$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a6f3c974-511f-3cf7-8f2d-42d5a976932a.roa File: a6f3c974-511f-3cf7-8f2d-42d5a976932a.roa (raw, json) Hash identifier: DAlsFjR7XiBQ2wjHyQdZEiX/4P1E/SlZ8kg3/McyonE= Subject key identifier: 03:79:B6:CC:49:CF:0E:C0:A7:E0:F6:4D:28:F6:DB:5B:DE:EB:61:9B Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584693F00ED7E5F8B00F807AD720 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a6f3c974-511f-3cf7-8f2d-42d5a976932a.roa Signing time: Wed 17 Jul 2024 12:00:00 +0000 ROA not before: Wed 17 Jul 2024 12:00:00 +0000 ROA not after: Fri 21 Aug 2026 04:00:00 +0000 asID: 36692 IP address blocks: 67.215.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:93:f0:0e:d7:e5:f8:b0:0f:80:7a:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jul 17 12:00:00 2024 GMT Not After : Aug 21 04:00:00 2026 GMT Subject: CN=836f8f71-2052-43d7-82b9-d0d6671f933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:ae:05:50:4a:f6:27:e7:b7:98:6a:23:32: 49:cd:24:c2:a9:91:9a:30:e3:46:e6:6d:b4:fc:a3: 22:7d:3d:99:5d:0f:ac:52:cd:c8:89:0f:26:f6:d1: 74:21:07:7a:89:73:c3:db:6a:6c:e9:f9:f1:10:93: 2e:91:f5:dc:b3:69:36:9b:67:ec:8a:51:d3:dd:80: 95:65:04:58:04:16:d8:cf:22:c8:3d:8c:52:04:c7: b2:7c:00:93:07:42:c4:4a:f9:50:1f:e3:02:e0:93: 20:a3:b3:47:82:ca:62:d4:41:98:cb:88:1e:fa:a6: ac:18:9a:5f:79:59:d4:58:d3:ea:2b:12:36:4a:35: 3c:9f:a2:d3:81:c5:78:6e:cf:27:1f:6f:a9:ca:e0: 55:d7:02:3c:9e:fb:9c:ab:c8:46:70:ad:12:0a:64: db:3b:17:d3:89:cd:00:27:47:e9:00:cd:22:77:24: 9a:c6:b2:8a:51:5a:83:f2:b4:31:8f:dd:a7:44:20: 97:3d:4e:b3:32:6e:2b:22:81:e0:94:f0:b6:12:e9: ab:98:93:6d:2e:5c:51:41:12:65:15:c5:61:27:c3: 7b:63:1b:44:73:b7:3c:85:9a:af:0e:65:98:32:0e: 38:24:c3:e3:39:ff:a6:90:e2:5c:11:93:97:94:59: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:79:B6:CC:49:CF:0E:C0:A7:E0:F6:4D:28:F6:DB:5B:DE:EB:61:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a6f3c974-511f-3cf7-8f2d-42d5a976932a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a4:91:1b:28:c5:56:24:a8:e7:9c:c4:d0:b4:f6:dc:88:80: fc:6e:1a:2d:37:78:fd:3a:59:c3:c0:2a:aa:de:e2:cd:5e:9d: 17:a7:21:eb:8e:88:d2:41:5d:76:3d:10:9f:6d:83:56:16:bf: e8:93:6c:a7:95:e9:d4:16:11:b9:f4:f8:2d:0d:cf:12:f3:9e: fe:54:8d:34:cb:83:25:c9:61:b4:c6:d1:bc:fc:95:38:fb:67: 2d:1d:1b:a3:72:40:55:78:34:ee:45:e9:6f:52:cd:47:d6:fa: 04:b4:28:e6:7e:68:13:34:4d:1d:e1:48:85:22:15:e6:df:ed: 08:ba:f9:30:06:44:e8:cd:0a:43:cc:d4:39:d6:15:0e:3c:0a: 08:84:fc:7e:2e:af:89:25:3d:b7:4c:1a:2c:91:97:67:23:93: 32:a5:95:6c:ad:63:6b:a2:1f:a4:3c:d5:2f:70:5b:d4:51:5b: 21:e4:09:d6:d3:6a:6d:43:99:8e:04:cc:10:8f:81:4d:22:16: e4:b8:10:a0:d9:bc:d0:00:f0:e4:91:55:21:3d:e4:d7:9b:ec: 00:69:81:6b:10:ff:dc:18:65:9d:9f:45:8e:cd:21:6d:8c:bd: 6a:66:af:75:42:a1:a6:af:71:0f:84:06:54:62:58:40:11:a2: 31:9d:e5:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaT8A7X5fiwD4B61yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI0MDcxNzEyMDAwMFoXDTI2MDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk ODM2ZjhmNzEtMjA1Mi00M2Q3LTgyYjktZDBkNjY3MWY5MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfuuBVBK9ifnt5hqIzJJzSTCqZGaMONG5m20 /KMifT2ZXQ+sUs3IiQ8m9tF0IQd6iXPD22ps6fnxEJMukfXcs2k2m2fsilHT3YCV ZQRYBBbYzyLIPYxSBMeyfACTB0LESvlQH+MC4JMgo7NHgspi1EGYy4ge+qasGJpf eVnUWNPqKxI2SjU8n6LTgcV4bs8nH2+pyuBV1wI8nvucq8hGcK0SCmTbOxfTic0A J0fpAM0idySaxrKKUVqD8rQxj92nRCCXPU6zMm4rIoHglPC2EumrmJNtLlxRQRJl FcVhJ8N7YxtEc7c8hZqvDmWYMg44JMPjOf+mkOJcEZOXlFk/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN5tsxJzw7Ap+D2TSj221ve62GbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYTZmM2M5NzQtNTExZi0z Y2Y3LThmMmQtNDJkNWE5NzY5MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACykkRsoxVYkqOecxNC09tyIgPxuGi03eP06WcPAKqre4s1enRenIeuO iNJBXXY9EJ9tg1YWv+iTbKeV6dQWEbn0+C0NzxLznv5UjTTLgyXJYbTG0bz8lTj7 Zy0dG6NyQFV4NO5F6W9SzUfW+gS0KOZ+aBM0TR3hSIUiFebf7Qi6+TAGROjNCkPM 1DnWFQ48CgiE/H4ur4klPbdMGiyRl2cjkzKllWytY2uiH6Q81S9wW9RRWyHkCdbT am1DmY4EzBCPgU0iFuS4EKDZvNAA8OSRVSE95Neb7ABpgWsQ/9wYZZ2fRY7NIW2M vWpmr3VCoaavcQ+EBlRiWEARojGd5RI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org