$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/23eb8299-f26d-36df-bdb5-fbe2558fe6c5.roa File: 23eb8299-f26d-36df-bdb5-fbe2558fe6c5.roa (raw, json) Hash identifier: os2KR0qYmx0Yil2nKENvWWRhVmWEsiNIh4DTCFhFkiU= Subject key identifier: 1E:B9:61:0F:3E:32:33:E5:61:3F:B1:41:66:EE:97:C5:4D:8F:F4:28 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F43285847A5D6A927F05DC3B7ACE10500 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/23eb8299-f26d-36df-bdb5-fbe2558fe6c5.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 36262 IP address blocks: 23.141.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a9:27:f0:5d:c3:b7:ac:e1:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=243c6468-5389-440d-9d0e-bdd12bbf05e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:a6:62:92:67:6a:0a:d0:ca:6f:ab:3d:6d: 79:19:2e:9c:49:b6:62:88:b8:61:3a:e2:36:c2:33: 70:d7:23:f6:fd:83:85:0b:dc:32:f7:95:b3:56:6d: 10:d0:97:12:85:3f:3c:48:8b:e5:56:77:a6:fe:cd: 1c:93:91:a2:05:40:19:76:cb:dd:25:06:10:e4:d5: 54:c9:6f:6d:0f:37:ab:7f:1d:26:00:76:a1:0c:fc: 68:b8:03:96:bf:f0:e7:a0:8e:f8:04:1e:f6:f1:74: 5b:d4:c8:8e:26:c3:1e:0d:1d:a8:00:5e:43:16:63: 89:24:c6:4f:65:e4:66:b0:36:41:34:72:c7:8a:ee: 9e:03:3f:35:e5:0b:e4:14:64:c5:51:67:d9:d5:8b: c8:ce:be:7c:e3:de:90:22:01:65:19:fd:65:ef:50: 9e:da:26:76:49:a2:11:39:a0:a4:27:a9:6a:0c:9b: d8:ed:5a:3a:c9:ff:4f:c6:28:f1:ad:49:f8:00:ed: f0:f7:77:69:b9:55:3f:3d:f5:d8:86:78:a4:48:97: 9f:05:08:7c:92:01:87:81:88:34:7d:f5:08:28:05: 48:92:0e:36:6c:18:e4:f3:97:8b:67:d8:61:2b:ad: 0a:56:49:56:69:b4:91:70:3f:29:24:34:75:28:13: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:61:0F:3E:32:33:E5:61:3F:B1:41:66:EE:97:C5:4D:8F:F4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/23eb8299-f26d-36df-bdb5-fbe2558fe6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 23.141.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f3:91:0a:ad:31:97:15:b5:b8:5e:b6:50:55:83:d2:92:78: 3f:cc:16:e9:81:c7:e3:9a:a4:bc:0a:f6:ca:25:16:cf:a2:01: c6:1d:14:c9:e1:c6:be:49:1f:66:ed:9a:40:f5:91:9a:0a:65: 24:1a:a0:cb:6a:15:5d:85:c3:fd:e7:0a:ee:f8:09:76:21:c7: 61:35:d9:7f:d7:57:af:13:e3:24:fc:ed:25:4b:8a:1f:96:c4: 6e:f5:9e:a6:49:5c:12:64:47:26:18:b3:95:f9:b9:e8:34:09: fa:a2:3c:65:06:cc:d1:b8:fa:06:68:8f:dd:4c:6b:9d:3d:fe: f9:e0:7f:c9:ee:6e:00:81:8b:ed:1f:f0:fa:88:6f:8e:da:6e: 36:ea:2e:f4:c3:02:0d:de:01:af:17:4e:2c:7b:50:47:c0:05: 8c:89:68:a7:ac:17:9f:81:d1:28:64:fe:b1:f0:05:97:d4:6a: dd:b7:7c:a5:d3:53:68:43:89:41:67:60:75:5d:42:e4:99:2c: d6:2d:b8:b8:6d:34:d7:cf:12:dd:8c:5b:34:49:1c:1c:cf:d6: 86:43:4b:44:45:c4:e2:c9:83:47:fe:00:22:bc:cd:a0:ef:26: 90:27:a7:f8:bf:e3:21:b3:b3:59:66:f2:2b:a5:98:1c:15:75: 7f:a7:47:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qkn8F3Dt6zhBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MjQzYzY0NjgtNTM4OS00NDBkLTlkMGUtYmRkMTJiYmYwNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDSmYpJnagrQym+rPW15GS6cSbZiiLhhOuI2 wjNw1yP2/YOFC9wy95WzVm0Q0JcShT88SIvlVnem/s0ck5GiBUAZdsvdJQYQ5NVU yW9tDzerfx0mAHahDPxouAOWv/DnoI74BB728XRb1MiOJsMeDR2oAF5DFmOJJMZP ZeRmsDZBNHLHiu6eAz815QvkFGTFUWfZ1YvIzr58496QIgFlGf1l71Ce2iZ2SaIR OaCkJ6lqDJvY7Vo6yf9PxijxrUn4AO3w93dpuVU/PfXYhnikSJefBQh8kgGHgYg0 ffUIKAVIkg42bBjk85eLZ9hhK60KVklWabSRcD8pJDR1KBM+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB65YQ8+MjPlYT+xQWbul8VNj/QoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvMjNlYjgyOTktZjI2ZC0z NmRmLWJkYjUtZmJlMjU1OGZlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDzkQqtMZcVtbhetlBVg9KSeD/MFumBx+OapLwK9solFs+iAcYdFMnh xr5JH2btmkD1kZoKZSQaoMtqFV2Fw/3nCu74CXYhx2E12X/XV68T4yT87SVLih+W xG71nqZJXBJkRyYYs5X5ueg0CfqiPGUGzNG4+gZoj91Ma509/vngf8nubgCBi+0f 8PqIb47abjbqLvTDAg3eAa8XTix7UEfABYyJaKesF5+B0Shk/rHwBZfUat23fKXT U2hDiUFnYHVdQuSZLNYtuLhtNNfPEt2MWzRJHBzP1oZDS0RFxOLJg0f+ACK8zaDv JpAnp/i/4yGzs1lm8iulmBwVdX+nR7M= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:31 2024 by rpki-client on console-ams.rpki-client.org