$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa File: 950373ec-0593-386e-8602-37c09d8513c1.roa (raw, json) Hash identifier: NusDxG0SYNoGAcx3JAMvaOIZ7zHONx3+XD2AwLr6Yuw= Subject key identifier: 7C:BE:FF:CD:27:DA:27:27:73:88:C4:74:55:AE:4A:3E:A0:08:86:EA Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F432858473095E47B4CF208A812D30980 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 6639 IP address blocks: 162.211.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:e4:7b:4c:f2:08:a8:12:d3:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=d53b3ade-0df7-46a4-83a8-2a432ad5813f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:87:70:b8:f9:4d:83:26:dc:77:43:aa:fe: 39:f1:c5:44:7d:5b:a0:ff:67:7e:c7:8b:3f:c6:44: 26:1e:4e:ea:9a:8c:fa:bf:62:cb:41:5b:0c:b3:e7: 3b:0d:a8:37:5a:09:f1:9f:bf:ec:df:bd:ca:a7:66: 80:94:08:18:fc:db:6a:2a:96:eb:0f:26:7c:ea:35: fd:93:fd:0a:00:54:bd:e4:3e:25:4a:71:4b:2d:c0: c5:16:be:19:2b:a5:f9:3e:cc:26:b4:8c:9c:0e:99: bf:11:14:cb:d9:88:3c:3d:a6:ba:90:52:e0:c4:36: f9:97:8e:51:d3:0e:3a:5b:fd:c4:31:5b:06:d1:62: ef:13:d2:df:7f:6d:94:2e:61:09:f7:49:c5:bf:23: 5d:c2:64:6d:cc:18:7f:6f:fc:03:85:b7:6a:48:51: ac:17:5b:db:b5:cb:dc:2b:d5:7a:11:07:91:55:de: 5f:28:fa:4d:32:3a:39:08:39:0b:5a:64:5c:23:4b: 67:8b:59:e1:0e:92:6f:2d:a3:96:09:d9:d8:85:51: e7:17:e7:bb:9d:eb:1c:d5:d7:ec:14:24:b9:7c:55: 7b:f8:a1:7d:3b:1a:8e:88:32:f1:9d:a5:64:bc:78: 3c:19:68:4c:65:96:66:cf:ca:da:33:0c:ec:0f:c6: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BE:FF:CD:27:DA:27:27:73:88:C4:74:55:AE:4A:3E:A0:08:86:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 162.211.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:55:22:db:f6:7e:48:6a:80:72:1e:cc:21:98:c4:5f:18:d8: 9c:a9:3e:2c:ba:c4:1e:fa:ed:a1:c8:f7:5e:61:37:00:31:72: 80:c2:d4:37:07:0f:e3:a8:be:70:92:48:83:67:05:f6:50:b9: aa:b2:c1:19:ee:ad:0b:f8:09:02:6e:81:84:4a:a6:da:24:a1: a8:40:f8:ed:dd:f8:55:d0:9c:84:9f:16:2e:7c:22:d7:4e:00: 20:7c:d3:93:7a:47:61:28:ee:ea:92:c5:e0:eb:95:96:be:5d: 44:99:81:ad:87:4d:34:df:2b:97:2c:17:22:a0:fc:d9:13:f3: 9b:e7:6e:59:8b:cd:a6:cc:4e:8c:68:fd:f5:f3:99:f8:55:eb: eb:44:62:82:34:37:9a:4b:ed:95:92:5d:64:d7:07:22:e9:87: 08:c5:b4:f8:89:24:60:aa:a2:6e:41:27:12:fe:ed:c3:ed:e5: a5:2c:b6:54:c4:99:aa:27:52:d3:41:8a:83:79:e6:48:5e:95: ca:70:98:9f:41:a3:b3:cf:30:03:19:82:f2:45:28:41:5f:1d: 7a:a3:c1:5e:09:58:b5:90:2a:4e:e3:02:58:b7:cf:54:a0:2c: 73:61:41:47:74:f3:3d:6a:0b:4b:e0:89:59:67:10:e4:a8:6f: 72:53:a6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwleR7TPIIqBLTCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDUzYjNhZGUtMGRmNy00NmE0LTgzYTgtMmE0MzJhZDU4MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe2HcLj5TYMm3HdDqv458cVEfVug/2d+x4s/ xkQmHk7qmoz6v2LLQVsMs+c7Dag3Wgnxn7/s373Kp2aAlAgY/NtqKpbrDyZ86jX9 k/0KAFS95D4lSnFLLcDFFr4ZK6X5PswmtIycDpm/ERTL2Yg8Paa6kFLgxDb5l45R 0w46W/3EMVsG0WLvE9Lff22ULmEJ90nFvyNdwmRtzBh/b/wDhbdqSFGsF1vbtcvc K9V6EQeRVd5fKPpNMjo5CDkLWmRcI0tni1nhDpJvLaOWCdnYhVHnF+e7nesc1dfs FCS5fFV7+KF9OxqOiDLxnaVkvHg8GWhMZZZmz8raMwzsD8a8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy+/80n2icnc4jEdFWuSj6gCIbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvOTUwMzczZWMtMDU5My0z ODZlLTg2MDItMzdjMDlkODUxM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFVItv2fkhqgHIezCGYxF8Y2JypPiy6xB767aHI915hNwAxcoDC1DcH D+OovnCSSINnBfZQuaqywRnurQv4CQJugYRKptokoahA+O3d+FXQnISfFi58ItdO ACB805N6R2Eo7uqSxeDrlZa+XUSZga2HTTTfK5csFyKg/NkT85vnblmLzabMToxo /fXzmfhV6+tEYoI0N5pL7ZWSXWTXByLphwjFtPiJJGCqom5BJxL+7cPt5aUstlTE maonUtNBioN55khelcpwmJ9Bo7PPMAMZgvJFKEFfHXqjwV4JWLWQKk7jAli3z1Sg LHNhQUd08z1qC0vgiVlnEOSob3JTpng= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org