$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa File: f8dbe662-4178-3aea-90e2-4d5ab001b930.roa (raw, json) Hash identifier: GCqhjG5vqIzKIXUxtIhwVi3kyQtCqrSxINKb0MHn9Ns= Subject key identifier: 1D:C4:D8:82:C5:04:03:C6:CF:0A:94:22:40:D1:D0:FE:BB:45:E2:5C Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F432858474AA55DFCE4607606E1216040 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa Signing time: Sat 21 Sep 2024 21:02:58 +0000 ROA not before: Sat 21 Sep 2024 21:02:58 +0000 ROA not after: Fri 20 Dec 2024 22:02:58 +0000 asID: 50842 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4a:a5:5d:fc:e4:60:76:06:e1:21:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Sep 21 21:02:58 2024 GMT Not After : Dec 20 22:02:58 2024 GMT Subject: CN=629b3c0e-9468-412e-80fc-ef87c43230a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:fd:96:35:e7:06:d8:09:6e:0a:89:5a:cc: 4a:32:60:a7:16:01:57:c0:cc:c5:1d:d6:35:9b:89: ca:9f:a0:0c:8f:3e:d6:08:38:ae:22:88:fb:54:ef: 9d:49:3c:83:fc:eb:8e:6c:0d:bf:b1:7c:f8:04:93: 6b:fc:27:23:00:20:0b:5f:1d:95:35:c6:f0:e4:e5: 92:b5:2d:94:7a:5f:cb:4b:52:49:2f:a8:fc:a5:52: 33:3d:d4:e1:d7:91:b1:fd:06:1c:7d:2c:87:ac:5a: ac:d0:f8:ff:57:89:e1:88:74:3b:1c:07:f2:91:15: a4:33:14:f2:91:07:5a:3f:3e:4f:c4:47:9d:fb:52: c7:79:83:2d:ad:6b:6f:7f:86:b0:03:bd:87:68:00: 8b:af:42:1b:1e:d9:c8:dc:55:1b:15:5e:4e:76:0a: d4:b4:5b:66:70:e3:18:b9:c4:a0:15:81:20:e2:13: af:e6:7b:9b:58:a8:9a:d7:d5:0c:e6:0d:7a:b3:c5: f9:59:11:6e:60:ae:d7:9b:42:66:26:29:2d:00:e7: 95:ce:2e:76:46:33:d6:a0:1f:0d:18:6a:a0:1d:f3: 92:6b:11:68:c5:91:83:5b:7e:ba:e6:cf:2d:38:49: 27:b3:59:eb:21:f8:6c:5d:94:56:d6:60:39:b7:65: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:D8:82:C5:04:03:C6:CF:0A:94:22:40:D1:D0:FE:BB:45:E2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:52:40:a5:09:43:5c:f8:10:16:cf:1c:b8:54:f5:97:af:62: 52:90:fd:25:b9:24:2a:df:97:dc:0f:37:db:d8:aa:79:a0:14: f0:4e:94:31:4a:55:b4:ca:f7:e7:aa:8b:f4:bb:fa:0b:84:28: eb:0c:9d:52:1c:05:e7:f4:a1:ad:0a:e1:d5:1a:28:7c:50:16: c4:7f:e2:53:bf:88:e4:51:da:67:d5:10:56:31:22:50:81:e1: 6d:df:2c:70:60:30:b6:7e:46:e6:a2:85:1f:c3:44:38:f2:78: 89:0a:14:c8:e4:86:aa:4c:fb:35:99:1d:68:2f:be:92:40:51: f1:11:19:6f:31:4a:41:77:41:2a:48:c9:73:7f:18:d8:7a:82: d7:35:8a:95:47:22:18:6b:8f:3f:fe:27:75:23:f2:56:aa:19: f7:a2:97:c6:f5:ad:73:0a:31:3a:8f:f7:16:6d:f4:82:c5:fc: 12:c2:0f:d4:0a:71:b0:54:ac:d0:3a:3c:28:7c:db:a8:bb:1a: 0f:66:65:7b:73:e1:5a:b3:2d:94:86:c6:02:3b:e0:54:7a:f3: a1:dd:91:79:06:79:36:3a:52:09:97:95:c7:e0:38:31:a4:a8: e5:88:0c:d6:6a:93:2d:ab:82:d9:72:00:42:6d:93:f5:23:be: 5e:75:09:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdKpV385GB2BuEhYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MDkyMTIxMDI1OFoXDTI0MTIyMDIyMDI1OFowLzEtMCsGA1UEAxMk NjI5YjNjMGUtOTQ2OC00MTJlLTgwZmMtZWY4N2M0MzIzMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5T9ljXnBtgJbgqJWsxKMmCnFgFXwMzFHdY1 m4nKn6AMjz7WCDiuIoj7VO+dSTyD/OuObA2/sXz4BJNr/CcjACALXx2VNcbw5OWS tS2Uel/LS1JJL6j8pVIzPdTh15Gx/QYcfSyHrFqs0Pj/V4nhiHQ7HAfykRWkMxTy kQdaPz5PxEed+1LHeYMtrWtvf4awA72HaACLr0IbHtnI3FUbFV5OdgrUtFtmcOMY ucSgFYEg4hOv5nubWKia19UM5g16s8X5WRFuYK7Xm0JmJiktAOeVzi52RjPWoB8N GGqgHfOSaxFoxZGDW3665s8tOEkns1nrIfhsXZRW1mA5t2VFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3E2ILFBAPGzwqUIkDR0P67ReJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZjhkYmU2NjItNDE3OC0z YWVhLTkwZTItNGQ1YWIwMDFiOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFSQKUJQ1z4EBbPHLhU9ZevYlKQ/SW5JCrfl9wPN9vYqnmgFPBOlDFK VbTK9+eqi/S7+guEKOsMnVIcBef0oa0K4dUaKHxQFsR/4lO/iORR2mfVEFYxIlCB 4W3fLHBgMLZ+RuaihR/DRDjyeIkKFMjkhqpM+zWZHWgvvpJAUfERGW8xSkF3QSpI yXN/GNh6gtc1ipVHIhhrjz/+J3Uj8laqGfeil8b1rXMKMTqP9xZt9ILF/BLCD9QK cbBUrNA6PCh826i7Gg9mZXtz4VqzLZSGxgI74FR686HdkXkGeTY6UgmXlcfgODGk qOWIDNZqky2rgtlyAEJtk/Ujvl51CXc= -----END CERTIFICATE-----Generated at Sat Sep 28 17:09:14 2024 by rpki-client on console-ams.rpki-client.org