$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa File: 3b38bc24-8d49-3254-ad4f-25f11914f514.roa (raw, json) Hash identifier: BfNGWZ1nzO5hozDpjOvSOJ/jDt0kYpjgn6EYngBESIA= Subject key identifier: 4E:7E:E7:E8:C9:49:A8:C6:08:BD:0E:3D:1A:8F:5A:03:6F:35:BF:8B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858476C9DBE50AFDD2C8B10E02100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 30238 IP address blocks: 216.71.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:be:50:af:dd:2c:8b:10:e0:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=de6aff61-9c31-48e3-b9bb-86f732c0ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:44:cf:9b:53:14:bd:9a:74:23:fc:f4:5a: 24:32:0c:01:8e:de:9a:00:97:34:8f:00:26:ce:85: e7:12:4f:01:4e:df:7e:7b:d0:38:73:cc:4e:5b:9e: 56:31:fb:4c:b8:55:d3:c2:6a:12:48:95:36:36:d0: 24:e2:a7:ba:ab:2e:2b:b6:2a:4f:4e:c1:14:64:89: cc:15:15:12:80:77:37:ea:52:1d:fc:89:e1:d2:77: 97:d1:76:67:6f:e2:29:14:be:9e:13:29:46:c2:63: 3f:35:a3:38:ea:86:29:18:3c:69:dd:9a:00:20:76: 78:ae:87:9f:30:10:d9:18:70:bd:73:83:ed:26:32: 3d:71:84:8b:d0:07:b4:e1:cb:95:92:61:0b:b4:d5: 38:96:bf:c9:cf:16:b6:9f:36:52:50:1b:16:1b:67: 42:90:24:9d:91:57:0d:b6:f4:f4:5c:25:cf:80:51: 4b:b2:2f:48:55:b5:fe:70:0c:c3:33:db:7b:95:79: e4:54:25:09:9a:61:9b:9a:65:66:d0:c6:76:6e:ad: c3:f1:81:e0:da:ae:8d:28:63:c6:ec:15:25:f4:fe: c9:ba:28:94:3c:8a:cf:c8:6a:34:ce:18:f9:6c:32: d9:b0:a8:c6:02:8c:b9:c7:2e:27:ee:52:29:cd:34: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7E:E7:E8:C9:49:A8:C6:08:BD:0E:3D:1A:8F:5A:03:6F:35:BF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:18:6b:46:fa:e0:fb:eb:91:2b:b4:a5:c3:2a:3c:60:54:95: fa:53:75:0a:69:56:1a:72:1e:b3:8e:41:a4:b5:8c:a0:bc:d5: 85:f9:f7:d4:82:f0:78:28:0b:cc:70:d1:e1:3b:b4:4d:62:63: 0e:2a:21:d1:26:43:37:1a:69:71:ef:06:3e:01:b0:ac:55:3e: 05:18:fa:ae:e2:da:de:3d:c1:81:25:df:45:5d:ea:4c:35:de: 8c:9b:89:ed:9f:ed:43:e1:de:ba:38:6f:69:7a:17:61:ca:7f: 45:65:df:80:73:e9:dd:f5:0c:58:d2:c4:df:f6:5e:7a:03:2d: c9:5a:9a:70:93:07:17:1b:43:1f:c7:5b:a3:90:8a:8c:1f:60: 29:1f:c4:b1:e6:5c:ed:41:ee:e5:ea:1c:3b:34:1c:4d:3f:97: 9e:8b:c2:3b:a3:39:71:97:69:16:a1:b6:40:9a:6a:23:33:b0: 2d:56:9f:90:2f:e6:6d:09:7e:29:53:9b:b4:07:81:2e:6c:45: 0f:64:3f:ea:a2:ba:d3:c6:2d:77:38:e9:a2:be:f1:5e:9d:59: 09:66:12:25:4d:1e:28:f4:36:86:d3:89:23:03:4b:af:50:81: 7a:76:fc:29:8c:be:9a:ea:0f:24:38:22:ba:8e:fb:2a:e5:41: d6:93:1c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnb5Qr90sixDgIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZGU2YWZmNjEtOWMzMS00OGUzLWI5YmItODZmNzMyYzBjZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn5Ez5tTFL2adCP89FokMgwBjt6aAJc0jwAm zoXnEk8BTt9+e9A4c8xOW55WMftMuFXTwmoSSJU2NtAk4qe6qy4rtipPTsEUZInM FRUSgHc36lId/Inh0neX0XZnb+IpFL6eEylGwmM/NaM46oYpGDxp3ZoAIHZ4roef MBDZGHC9c4PtJjI9cYSL0Ae04cuVkmELtNU4lr/Jzxa2nzZSUBsWG2dCkCSdkVcN tvT0XCXPgFFLsi9IVbX+cAzDM9t7lXnkVCUJmmGbmmVm0MZ2bq3D8YHg2q6NKGPG 7BUl9P7JuiiUPIrPyGo0zhj5bDLZsKjGAoy5xy4n7lIpzTQfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5+5+jJSajGCL0OPRqPWgNvNb+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2IzOGJjMjQtOGQ0OS0z MjU0LWFkNGYtMjVmMTE5MTRmNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAYa0b64PvrkSu0pcMqPGBUlfpTdQppVhpyHrOOQaS1jKC81YX599SC 8HgoC8xw0eE7tE1iYw4qIdEmQzcaaXHvBj4BsKxVPgUY+q7i2t49wYEl30Vd6kw1 3oybie2f7UPh3ro4b2l6F2HKf0Vl34Bz6d31DFjSxN/2XnoDLclamnCTBxcbQx/H W6OQiowfYCkfxLHmXO1B7uXqHDs0HE0/l56LwjujOXGXaRahtkCaaiMzsC1Wn5Av 5m0JfilTm7QHgS5sRQ9kP+qiutPGLXc46aK+8V6dWQlmEiVNHij0NobTiSMDS69Q gXp2/CmMvprqDyQ4IrqO+yrlQdaTHJE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org