$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa File: 86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json) Hash identifier: eiDI7yS4XpLa7qqBYmEGnlH46OaopLC1pS5SlYpN94U= Subject key identifier: 9D:EC:4E:1C:F1:5B:25:D9:09:0B:83:80:95:BC:75:21:15:EB:B7:BD Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584793B1156CDF5C1F6774841BE2 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 23241 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:15:6c:df:5c:1f:67:74:84:1b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=78fb8859-1a35-4003-8e76-c6cd197e254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:5d:d4:18:89:00:85:c8:cc:73:24:cb:3f: d7:32:8b:09:c9:07:9c:92:ef:b1:9a:ff:bf:1d:52: 24:87:76:48:ac:ae:60:12:ad:a1:bd:df:3a:04:4c: c0:d4:33:0b:82:fb:f5:08:9f:80:c5:e1:76:f2:ce: 1b:09:77:da:d4:ad:d8:9a:e0:a1:d7:6b:22:9f:78: a7:f3:a9:7e:70:4b:c6:78:33:d0:00:8b:7c:7e:0e: 95:dd:41:db:e4:3f:f0:32:42:2e:30:36:2b:41:50: 80:c5:9c:fd:43:de:b0:77:1d:fe:e2:ef:0c:f0:98: c7:4b:64:5c:17:b1:25:57:d1:b8:47:e5:ac:47:a9: 7a:69:5f:d7:42:e0:4e:39:3d:b6:0b:73:d4:8c:f3: f5:e6:d1:46:3f:d6:b6:77:9c:aa:43:e7:ab:9a:25: 9f:26:77:7d:69:04:46:08:79:32:6e:08:06:3e:a5: 38:f6:3e:11:37:d7:ed:71:34:a4:b8:89:01:83:af: 6f:d5:c3:b7:47:ea:d8:79:4e:81:d2:ef:b3:b0:c8: 39:74:5c:de:66:a5:c8:64:4f:98:13:ae:b3:29:4b: 79:eb:ed:78:54:5a:75:35:1e:64:82:cd:f3:df:a6: f4:96:5e:a5:53:83:e3:2d:06:66:b7:5e:52:1f:53: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:4E:1C:F1:5B:25:D9:09:0B:83:80:95:BC:75:21:15:EB:B7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:3e:60:e9:6a:8c:09:85:3f:54:23:a6:f8:ac:b0:7f:d5: 0f:be:d3:47:ba:f8:f7:6d:96:8f:aa:d0:36:a9:7b:f8:f7:d5: 4b:72:d2:e2:4a:04:27:3b:2f:3a:4c:b1:94:6b:7d:ab:ee:bf: 2b:d0:0f:aa:e1:6d:af:11:57:32:7c:87:ee:91:f8:de:20:b4: 7e:df:9a:35:1d:c7:f5:f8:64:0f:ca:f5:56:2f:bb:99:71:a5: d3:1b:ca:1f:f2:d2:c9:92:43:8a:71:8b:0e:cc:79:43:e8:22: 56:03:fa:ed:30:bd:e0:71:7e:69:95:2f:ca:84:66:f8:89:58: a9:71:14:9e:ec:8c:68:6d:5c:76:ac:ad:b6:ed:ee:6b:e2:df: 7d:bc:fc:02:3c:b0:2e:75:9a:9d:65:7a:c6:92:7e:d0:2a:f3: 41:cd:36:d0:c3:32:73:4f:f3:79:b1:92:e8:52:00:9c:8f:b9: d2:27:3c:32:96:dd:ed:18:df:af:2d:b1:b3:3e:fe:43:24:15: e6:b8:31:5c:a3:ac:57:a3:cb:2f:05:ef:7d:03:d8:4d:12:7f: da:af:27:64:5b:57:86:f6:72:a2:0d:5f:6c:d5:de:7c:81:4b: 75:61:22:22:cc:25:c9:fb:ed:75:3f:2b:fa:5b:4e:fa:43:bd: a5:fe:4b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRVs31wfZ3SEG+IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk NzhmYjg4NTktMWEzNS00MDAzLThlNzYtYzZjZDE5N2UyNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQRd1BiJAIXIzHMkyz/XMosJyQecku+xmv+/ HVIkh3ZIrK5gEq2hvd86BEzA1DMLgvv1CJ+AxeF28s4bCXfa1K3YmuCh12sin3in 86l+cEvGeDPQAIt8fg6V3UHb5D/wMkIuMDYrQVCAxZz9Q96wdx3+4u8M8JjHS2Rc F7ElV9G4R+WsR6l6aV/XQuBOOT22C3PUjPP15tFGP9a2d5yqQ+ermiWfJnd9aQRG CHkybggGPqU49j4RN9ftcTSkuIkBg69v1cO3R+rYeU6B0u+zsMg5dFzeZqXIZE+Y E66zKUt56+14VFp1NR5kgs3z36b0ll6lU4PjLQZmt15SH1OUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3sThzxWyXZCQuDgJW8dSEV67e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvODZkMjEyNWEtOGQ1Ny0z ZDRhLTkxM2YtYTEwZTg0ZjhkYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8HPmDpaowJhT9UI6b4rLB/1Q++00e6+Pdtlo+q0Dape/j31Uty0uJK BCc7LzpMsZRrfavuvyvQD6rhba8RVzJ8h+6R+N4gtH7fmjUdx/X4ZA/K9VYvu5lx pdMbyh/y0smSQ4pxiw7MeUPoIlYD+u0wveBxfmmVL8qEZviJWKlxFJ7sjGhtXHas rbbt7mvi3328/AI8sC51mp1lesaSftAq80HNNtDDMnNP83mxkuhSAJyPudInPDKW 3e0Y368tsbM+/kMkFea4MVyjrFejyy8F730D2E0Sf9qvJ2RbV4b2cqINX2zV3nyB S3VhIiLMJcn77XU/K/pbTvpDvaX+S34= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:42 2024 by rpki-client on console-fra.rpki-client.org