$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: DoLsXwpaDUmhMp6TwRIAcxxqEVkSXIUM8V/Y0gR1K48= Subject key identifier: 2D:DA:F2:7D:84:87:7B:CB:5C:C7:07:C0:00:4F:36:5C:CF:1C:CE:09 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F43285847CA3F79E8D569C05AFB5F67C0 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:79:e8:d5:69:c0:5a:fb:5f:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=6ed3640e-2dbe-4e21-8893-4044cb3aba24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:19:76:a6:0e:1e:15:e0:92:eb:92:bb:14: 64:55:ca:2c:b7:7a:f6:20:6c:ee:db:39:14:a5:b5: 01:be:52:69:5b:dc:e0:03:4a:51:75:b4:ec:3d:80: a7:fa:d7:06:77:03:85:5c:e2:8b:ce:b4:43:d5:8f: a6:c6:ea:aa:ac:f6:52:ac:5a:8e:f4:3f:a6:2a:2b: b9:a0:34:82:77:63:f2:52:1b:a7:a8:0d:9b:41:32: 59:a3:76:02:db:71:1c:9b:fe:88:d1:6e:92:f0:77: 99:14:32:2d:63:75:4c:69:4b:b7:de:3d:b5:60:b8: 90:a2:4d:58:a0:59:d2:b2:e7:19:0a:79:22:62:13: 86:fe:70:fd:57:58:e9:e2:39:10:1b:8c:56:ff:98: 5f:b5:05:36:fd:e3:bf:d0:99:72:87:7c:44:96:66: 8c:36:36:49:e4:52:e6:e6:50:bd:44:d1:1d:34:a3: fa:9a:60:f1:53:20:f7:53:97:e7:33:5a:9d:19:48: 68:5f:cd:16:4e:97:9c:6d:25:ee:98:1f:ee:67:1d: cd:0c:e5:39:59:53:2f:9e:7a:c6:e0:39:16:10:a1: ed:7f:25:29:5e:23:ef:d8:57:9c:c9:bb:03:8e:dc: f7:84:6b:45:6c:c0:f2:02:4d:1d:79:2c:e1:e4:fd: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DA:F2:7D:84:87:7B:CB:5C:C7:07:C0:00:4F:36:5C:CF:1C:CE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3d:b8:c1:45:57:c9:d9:64:47:bf:fb:85:c1:12:91:1e:f1: c3:eb:cd:fa:da:25:79:d0:94:d5:f4:3c:a3:ff:b2:28:4d:42: 31:39:df:cd:9b:34:b3:a3:2a:e7:b0:cf:83:1f:c1:16:cb:fb: ff:6e:96:8c:bd:49:bd:23:e0:b4:91:97:2a:83:22:39:3c:75: 6d:eb:41:50:d1:94:45:c1:fa:1e:02:9c:01:09:d7:82:50:11: c2:18:d1:f1:b3:0c:ad:81:be:51:9f:c9:56:e0:a0:3a:3d:e5: 6d:c2:cd:f3:fe:fd:b2:f2:5a:a7:00:56:f1:c8:51:85:f5:cb: 5e:46:21:82:fb:32:ae:6e:20:f1:14:a5:48:7a:ba:bc:99:46: 49:ad:28:f1:09:24:4f:c7:25:3d:fd:3c:6f:2f:1a:26:ea:51: 85:a9:81:04:74:71:8a:f1:49:5d:74:08:60:4b:06:e8:68:33: 78:af:f0:8e:25:f7:75:88:b5:bb:0d:b1:23:28:8c:15:21:94: c3:fc:79:6d:9b:a1:5a:c2:76:bf:4d:dd:42:cf:09:93:fc:e0: 1d:7e:b2:54:24:95:bf:6e:59:4f:90:3e:d9:42:0c:89:b0:53: 49:30:a7:a8:31:c5:99:65:04:f5:36:94:d5:4a:36:13:22:4d: 45:db:75:10 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEfKP3no1WnAWvtfZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NmVkMzY0MGUtMmRiZS00ZTIxLTg4OTMtNDA0NGNiM2FiYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunUZdqYOHhXgkuuSuxRkVcost3r2IGzu2zkU pbUBvlJpW9zgA0pRdbTsPYCn+tcGdwOFXOKLzrRD1Y+mxuqqrPZSrFqO9D+mKiu5 oDSCd2PyUhunqA2bQTJZo3YC23Ecm/6I0W6S8HeZFDItY3VMaUu33j21YLiQok1Y oFnSsucZCnkiYhOG/nD9V1jp4jkQG4xW/5hftQU2/eO/0Jlyh3xElmaMNjZJ5FLm 5lC9RNEdNKP6mmDxUyD3U5fnM1qdGUhoX80WTpecbSXumB/uZx3NDOU5WVMvnnrG 4DkWEKHtfyUpXiPv2FecybsDjtz3hGtFbMDyAk0deSzh5P1F8wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC3a8n2Eh3vLXMcHwABPNlzPHM4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUPbjBRVfJ2WRHv/uFwRKRHvHD68362iV5 0JTV9Dyj/7IoTUIxOd/NmzSzoyrnsM+DH8EWy/v/bpaMvUm9I+C0kZcqgyI5PHVt 60FQ0ZRFwfoeApwBCdeCUBHCGNHxswytgb5Rn8lW4KA6PeVtws3z/v2y8lqnAFbx yFGF9cteRiGC+zKubiDxFKVIerq8mUZJrSjxCSRPxyU9/TxvLxom6lGFqYEEdHGK 8UlddAhgSwboaDN4r/COJfd1iLW7DbEjKIwVIZTD/Hltm6Fawna/Td1CzwmT/OAd frJUJJW/bllPkD7ZQgyJsFNJMKeoMcWZZQT1NpTVSjYTIk1F23UQ -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org