$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json) Hash identifier: 82wBWSyRQlHfcKRjPhNu/lvZ4+2Uk3J0SQ1dZdo/8n4= Subject key identifier: 10:B3:01:F3:36:4E:75:4D:F2:7C:A3:25:7D:0A:11:CE:6D:F5:64:1D Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858477BF6572AA2702ACC1E39C8A0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 14500 IP address blocks: 173.244.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:57:2a:a2:70:2a:cc:1e:39:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=ba5ab5b5-84f8-49fc-88e5-bd46fc1229d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:3c:22:f8:b6:3f:40:40:fc:0a:47:e1:b2: 11:4e:70:d6:d2:58:7e:c2:67:28:1b:81:3a:ab:d7: 42:87:9f:e8:61:d6:25:db:fc:2c:cc:95:bf:58:4a: df:a9:60:8d:10:22:97:98:33:50:a7:5b:b8:9f:08: 5d:76:9f:1b:9a:26:3b:3a:7f:a6:b0:d6:81:3c:2f: 90:3b:dd:bc:3d:85:f8:af:79:b9:f5:24:c1:7e:5e: a0:83:f8:a0:09:fd:7e:79:44:0a:46:c0:ef:af:51: 8b:32:64:1f:9a:e5:9a:7b:6f:3a:e1:fa:2e:50:50: dd:e8:5c:38:43:82:7f:d9:17:38:22:79:bd:73:a7: 88:1b:c3:3a:06:0b:54:1f:7f:5c:6e:72:94:92:7d: 57:0b:1f:8c:04:20:93:3e:bd:41:e4:10:5b:e7:43: 66:9d:c1:45:08:df:47:fa:1d:25:a4:dd:ad:4a:a6: c7:30:4a:11:22:de:15:27:bb:69:94:bb:d0:6d:fd: 4e:83:b7:44:72:7d:1e:70:e6:ca:68:f7:16:04:79: e9:6a:42:e9:f4:6b:77:f9:83:d6:c0:cf:3d:dd:a8: 03:0d:76:1c:b6:48:40:07:31:20:d4:de:ce:38:76: 00:55:12:3e:16:29:a2:57:c7:1e:76:8b:4c:9f:a0: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:01:F3:36:4E:75:4D:F2:7C:A3:25:7D:0A:11:CE:6D:F5:64:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:dc:3b:03:66:76:8e:b9:e1:4a:0b:a6:01:d7:d1:4c:dc:0c: d8:aa:3e:73:1c:05:19:86:c8:95:41:51:1b:c2:cf:6a:e5:ee: a8:21:48:48:aa:ad:b2:7b:a5:47:13:18:60:62:e2:51:d8:4d: 90:66:b6:87:2b:ff:25:2e:6a:f3:79:22:37:1b:f7:4d:dc:1f: 6d:0e:ca:af:cc:72:71:b7:3f:2f:e9:fa:d2:81:61:0e:fd:06: fe:45:82:6b:bb:64:43:c4:64:66:ff:2a:f9:b1:dc:ba:ee:bc: 00:d0:3c:c1:62:6f:17:b6:86:e8:46:07:37:49:bd:e7:02:63: de:9f:ae:28:a7:cc:44:34:6a:a9:b4:25:1b:18:92:f7:fd:24: 1b:7d:4c:5c:2c:26:81:ba:aa:09:68:b0:2c:de:b5:89:8b:a6: fb:99:96:09:9b:6f:b8:49:a2:15:c1:7c:a9:b8:fc:03:3d:b6: a4:7b:e0:86:f7:0e:17:06:0c:dc:73:e8:a7:95:54:99:a5:2e: 5b:6b:b1:81:c9:be:14:fe:b9:0b:0b:3c:f3:e7:7b:f9:42:28: d4:36:a6:71:5d:02:ad:23:f9:01:11:2a:b2:93:12:d0:f2:7c: 4b:20:95:35:0f:38:b6:62:2a:7a:59:50:ee:62:ce:69:f4:6e: 8a:09:33:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79lcqonAqzB45yKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YmE1YWI1YjUtODRmOC00OWZjLTg4ZTUtYmQ0NmZjMTIyOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzU8Ivi2P0BA/ApH4bIRTnDW0lh+wmcoG4E6 q9dCh5/oYdYl2/wszJW/WErfqWCNECKXmDNQp1u4nwhddp8bmiY7On+msNaBPC+Q O928PYX4r3m59STBfl6gg/igCf1+eUQKRsDvr1GLMmQfmuWae2864fouUFDd6Fw4 Q4J/2Rc4Inm9c6eIG8M6BgtUH39cbnKUkn1XCx+MBCCTPr1B5BBb50NmncFFCN9H +h0lpN2tSqbHMEoRIt4VJ7tplLvQbf1Og7dEcn0ecObKaPcWBHnpakLp9Gt3+YPW wM893agDDXYctkhABzEg1N7OOHYAVRI+FimiV8cedotMn6BT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCzAfM2TnVN8nyjJX0KEc5t9WQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNjAwNGFkOTgtNmY4Yi0z MmRhLWE1OTUtOTE0MDIwYTc4NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjcOwNmdo654UoLpgHX0UzcDNiqPnMcBRmGyJVBURvCz2rl7qghSEiq rbJ7pUcTGGBi4lHYTZBmtocr/yUuavN5Ijcb903cH20Oyq/McnG3Py/p+tKBYQ79 Bv5Fgmu7ZEPEZGb/Kvmx3LruvADQPMFibxe2huhGBzdJvecCY96friinzEQ0aqm0 JRsYkvf9JBt9TFwsJoG6qglosCzetYmLpvuZlgmbb7hJohXBfKm4/AM9tqR74Ib3 DhcGDNxz6KeVVJmlLltrsYHJvhT+uQsLPPPne/lCKNQ2pnFdAq0j+QERKrKTEtDy fEsglTUPOLZiKnpZUO5izmn0booJM6U= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org