$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa File: 2d388d51-a371-39d1-bf5a-73549a9917de.roa (raw, json) Hash identifier: FCvGWD26hk3CPkZKHNGxqT5F78zAns/wVaoxvKfWv8w= Subject key identifier: 2E:DA:7F:F0:29:DD:32:5C:51:4D:98:E5:00:5D:6F:D7:1C:DC:58:74 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F43285847B9617AD6CFBFB7CD029EA880 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 23528 IP address blocks: 168.203.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:7a:d6:cf:bf:b7:cd:02:9e:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=9e40e299-dde1-4197-9c81-d7afdd9d439d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:60:42:4c:f9:99:52:82:f1:4e:d6:12:e3: af:ce:31:17:3d:8a:14:8b:5c:ea:fb:a2:92:a1:22: d2:2d:cb:bd:44:f6:f5:b5:94:36:55:d7:2c:74:6e: 82:d1:9d:56:73:40:29:af:5e:c3:ec:05:28:58:26: 25:6f:de:3d:70:97:1b:5a:09:75:a9:04:3a:91:3e: 7e:ca:2d:3d:3d:f9:21:ed:d1:9e:c2:4a:f3:7d:f0: 53:ad:e7:11:a6:7e:6e:e1:10:c4:7b:84:10:f9:3f: 90:da:aa:90:fc:e4:0b:51:75:93:54:e2:9b:0f:6e: 8b:94:11:d6:ac:a1:4c:f6:f7:31:ed:84:7f:d6:87: cb:49:5d:6f:ed:35:f4:bc:cb:5d:c4:00:b1:59:f1: 66:a5:d3:5c:22:66:84:84:8a:d9:64:8f:0f:df:81: a6:33:72:a3:96:a2:4f:4d:87:96:0b:12:a2:ee:e2: ef:c4:de:c2:6f:53:72:74:17:e6:b5:d5:46:94:36: 4f:da:74:78:fb:9d:d6:2c:48:a5:92:2f:45:b4:6f: 0b:e7:5b:ce:a7:18:ba:96:ff:0f:07:80:40:cd:06: 2c:3c:50:46:0d:a5:34:be:ce:be:f3:80:b1:d2:70: 94:92:6c:13:22:85:45:1c:7e:33:0d:ed:90:38:32: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:7F:F0:29:DD:32:5C:51:4D:98:E5:00:5D:6F:D7:1C:DC:58:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:eb:2d:0f:03:9f:63:50:d6:a8:b8:13:58:1f:31:44:22:14: 34:44:3a:eb:32:3e:03:39:35:01:ec:4d:c0:27:fb:55:65:d0: 44:54:6e:37:3e:7c:40:f0:6c:88:2c:28:3c:f8:52:dc:78:37: d4:c0:09:90:0f:e1:4f:88:e8:12:f7:35:46:c2:fe:dd:69:93: 72:1d:6c:16:f5:a0:d0:20:98:55:5d:db:9a:d0:c3:75:13:10: 82:b2:08:56:72:42:bf:dc:e0:8f:9a:11:0d:1e:4f:83:22:68: 87:99:4d:be:8d:72:6f:e6:6a:d5:e0:86:a8:d6:bb:28:9d:5e: 76:ac:12:1e:92:1e:4f:18:c4:49:1a:07:7e:ab:cd:a4:e8:ff: a0:af:54:23:53:d3:7f:f1:e5:f0:c6:63:c2:27:44:d8:e1:81: 17:7e:fc:a7:89:83:2c:e0:1b:da:e5:41:b5:86:f5:d5:d2:a5: e8:4d:a5:27:e2:37:4a:ca:f3:c1:e5:25:95:0e:2e:c6:de:0b: cf:a2:82:af:29:34:38:7d:ce:1c:c8:27:29:4c:7d:d1:6a:e8: 56:f0:8e:8d:13:56:2f:df:fb:49:f8:89:12:08:ac:67:5c:a3: 21:91:25:68:29:a5:05:80:94:98:10:1f:b7:70:e4:5f:37:69: 73:61:87:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXrWz7+3zQKeqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk OWU0MGUyOTktZGRlMS00MTk3LTljODEtZDdhZmRkOWQ0MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq19gQkz5mVKC8U7WEuOvzjEXPYoUi1zq+6KS oSLSLcu9RPb1tZQ2VdcsdG6C0Z1Wc0Apr17D7AUoWCYlb949cJcbWgl1qQQ6kT5+ yi09Pfkh7dGewkrzffBTrecRpn5u4RDEe4QQ+T+Q2qqQ/OQLUXWTVOKbD26LlBHW rKFM9vcx7YR/1ofLSV1v7TX0vMtdxACxWfFmpdNcImaEhIrZZI8P34GmM3KjlqJP TYeWCxKi7uLvxN7Cb1NydBfmtdVGlDZP2nR4+53WLEilki9FtG8L51vOpxi6lv8P B4BAzQYsPFBGDaU0vs6+84Cx0nCUkmwTIoVFHH4zDe2QODKtcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7af/Ap3TJcUU2Y5QBdb9cc3Fh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMmQzODhkNTEtYTM3MS0z OWQxLWJmNWEtNzM1NDlhOTkxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/rLQ8Dn2NQ1qi4E1gfMUQiFDREOusyPgM5NQHsTcAn+1Vl0ERUbjc+ fEDwbIgsKDz4Utx4N9TACZAP4U+I6BL3NUbC/t1pk3IdbBb1oNAgmFVd25rQw3UT EIKyCFZyQr/c4I+aEQ0eT4MiaIeZTb6Ncm/matXghqjWuyidXnasEh6SHk8YxEka B36rzaTo/6CvVCNT03/x5fDGY8InRNjhgRd+/KeJgyzgG9rlQbWG9dXSpehNpSfi N0rK88HlJZUOLsbeC8+igq8pNDh9zhzIJylMfdFq6Fbwjo0TVi/f+0n4iRIIrGdc oyGRJWgppQWAlJgQH7dw5F83aXNhh7s= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org