$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa File: 79240116-6214-30e5-83c0-513ce7a88981.roa (raw, json) Hash identifier: RvgRueVx0g96GU2u2asaiGqwY7KPAQYVnX9S6aELP4c= Subject key identifier: FA:D9:C9:F9:80:77:4F:08:25:69:38:D4:F7:9D:54:F8:60:06:E0:07 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285847E094C690592CFFBF5536CF80 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 396982 IP address blocks: 170.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:c6:90:59:2c:ff:bf:55:36:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=0eb8a893-ba2d-4edd-85fe-500dd978766a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:ff:b0:4c:0c:eb:59:d7:f4:93:56:17:0a: de:65:9f:c3:ca:6e:ad:8c:cd:5f:e0:25:29:f5:c7: 3f:97:e7:6e:d4:42:92:a5:b5:d1:6b:c7:10:3d:5c: 06:8c:26:dd:64:fd:28:f2:80:62:32:93:b9:8c:93: b5:ff:18:db:c0:b9:53:4b:0d:7b:e7:a9:68:96:62: fb:b4:dc:c8:b0:f8:5e:c8:4c:23:ea:13:3f:cd:f4: 04:bf:e3:d5:c9:03:1a:34:4c:15:71:46:a9:dc:02: 8d:3a:5b:e6:ca:a4:88:c1:5c:1d:37:74:79:28:bf: a0:0d:1a:89:9b:b3:06:28:b4:ca:9a:f3:b6:5a:64: 67:14:71:e8:fd:34:40:12:f4:2c:24:9f:b0:25:7e: 61:13:ed:5a:d0:40:4e:16:d8:35:06:c4:f7:5c:79: 52:54:2f:f4:ba:ae:28:be:8b:91:5a:f8:cc:5b:ff: 57:00:9d:52:ca:a7:bf:0a:5f:8c:1e:24:0d:05:d1: eb:35:3e:5e:ec:8f:cb:45:88:8e:6e:00:7e:07:d1: b1:05:8a:ed:3d:18:1a:c5:31:f6:83:1e:a1:3b:0d: 3e:5b:d0:0e:02:62:cb:25:06:b3:ea:c0:72:c8:21: 1a:5d:8a:e6:29:79:2a:1a:35:21:14:33:1a:b4:54: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:C9:F9:80:77:4F:08:25:69:38:D4:F7:9D:54:F8:60:06:E0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:af:23:f3:fa:37:7d:b0:0a:d4:c9:2b:61:d0:bb:4e:5e:7d: 89:fe:94:aa:36:05:2f:b1:bc:f0:b8:59:b5:f0:f4:e0:ec:ad: c4:ab:8f:77:63:15:ee:6e:02:fd:d5:80:5d:49:8b:16:49:e2: 3f:73:7b:bb:f2:80:02:c2:36:2e:ab:14:98:59:2e:42:86:be: 4c:3a:c6:99:95:ce:dc:52:52:36:5a:3a:5a:d9:50:a3:b1:a0: ef:8f:11:b6:1d:a2:e2:f4:eb:aa:77:c8:43:99:83:51:c7:31: d1:df:8a:85:4c:9e:28:dd:24:38:4f:10:c9:31:00:4d:7e:c5: a9:20:d4:ee:d6:b1:39:20:01:79:04:6e:7a:81:d2:89:7f:b5: e7:72:1b:19:84:88:06:42:e4:a5:e3:26:d3:b0:8c:45:19:7d: 46:6f:dc:2d:7d:59:23:52:9d:a9:8c:db:0c:06:8c:49:b1:66: 7c:e2:40:85:99:79:af:0e:7b:ae:95:37:cc:b0:5e:17:83:b3: d6:a3:51:9d:46:dd:0b:ea:8c:b9:49:b9:c8:7b:fb:6d:bb:de: 48:4e:35:15:a0:ad:0d:ea:0c:20:80:03:06:fc:67:53:e5:b6: 30:41:97:b9:fa:3d:a2:c0:7f:e6:85:a0:3a:6a:d3:7a:44:62: 3c:f8:48:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMaQWSz/v1U2z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MGViOGE4OTMtYmEyZC00ZWRkLTg1ZmUtNTAwZGQ5Nzg3NjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMX/sEwM61nX9JNWFwreZZ/Dym6tjM1f4CUp 9cc/l+du1EKSpbXRa8cQPVwGjCbdZP0o8oBiMpO5jJO1/xjbwLlTSw1756lolmL7 tNzIsPheyEwj6hM/zfQEv+PVyQMaNEwVcUap3AKNOlvmyqSIwVwdN3R5KL+gDRqJ m7MGKLTKmvO2WmRnFHHo/TRAEvQsJJ+wJX5hE+1a0EBOFtg1BsT3XHlSVC/0uq4o vouRWvjMW/9XAJ1Syqe/Cl+MHiQNBdHrNT5e7I/LRYiObgB+B9GxBYrtPRgaxTH2 gx6hOw0+W9AOAmLLJQaz6sByyCEaXYrmKXkqGjUhFDMatFQNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrZyfmAd08IJWk41PedVPhgBuAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNzkyNDAxMTYtNjIxNC0z MGU1LTgzYzAtNTEzY2U3YTg4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKvI/P6N32wCtTJK2HQu05efYn+lKo2BS+xvPC4WbXw9ODsrcSrj3dj Fe5uAv3VgF1JixZJ4j9ze7vygALCNi6rFJhZLkKGvkw6xpmVztxSUjZaOlrZUKOx oO+PEbYdouL066p3yEOZg1HHMdHfioVMnijdJDhPEMkxAE1+xakg1O7WsTkgAXkE bnqB0ol/tedyGxmEiAZC5KXjJtOwjEUZfUZv3C19WSNSnamM2wwGjEmxZnziQIWZ ea8Oe66VN8ywXheDs9ajUZ1G3QvqjLlJuch7+2273khONRWgrQ3qDCCAAwb8Z1Pl tjBBl7n6PaLAf+aFoDpq03pEYjz4SNI= -----END CERTIFICATE-----Generated at Sun Nov 24 22:16:07 2024 by rpki-client on console-fra.rpki-client.org