$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa File: 2ae97979-16d5-393c-a787-3ce400c70ade.roa (raw, json) Hash identifier: WDm+Rb06LpysSu4mNSjSgySDuBXvCT6S2yg4TtxnRCI= Subject key identifier: 87:2D:FB:14:0D:8B:E2:E9:AA:84:2D:9A:7E:16:2D:D8:E1:65:83:8A Certificate issuer: /CN=143dcb45-9a31-4d19-a1e6-f07027b13219 Certificate serial: 010D0C9F43285847A73BE16A07E3105EE0CD7D88 Authority key identifier: 1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 32281 IP address blocks: 23.140.184.0/24 maxlen: 24 2602:fb22::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e1:6a:07:e3:10:5e:e0:cd:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143dcb45-9a31-4d19-a1e6-f07027b13219 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=003a09b9-6723-40c0-95e2-6c474469f1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:6b:4d:3c:98:1f:67:b9:c1:4c:59:b2:6c: 8f:0d:5d:1f:f6:9d:3c:9f:bf:c5:12:3a:03:96:86: d0:3b:c5:93:94:49:e3:20:99:e4:15:99:83:8d:74: d4:34:3d:0a:a9:55:ec:14:64:ab:4a:43:15:f9:e7: 1e:ff:47:10:60:34:e4:59:78:a0:f3:c3:09:38:9c: 24:4b:1e:34:cb:32:d8:7f:99:eb:48:25:fa:a4:eb: 15:96:30:e5:a7:3b:ee:e2:29:be:42:f8:a7:b3:1e: 63:2e:7e:bb:69:c2:fb:5a:dd:94:b1:eb:c6:b4:51: ae:2a:58:a5:1b:97:5d:c5:1a:98:fd:a9:09:fb:b6: 96:f6:0b:2e:06:a5:45:d6:0b:98:51:40:0a:07:16: ae:6d:ba:9c:c9:55:7c:2e:05:fe:52:d0:13:b0:de: e7:75:e4:61:70:02:f8:70:30:ca:eb:db:b9:fd:48: 9b:54:d2:52:97:a5:20:52:7b:3b:1f:44:a3:c6:22: a6:c8:78:e2:a4:c6:e1:8a:e4:4d:d6:65:56:94:11: 25:68:d9:e5:1a:84:ae:e9:92:ea:8a:a9:13:ae:95: 52:ba:7d:39:fa:77:6e:90:d8:fd:da:72:4e:6c:43: cb:a3:4b:1d:81:5f:1e:33:81:c9:fb:75:53:83:45: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:FB:14:0D:8B:E2:E9:AA:84:2D:9A:7E:16:2D:D8:E1:65:83:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl X509v3 Authority Key Identifier: keyid:1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer sbgp-ipAddrBlock: critical IPv4: 23.140.184.0/24 IPv6: 2602:fb22::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c8:da:bd:2f:e9:41:7c:2e:fc:d2:f2:6f:56:a2:14:36:10: 04:dd:4e:48:8e:63:28:c6:cc:ec:10:1a:dd:6d:9c:28:4e:d5: 94:44:20:1f:62:ed:eb:af:33:4b:a5:3a:be:31:1c:df:74:21: 26:a2:ab:4d:4b:22:d5:e5:3d:54:ee:4b:4f:4d:9f:9e:65:54: 5e:8d:ed:d8:9a:71:9a:17:e9:d8:07:14:e3:d6:8f:ef:07:25: bc:43:2b:37:c3:c1:88:01:16:97:a8:40:fa:81:53:1f:71:70: 04:e4:71:f1:df:4c:e1:5f:d6:0f:39:07:02:a2:a1:53:5a:54: 9f:7f:2f:63:6a:39:07:7c:ee:62:4c:9c:bc:6c:75:ba:6b:dd: 9e:97:4e:87:60:c2:df:7b:a9:c3:ca:42:12:24:e7:41:b6:ab: b5:f4:43:81:88:9c:7d:12:65:8f:b4:96:b2:96:83:fe:fc:09: 39:f2:f3:23:31:6d:f2:f0:23:e8:e7:1b:7e:26:a2:28:3f:f8: c7:70:36:08:15:be:1c:d7:d0:aa:e5:1a:d1:cb:d9:d6:9a:eb: 64:c3:8e:f2:a4:03:5a:12:f4:b0:00:3b:cc:88:95:4f:31:b2: 6c:73:e9:ad:a4:3b:65:52:a6:2a:aa:f0:ec:d8:3f:73:47:ed: eb:97:cb:c2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEenO+FqB+MQXuDNfYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZGNiNDUtOWEzMS00ZDE5LWExZTYtZjA3MDI3YjEz MjE5MB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDAzYTA5YjktNjcyMy00MGMwLTk1ZTItNmM0NzQ0NjlmMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2NrTTyYH2e5wUxZsmyPDV0f9p08n7/FEjoD lobQO8WTlEnjIJnkFZmDjXTUND0KqVXsFGSrSkMV+ece/0cQYDTkWXig88MJOJwk Sx40yzLYf5nrSCX6pOsVljDlpzvu4im+Qvinsx5jLn67acL7Wt2UsevGtFGuKlil G5ddxRqY/akJ+7aW9gsuBqVF1guYUUAKBxaubbqcyVV8LgX+UtATsN7ndeRhcAL4 cDDK69u5/UibVNJSl6UgUns7H0SjxiKmyHjipMbhiuRN1mVWlBElaNnlGoSu6ZLq iqkTrpVSun05+ndukNj92nJObEPLo0sdgV8eM4HJ+3VTg0WGEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIct+xQNi+LpqoQtmn4WLdjhZYOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDNk Y2I0NS05YTMxLTRkMTktYTFlNi1mMDcwMjdiMTMyMTkvMmFlOTc5NzktMTZkNS0z OTNjLWE3ODctM2NlNDAwYzcwYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTQzZGNiNDUtOWEzMS00ZDE5LWEx ZTYtZjA3MDI3YjEzMjE5LzE0M2RjYjQ1LTlhMzEtNGQxOS1hMWU2LWYwNzAyN2Ix MzIxOS5jcmwwHwYDVR0jBBgwFoAUHQIbrUlZK6KtKjddTmJHKEozwh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNDNkY2I0NS05YTMxLTRkMTktYTFlNi1mMDcw MjdiMTMyMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4y4MA4E AgACMAgDBgQmAvsiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsyNq9L+lBfC780vJvVqIUNhAE3U5IjmMo xszsEBrdbZwoTtWURCAfYu3rrzNLpTq+MRzfdCEmoqtNSyLV5T1U7ktPTZ+eZVRe je3YmnGaF+nYBxTj1o/vByW8Qys3w8GIARaXqED6gVMfcXAE5HHx30zhX9YPOQcC oqFTWlSffy9jajkHfO5iTJy8bHW6a92el06HYMLfe6nDykISJOdBtqu19EOBiJx9 EmWPtJayloP+/Ak58vMjMW3y8CPo5xt+JqIoP/jHcDYIFb4c19Cq5RrRy9nWmutk w47ypANaEvSwADvMiJVPMbJsc+mtpDtlUqYqqvDs2D9zR+3rl8vC -----END CERTIFICATE-----Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org