$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: nBBBxseH6jr0u1ehOeU85ltZytYW9xC5Fe6Qoz9bpdM= Subject key identifier: F4:E0:B5:12:7E:12:ED:17:9A:46:56:FB:DE:62:9F:4E:C4:AA:9B:ED Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858472835FB39D727117FDD8BAD40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Mon 09 Sep 2024 13:00:41 +0000 ROA not before: Mon 09 Sep 2024 13:00:41 +0000 ROA not after: Sun 08 Dec 2024 14:00:41 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:35:fb:39:d7:27:11:7f:dd:8b:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 9 13:00:41 2024 GMT Not After : Dec 8 14:00:41 2024 GMT Subject: CN=a833ff33-e3c5-4771-a820-89afc964fe16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:67:0a:7b:db:84:46:7d:2a:8d:59:50:c8: 38:94:b8:5f:ad:ac:e9:ca:a0:ad:68:eb:a0:3b:23: 3d:c4:26:1e:5b:ae:65:39:04:16:53:00:57:37:5e: f2:87:a0:12:5e:2a:26:16:aa:0f:44:bf:ad:a0:1c: ef:65:94:d1:b9:9c:d9:ae:7b:f1:b8:41:4a:5a:6e: 0a:01:0b:65:51:e8:40:fe:4c:32:3c:2b:3f:9b:ec: f5:c5:4f:c9:ed:ed:21:a1:ba:c1:79:0c:4d:62:46: a9:5f:05:ad:ca:a7:a9:0d:07:72:dd:30:18:91:a8: ae:0b:a7:fd:12:60:9a:86:88:b8:ab:13:13:c9:20: c8:0f:8c:d2:d5:40:b9:cc:93:dd:73:1f:cb:fd:0d: c4:67:96:ca:7f:e8:72:55:e2:52:41:1e:53:b2:b8: e1:06:c0:c3:cc:ec:29:34:6d:90:0c:64:fb:8c:50: 02:9f:d4:6e:22:78:b3:e7:52:f2:e4:4b:95:78:2c: ba:c5:fa:bd:30:87:1f:ed:ab:a0:98:72:c6:cb:4a: 9d:ec:0c:55:39:1f:5d:cd:66:a1:ae:77:fc:84:0a: b5:dc:de:4b:1d:57:4e:a6:d8:21:d7:e0:8f:2b:4b: 6a:6f:57:5b:c9:a7:1c:9f:b2:f2:fa:8c:f8:af:37: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E0:B5:12:7E:12:ED:17:9A:46:56:FB:DE:62:9F:4E:C4:AA:9B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ce:2a:76:2a:1b:3f:f5:5f:b7:0c:5a:cc:d2:fb:97:72:01: 62:1a:ff:34:b0:86:48:c6:4c:88:97:e0:01:95:ec:4f:8f:5c: 7b:d1:15:f9:b2:b2:f4:a8:1e:56:fe:ef:a1:fc:99:2b:cd:94: 05:df:9e:9a:2b:3e:9a:60:f1:60:db:44:97:45:99:ca:e7:ce: 22:57:9a:91:fb:c7:38:ff:b0:60:3c:d9:cb:3a:d4:5c:b7:dd: 10:b4:16:8a:b0:7a:b3:a2:23:c8:75:b5:dd:77:2a:6d:08:5f: cd:5c:fa:a1:c4:e2:b8:3f:0a:66:7c:33:9d:20:05:42:d3:9d: 6a:89:9f:d0:8f:33:a8:68:cb:1e:07:ad:bd:80:6b:67:e2:f7: fd:be:cd:d7:39:b2:d4:4a:7a:81:6d:52:c1:eb:36:01:d1:2f: be:ba:df:af:e9:fe:92:03:5b:20:9d:4b:0e:2b:31:6e:53:3e: ef:6e:29:bc:af:7c:96:a1:72:96:35:90:b3:d4:b9:f0:aa:e3: 23:5b:94:78:26:80:38:33:8d:f3:29:2a:5f:64:a5:93:01:f1: d1:5f:6f:8e:f8:d6:35:cf:11:c7:a6:96:42:aa:a8:81:d2:c1: fb:76:93:5f:9e:f2:34:e0:93:66:09:d4:aa:5d:3a:d7:8b:f3: 5c:fd:62:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfs51ycRf92LrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YTgzM2ZmMzMtZTNjNS00NzcxLWE4MjAtODlhZmM5NjRmZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxdnCnvbhEZ9Ko1ZUMg4lLhfrazpyqCtaOug OyM9xCYeW65lOQQWUwBXN17yh6ASXiomFqoPRL+toBzvZZTRuZzZrnvxuEFKWm4K AQtlUehA/kwyPCs/m+z1xU/J7e0hobrBeQxNYkapXwWtyqepDQdy3TAYkaiuC6f9 EmCahoi4qxMTySDID4zS1UC5zJPdcx/L/Q3EZ5bKf+hyVeJSQR5TsrjhBsDDzOwp NG2QDGT7jFACn9RuIniz51Ly5EuVeCy6xfq9MIcf7augmHLGy0qd7AxVOR9dzWah rnf8hAq13N5LHVdOptgh1+CPK0tqb1dbyaccn7Ly+oz4rzfgcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTgtRJ+Eu0XmkZW+95in07EqpvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/OKnYqGz/1X7cMWszS+5dyAWIa/zSwhkjGTIiX4AGV7E+PXHvRFfmy svSoHlb+76H8mSvNlAXfnporPppg8WDbRJdFmcrnziJXmpH7xzj/sGA82cs61Fy3 3RC0FoqwerOiI8h1td13Km0IX81c+qHE4rg/CmZ8M50gBULTnWqJn9CPM6hoyx4H rb2Aa2fi9/2+zdc5stRKeoFtUsHrNgHRL76636/p/pIDWyCdSw4rMW5TPu9uKbyv fJahcpY1kLPUufCq4yNblHgmgDgzjfMpKl9kpZMB8dFfb4741jXPEcemlkKqqIHS wft2k1+e8jTgk2YJ1KpdOteL81z9Yng= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org