$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b69dcfb8-7654-3a3e-89f3-85e861345443.roa File: b69dcfb8-7654-3a3e-89f3-85e861345443.roa (raw, json) Hash identifier: SuLITpC4v5uvXBGyLrP5edNKoPoiWJuXKPYX5f5/PUo= Subject key identifier: D0:64:C6:EC:E5:58:2D:AB:41:68:19:72:48:FC:82:36:B5:7A:4D:FE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285847924BE402DA5C9EC0C1722C80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b69dcfb8-7654-3a3e-89f3-85e861345443.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 30215 IP address blocks: 139.138.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:e4:02:da:5c:9e:c0:c1:72:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=3f8f85af-ea1f-471b-9221-a7a80a83eed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:da:09:15:1d:74:95:ae:5c:45:95:9a:51: b2:d0:f4:e5:6d:e7:b3:7f:b6:42:5f:24:d6:26:b2: 44:e1:b4:e1:b2:4e:b5:c5:e7:38:2b:e5:68:9b:5d: c2:21:7c:a7:e8:58:98:20:a6:21:e6:37:05:11:ed: 2c:d6:8c:af:eb:b7:97:68:cf:27:5a:25:87:f5:9b: 6c:7a:f7:fe:ca:b4:a9:8c:3c:1d:d1:78:20:d0:32: 8f:5e:73:a6:a8:3a:21:62:c3:3b:8f:85:fb:d2:01: 8a:0f:4d:e7:f8:64:c5:5a:a6:fe:06:45:10:c4:12: 07:b2:24:01:f1:2e:5e:40:8e:99:a1:2a:39:14:14: fa:02:e3:64:e9:e0:b3:12:12:7e:06:41:47:49:81: 80:9b:93:69:26:9b:48:ef:8d:89:93:27:ff:d5:54: cc:2a:9d:3f:82:c6:f1:54:d0:e3:d8:76:a2:cc:78: fa:a1:6e:bc:98:fa:13:21:7d:36:55:79:9a:09:99: c6:ab:71:a0:22:1b:41:d6:20:4c:d6:ee:c5:7e:b6: ff:70:e7:2a:ab:da:a0:27:62:09:cc:c5:19:75:91: 7d:d8:fa:af:fa:b1:4a:70:64:df:9a:71:87:18:bd: 40:29:52:40:7e:d1:69:c5:51:69:8c:4b:40:0b:77: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:C6:EC:E5:58:2D:AB:41:68:19:72:48:FC:82:36:B5:7A:4D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b69dcfb8-7654-3a3e-89f3-85e861345443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 139.138.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a6:74:86:f2:0f:90:fc:52:fd:fc:8f:70:84:a0:ba:40:f3: 07:93:24:ea:72:a0:cb:d1:ba:5e:c1:6a:aa:5f:29:38:fd:3d: 73:c1:49:32:ed:b9:c9:94:2b:a7:17:1e:f3:bb:9c:d1:5b:e2: 88:0c:bd:df:6f:e2:98:36:c8:97:6d:0e:40:2f:1d:34:e9:2f: cb:b8:55:cc:c0:33:38:aa:35:e9:d5:90:8d:02:f5:2d:4a:8d: ec:1d:d5:f1:42:89:ef:07:25:da:26:b9:ce:94:a0:2b:3c:a3: 1b:8b:0e:85:c4:79:d7:67:cd:2f:d2:b6:2c:d4:64:25:e2:c6: a7:7e:c9:3b:23:cd:1f:28:53:b0:87:6d:d9:60:f3:b4:c2:3f: 9e:d6:c0:1b:69:d6:67:97:34:37:a0:9e:31:2c:a3:32:4e:94: 5b:06:fb:e2:c2:03:94:9e:d4:63:70:da:6d:5e:3b:20:09:47: f0:9b:d0:82:70:43:4a:79:e0:2c:c9:1d:c2:bb:72:0d:68:ba: 38:c1:e3:9e:e5:c5:03:eb:4c:76:32:19:28:bd:49:72:da:f0: 7b:5c:50:e3:13:2b:b7:a8:96:0d:0f:82:4b:af:62:1d:98:c9: 57:89:ad:50:78:28:68:14:d6:d4:4e:37:55:c3:2b:a5:e4:b8: cc:88:79:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS+QC2lyewMFyLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk M2Y4Zjg1YWYtZWExZi00NzFiLTkyMjEtYTdhODBhODNlZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjzaCRUddJWuXEWVmlGy0PTlbeezf7ZCXyTW JrJE4bThsk61xec4K+Vom13CIXyn6FiYIKYh5jcFEe0s1oyv67eXaM8nWiWH9Zts evf+yrSpjDwd0Xgg0DKPXnOmqDohYsM7j4X70gGKD03n+GTFWqb+BkUQxBIHsiQB 8S5eQI6ZoSo5FBT6AuNk6eCzEhJ+BkFHSYGAm5NpJptI742Jkyf/1VTMKp0/gsbx VNDj2HaizHj6oW68mPoTIX02VXmaCZnGq3GgIhtB1iBM1u7Ffrb/cOcqq9qgJ2IJ zMUZdZF92Pqv+rFKcGTfmnGHGL1AKVJAftFpxVFpjEtAC3e2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBkxuzlWC2rQWgZckj8gja1ek3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjY5ZGNmYjgtNzY1NC0z YTNlLTg5ZjMtODVlODYxMzQ1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmmdIbyD5D8Uv38j3CEoLpA8weTJOpyoMvRul7BaqpfKTj9PXPBSTLt ucmUK6cXHvO7nNFb4ogMvd9v4pg2yJdtDkAvHTTpL8u4VczAMziqNenVkI0C9S1K jewd1fFCie8HJdomuc6UoCs8oxuLDoXEeddnzS/StizUZCXixqd+yTsjzR8oU7CH bdlg87TCP57WwBtp1meXNDegnjEsozJOlFsG++LCA5Se1GNw2m1eOyAJR/Cb0IJw Q0p54CzJHcK7cg1oujjB457lxQPrTHYyGSi9SXLa8HtcUOMTK7eolg0PgkuvYh2Y yVeJrVB4KGgU1tRON1XDK6XkuMyIeXI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org