$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: GQfjt63cJTFzYPpsfajkbrXt6pW8JrRBtV2cDM20w5c= Subject key identifier: 37:02:6C:2C:AA:C3:91:3D:31:07:F5:EE:28:35:9A:DF:30:DA:ED:81 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584679B9ECF7EB041869BAABC080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Tue 09 Jul 2024 01:00:25 +0000 ROA not before: Tue 09 Jul 2024 01:00:25 +0000 ROA not after: Mon 07 Oct 2024 01:00:25 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:79:b9:ec:f7:eb:04:18:69:ba:ab:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 9 01:00:25 2024 GMT Not After : Oct 7 01:00:25 2024 GMT Subject: CN=1d91f0e9-fe79-4498-b075-f181e38ff5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:8c:8a:89:87:97:5a:e8:07:d2:8c:b2:71: 10:5f:2a:17:d2:6a:84:cb:a0:53:78:59:0e:a7:94: 0d:4f:7d:6a:19:b5:4a:14:f1:5d:31:26:d9:26:86: 2c:14:b9:04:85:48:17:19:22:cb:0c:7b:60:a7:3f: f5:39:00:35:2f:99:7f:bd:dc:2f:98:ea:94:ad:9e: 31:b8:07:a2:66:8b:16:cc:12:ca:04:b6:b5:d4:f1: 4a:82:e5:ad:53:e1:75:6d:0b:d1:bb:69:1c:8c:b5: aa:79:c8:ea:c2:db:a0:65:a0:18:71:c8:30:2c:d3: 13:3a:79:39:92:21:50:c9:c7:32:8f:9e:33:71:b7: 5d:00:e6:37:c5:57:e9:3a:c9:32:25:e2:d7:75:ae: 5f:06:e6:ac:26:44:cf:63:8d:44:a5:f3:ca:81:69: ce:14:0a:7b:14:54:3e:c4:81:af:d6:98:bd:16:1f: 6a:fb:59:53:4a:48:fc:66:9b:4c:ac:9a:81:47:7c: 61:ae:15:36:e3:4a:85:a2:85:84:c5:79:a5:86:68: 16:6f:cb:e7:08:45:4d:57:7d:63:bb:43:67:31:8c: fd:10:98:ea:ae:1c:6f:f9:3c:58:8a:11:17:0b:49: 98:46:c7:2d:75:d2:27:14:c1:a7:d8:60:8f:26:bd: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:02:6C:2C:AA:C3:91:3D:31:07:F5:EE:28:35:9A:DF:30:DA:ED:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:24:3e:0a:93:de:77:b9:77:e8:ff:83:d7:e1:eb:5b:b0:04: d0:d6:3e:e3:56:8a:50:f9:b4:9d:28:9c:d7:fe:bc:43:a7:a6: 8d:bd:9e:22:e0:1d:d3:c0:a4:e2:05:2b:98:77:78:c0:5c:f6: 97:fc:60:35:e7:4b:be:20:6f:29:5e:a6:c6:f2:01:94:fa:17: 7e:d0:d5:b7:1d:62:cb:21:34:10:4f:19:56:ac:42:48:5c:71: fc:13:9c:86:1a:80:c3:61:39:22:05:2a:41:4a:32:10:f1:c0: df:a0:d7:b5:bc:b3:fb:78:14:64:b1:a1:86:19:ce:ed:4f:24: fa:54:1b:d1:b8:cd:ea:b5:d7:6a:30:a8:d4:c4:83:2b:34:ab: 05:f2:47:f5:51:9a:b6:cf:10:bf:f7:11:a6:2b:d5:76:4b:95: 75:50:a5:0d:54:b6:1f:9c:27:1a:a4:00:ec:d6:9d:2b:96:ab: 23:a3:29:ae:d5:33:7c:a9:a7:ce:55:bd:0f:38:9b:3d:04:55: 9d:7b:e6:ac:d8:38:1a:68:7e:43:52:4a:62:a4:d0:11:1f:68: c9:30:64:81:c6:86:e2:df:71:39:0e:30:08:1d:35:75:d9:01: d1:6f:2e:5b:f1:d3:29:25:86:75:b0:35:53:03:34:0b:1b:5b: 0e:0e:98:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZ5uez36wQYabqrwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDcwOTAxMDAyNVoXDTI0MTAwNzAxMDAyNVowLzEtMCsGA1UEAxMk MWQ5MWYwZTktZmU3OS00NDk4LWIwNzUtZjE4MWUzOGZmNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVaMiomHl1roB9KMsnEQXyoX0mqEy6BTeFkO p5QNT31qGbVKFPFdMSbZJoYsFLkEhUgXGSLLDHtgpz/1OQA1L5l/vdwvmOqUrZ4x uAeiZosWzBLKBLa11PFKguWtU+F1bQvRu2kcjLWqecjqwtugZaAYccgwLNMTOnk5 kiFQyccyj54zcbddAOY3xVfpOskyJeLXda5fBuasJkTPY41EpfPKgWnOFAp7FFQ+ xIGv1pi9Fh9q+1lTSkj8ZptMrJqBR3xhrhU240qFooWExXmlhmgWb8vnCEVNV31j u0NnMYz9EJjqrhxv+TxYihEXC0mYRsctddInFMGn2GCPJr2fBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcCbCyqw5E9MQf17ig1mt8w2u2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkkPgqT3ne5d+j/g9fh61uwBNDWPuNWilD5tJ0onNf+vEOnpo29niLg HdPApOIFK5h3eMBc9pf8YDXnS74gbylepsbyAZT6F37Q1bcdYsshNBBPGVasQkhc cfwTnIYagMNhOSIFKkFKMhDxwN+g17W8s/t4FGSxoYYZzu1PJPpUG9G4zeq112ow qNTEgys0qwXyR/VRmrbPEL/3EaYr1XZLlXVQpQ1Uth+cJxqkAOzWnSuWqyOjKa7V M3ypp85VvQ84mz0EVZ175qzYOBpofkNSSmKk0BEfaMkwZIHGhuLfcTkOMAgdNXXZ AdFvLlvx0yklhnWwNVMDNAsbWw4OmKA= -----END CERTIFICATE-----Generated at Sat Jul 27 02:01:35 2024 by rpki-client on console-fra.rpki-client.org