$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: 08nWMQBPbkk962l0Lb8M/gOfgaDwWZPea1JKtUPxyYI= Subject key identifier: 7D:14:8C:8D:D7:E6:F7:D5:8E:B6:44:44:E4:0C:18:96:EF:3C:D8:C1 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285847E4C4AE3750B825F0ECAECB00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Sat 16 Nov 2024 02:00:28 +0000 ROA not before: Sat 16 Nov 2024 02:00:28 +0000 ROA not after: Fri 14 Feb 2025 02:00:28 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e4:c4:ae:37:50:b8:25:f0:ec:ae:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Nov 16 02:00:28 2024 GMT Not After : Feb 14 02:00:28 2025 GMT Subject: CN=7cb8d411-83dd-440c-91ab-4c9c8bdc10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:07:61:b0:72:c1:66:63:ee:4d:03:2c:b8:89: a5:dc:e6:52:3a:4c:0f:7b:5c:2b:57:9f:b8:44:a2: e9:9a:ae:f2:3d:1d:c7:17:90:3e:fd:75:76:68:e4: 2c:c6:a4:51:f9:06:7a:8c:1d:ae:10:cc:14:10:46: 4c:4b:c1:dd:94:26:1f:a1:90:d0:46:03:49:9f:a5: 56:b4:04:8a:63:cf:b7:1e:cc:93:be:38:67:09:d6: 24:8f:57:a9:ab:ea:8f:9a:fe:08:c0:6f:ad:ff:da: 72:e3:92:79:b3:d9:03:b0:4c:d4:4e:17:d9:a0:b2: 97:c4:f2:6d:ba:46:57:b0:e6:20:b9:c5:2d:ab:0f: 33:94:6d:fd:83:e2:55:00:8e:39:34:3a:39:d0:54: 62:42:89:53:28:2c:fc:fe:10:3d:93:ea:ea:ee:9c: 19:ce:2e:38:a7:fd:d6:75:3b:3d:bb:af:55:7a:bb: ce:40:3e:4c:bb:11:03:c7:2b:e1:0c:1e:a8:4a:99: 06:5e:73:21:fe:cb:e5:d0:d1:6a:26:5c:24:d4:60: 86:55:d9:17:97:3d:6e:af:a4:3e:fb:91:c1:4b:00: d7:65:70:66:e4:b4:f7:14:e7:51:7a:de:b2:5f:ec: fe:45:31:43:3c:93:73:ae:f1:ee:3d:06:57:47:98: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:8C:8D:D7:E6:F7:D5:8E:B6:44:44:E4:0C:18:96:EF:3C:D8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:40:3c:32:68:2c:9d:34:cc:a6:c7:89:62:bb:38:c2:d1:38: db:fb:7e:e5:6f:33:0d:25:09:11:47:5f:b7:53:08:13:38:00: c1:6d:cd:0e:6e:74:4d:82:a4:d9:cb:c9:8d:06:6e:f1:a6:13: 5c:b8:6e:fa:df:98:51:24:30:7f:5e:fa:06:d8:44:ee:c6:71: 94:16:31:16:4e:63:d8:30:69:89:b3:55:20:89:c9:1d:46:c0: a0:0a:33:da:50:42:73:97:f1:5d:8e:64:c1:d9:fb:4d:d5:7a: cd:50:f9:f1:77:d2:e1:b1:4e:f5:2c:b8:38:ca:8c:35:74:65: 70:c4:c2:58:47:47:fb:8b:32:f2:0a:d5:68:c8:4e:2b:bb:fc: 0a:c9:db:28:93:d7:11:23:3c:53:7a:b3:63:a1:90:03:80:58: be:a2:d4:cc:3b:ea:60:fe:95:ad:48:d1:ca:af:dd:19:63:24: 91:20:5a:f7:2a:71:61:57:ff:0d:c0:48:70:80:6b:b9:f5:ac: a8:c3:e9:1f:ed:72:e3:c5:7b:cf:08:dd:a0:1f:9f:93:0e:18: ae:a8:53:73:71:17:34:37:15:ec:7d:f3:7f:37:e8:2c:80:c6: 48:5d:5d:fe:42:3c:5e:e9:ad:03:cc:82:70:b3:6f:e6:06:c3: 4c:f2:8d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkxK43ULgl8OyuywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk N2NiOGQ0MTEtODNkZC00NDBjLTkxYWItNGM5YzhiZGMxMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwdhsHLBZmPuTQMsuIml3OZSOkwPe1wrV5+4 RKLpmq7yPR3HF5A+/XV2aOQsxqRR+QZ6jB2uEMwUEEZMS8HdlCYfoZDQRgNJn6VW tASKY8+3HsyTvjhnCdYkj1epq+qPmv4IwG+t/9py45J5s9kDsEzUThfZoLKXxPJt ukZXsOYgucUtqw8zlG39g+JVAI45NDo50FRiQolTKCz8/hA9k+rq7pwZzi44p/3W dTs9u69VervOQD5MuxEDxyvhDB6oSpkGXnMh/svl0NFqJlwk1GCGVdkXlz1ur6Q+ +5HBSwDXZXBm5LT3FOdRet6yX+z+RTFDPJNzrvHuPQZXR5iSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0UjI3X5vfVjrZEROQMGJbvPNjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdAPDJoLJ00zKbHiWK7OMLRONv7fuVvMw0lCRFHX7dTCBM4AMFtzQ5u dE2CpNnLyY0GbvGmE1y4bvrfmFEkMH9e+gbYRO7GcZQWMRZOY9gwaYmzVSCJyR1G wKAKM9pQQnOX8V2OZMHZ+03Ves1Q+fF30uGxTvUsuDjKjDV0ZXDEwlhHR/uLMvIK 1WjITiu7/ArJ2yiT1xEjPFN6s2OhkAOAWL6i1Mw76mD+la1I0cqv3RljJJEgWvcq cWFX/w3ASHCAa7n1rKjD6R/tcuPFe88I3aAfn5MOGK6oU3NxFzQ3Fex983836CyA xkhdXf5CPF7prQPMgnCzb+YGw0zyjWk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org