$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa File: dc37949b-fd68-31d3-8530-d51a972e599a.roa (raw, json) Hash identifier: w9tKUXA46aUbuQ5vC2LG2v2j7D2D3DtFPSGAPfb/Zr8= Subject key identifier: 88:CB:2E:E4:A9:4D:E9:44:D6:75:30:B0:C2:6C:8B:14:EE:CA:2C:6C Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F432858479AABE912A0462CEE9B71D700 Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 400719 IP address blocks: 23.140.168.0/24 maxlen: 25 2602:80f:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e9:12:a0:46:2c:ee:9b:71:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=221ee6e8-a18d-4c95-8874-3521e700cda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c5:54:a7:11:19:97:cd:6e:5e:ea:1c:d1:09: 57:ec:a7:bc:12:f0:2c:9b:a5:4b:f1:8d:d4:24:2a: d0:b4:00:04:ad:a7:ff:ec:eb:5e:9e:5d:66:e1:c4: e6:0b:77:18:41:38:f2:49:50:e6:bb:d5:8d:a3:2b: 71:c6:2d:ab:f6:4d:45:5e:2c:c5:15:68:7f:11:e1: 0d:6e:11:a7:89:d3:8e:c4:81:c6:7f:7e:a3:ef:b7: 74:c7:be:cf:6b:45:2c:33:37:ec:86:d6:4d:3b:b5: e2:bf:f9:80:9d:3e:32:06:e5:46:de:90:9e:55:6b: d9:4c:04:ca:0a:3d:04:7b:ef:2c:29:8c:fc:ee:61: de:87:82:8e:b6:e8:17:da:c6:82:fb:61:4a:9c:de: 41:b3:3b:63:63:94:5c:89:b9:23:b8:50:66:2c:9c: 65:39:b6:e6:37:84:59:cd:ee:6e:95:ff:29:1a:05: 8f:39:16:a2:0b:2f:6f:68:32:fb:b0:97:79:9f:9c: dc:27:f6:21:09:af:52:f9:08:ce:b8:1e:d8:5c:ed: 31:c9:85:f1:07:b8:ec:45:84:f9:c6:49:2b:e5:9f: ce:60:11:43:08:8a:9e:68:13:92:98:df:a4:23:90: 21:49:83:c9:13:6b:7c:4d:2b:5a:81:aa:d2:50:84: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:2E:E4:A9:4D:E9:44:D6:75:30:B0:C2:6C:8B:14:EE:CA:2C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: 23.140.168.0/24 IPv6: 2602:80f:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ab:57:0c:08:b1:b5:f8:6a:7d:d8:97:56:76:7f:3d:ad:1c: 3e:61:23:ca:19:a9:e4:82:7e:0f:49:ab:4f:2e:2a:af:99:ab: 4d:dc:55:0e:6b:32:d1:bc:9d:c3:e9:e0:63:99:a7:91:a3:e5: 71:2a:1c:f2:78:e6:43:ef:67:4f:ff:bd:2a:43:9e:b7:86:24: 17:a6:9f:b2:c1:86:af:1d:c6:0f:62:eb:74:f4:98:76:b5:0f: 66:f8:fd:ec:d9:28:69:cf:68:2b:69:7e:c1:65:47:f7:b9:f5: cd:83:72:63:7a:56:fe:05:1e:4e:b2:e2:13:64:00:97:09:01: e0:fa:b0:f1:ee:e2:fc:d8:df:88:e5:51:24:95:71:eb:8a:cc: d6:59:7f:34:d1:21:cf:c6:2b:02:23:be:1b:75:af:46:e7:27: b9:85:d1:56:a0:04:4c:70:46:1a:5a:1b:c1:95:02:6b:8a:a2: bc:dc:e0:bc:8b:32:64:2a:d0:1f:d6:17:ad:d1:87:cc:ef:18: a3:ee:87:12:62:4a:97:e6:af:04:f0:9f:4b:46:33:d5:8f:06: 3e:bb:08:95:26:62:9e:0b:23:d9:6f:53:2f:87:47:17:0d:f1: 07:c7:e5:e7:97:21:94:f8:70:9f:71:f6:22:b1:c4:6d:49:f2: 23:6b:b9:3b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEeaq+kSoEYs7ptx1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MjIxZWU2ZTgtYTE4ZC00Yzk1LTg4NzQtMzUyMWU3MDBjZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cVUpxEZl81uXuoc0QlX7Ke8EvAsm6VL8Y3U JCrQtAAEraf/7Otenl1m4cTmC3cYQTjySVDmu9WNoytxxi2r9k1FXizFFWh/EeEN bhGnidOOxIHGf36j77d0x77Pa0UsMzfshtZNO7Xiv/mAnT4yBuVG3pCeVWvZTATK Cj0Ee+8sKYz87mHeh4KOtugX2saC+2FKnN5BsztjY5RcibkjuFBmLJxlObbmN4RZ ze5ulf8pGgWPORaiCy9vaDL7sJd5n5zcJ/YhCa9S+QjOuB7YXO0xyYXxB7jsRYT5 xkkr5Z/OYBFDCIqeaBOSmN+kI5AhSYPJE2t8TStagarSUIRsGQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIjLLuSpTelE1nUwsMJsixTuyixsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvZGMzNzk0OWItZmQ2OC0z MWQzLTg1MzAtZDUxYTk3MmU1OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4yoMA8E AgACMAkDBwQmAggPwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW6tXDAixtfhqfdiXVnZ/Pa0cPmEjyhmp 5IJ+D0mrTy4qr5mrTdxVDmsy0bydw+ngY5mnkaPlcSoc8njmQ+9nT/+9KkOet4Yk F6afssGGrx3GD2LrdPSYdrUPZvj97Nkoac9oK2l+wWVH97n1zYNyY3pW/gUeTrLi E2QAlwkB4Pqw8e7i/NjfiOVRJJVx64rM1ll/NNEhz8YrAiO+G3WvRucnuYXRVqAE THBGGlobwZUCa4qivNzgvIsyZCrQH9YXrdGHzO8Yo+6HEmJKl+avBPCfS0Yz1Y8G PrsIlSZingsj2W9TL4dHFw3xB8fl55chlPhwn3H2IrHEbUnyI2u5Ow== -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org