:c9:84:55:b9:ab:17: 67:f7:5a:82:0d:2c:ed:50:7c:94:12:9d:fe:e2:10: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:CA:AA:FA:37:A4:D4:0F:9F:9E:84:49:63:B6:AA:F8:07:54:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4447899-c0d0-3bdf-a6ef-26d1c8de64e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5d:b3:e8:53:9c:3d:39:c9:e3:85:0e:1e:3a:58:d2:33:32: 2b:08:04:09:6d:6b:82:bd:bb:42:b5:83:1d:79:b1:b7:11:ad: 74:5c:62:ed:4b:3b:92:99:4e:0d:68:88:eb:fd:b0:7c:f2:33: a4:cf:14:ce:28:1d:d4:18:0d:b3:2f:9a:37:72:30:72:a9:91: f1:f0:40:53:c1:45:10:3c:05:12:86:02:20:78:4e:3c:4d:f5: 67:29:9d:2a:82:65:be:6f:bd:12:47:14:65:af:c3:03:75:a8: d1:5b:e7:74:d3:99:8a:f3:b2:46:1c:43:a9:75:f7:93:85:87: 0e:22:f5:ad:a8:21:b6:db:63:4c:7b:cf:ff:3d:93:0c:a4:17: a1:62:21:6f:9e:9f:03:cc:2a:ba:e1:4a:5f:e2:36:56:65:09: e5:a5:3f:ba:98:ad:08:44:7a:cf:e4:6c:e6:06:50:9a:b4:63: 83:c0:b0:3c:a4:30:29:86:da:94:09:cc:b2:f4:18:54:30:47: d3:80:be:d9:98:36:bf:ad:70:da:b8:8d:88:a5:39:ff:f5:43: 5a:ff:0a:be:ea:d6:27:e5:92:b2:0c:1b:a0:b5:c6:df:c7:c4: 43:eb:10:34:55:ca:b8:84:60:a9:8e:93:37:b1:13:02:5a:22: 23:8d:0b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LCMkLVEOagWukAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk NGRiMzY4MTUtNjU5OC00MDRmLWJmMTEtZWY5ZjU2NDMxNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKinZPO/Z69Ei+eMlnQ+M0hIkOUJCct3Z4I nTcSlrBfmxINxhbrVHh620240pcujXoAEwJnSThWanmT5nF1DB5moYFl+6RfSKKJ +3mbraVtTpJMoDVqXVrFA4WmGjKVSIadr0YWNqircKlRrUcN3FgDncDhL0W47MbW yM59EwK2lbHGiqtI5Z4UbzDWXilcCiXAJyEJbzWIqWmORREuXcRIdM5WQ5wkgIoL mkeg3jYSlG3OtoK6i3jh7I8CUaUMo+aHwXPGT3BTYxN/R7UDKx7RYQ9M9UEz4Fsn 6mEKC1Q4wIzcte3VQxbJhFW5qxdn91qCDSztUHyUEp3+4hAPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQNyqr6N6TUD5+ehEljtqr4B1SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ0NDc4OTktYzBkMC0z YmRmLWE2ZWYtMjZkMWM4ZGU2NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApds+hTnD05yeOFDh46WNIzMisIBAlta4K9u0K1gx15sbcRrXRcYu1L O5KZTg1oiOv9sHzyM6TPFM4oHdQYDbMvmjdyMHKpkfHwQFPBRRA8BRKGAiB4TjxN 9WcpnSqCZb5vvRJHFGWvwwN1qNFb53TTmYrzskYcQ6l195OFhw4i9a2oIbbbY0x7 z/89kwykF6FiIW+enwPMKrrhSl/iNlZlCeWlP7qYrQhEes/kbOYGUJq0Y4PAsDyk MCmG2pQJzLL0GFQwR9OAvtmYNr+tcNq4jYilOf/1Q1r/Cr7q1iflkrIMG6C1xt/H xEPrEDRVyriEYKmOkzexEwJaIiONC5w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:10 2024 by rpki-client on console-ams.rpki-client.org