$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa File: 2dc38d89-4e2b-32ab-94d9-e7d405861259.roa (raw, json) Hash identifier: HHqY3s7nlorRlShRsZDiVAXszB1N6t/Fi/i0ksaU3FQ= Subject key identifier: 9A:9A:13:DE:7D:96:4C:7A:1F:49:47:AC:8D:49:94:3D:9D:25:67:13 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285847B1015EDAC854CA305271A180 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 25871 IP address blocks: 8.42.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:5e:da:c8:54:ca:30:52:71:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=f6bd1271-2e19-4c7e-aa6d-84858fae4aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:f6:c1:da:88:ec:58:95:8b:31:ac:12:f4: 37:b4:64:50:6e:ec:fe:91:6f:65:9b:d0:72:4e:ce: a5:73:5d:c1:38:bc:79:f4:74:d7:6a:f9:34:d2:f2: 79:a9:ee:2a:70:1e:44:17:fd:3f:f3:e4:6c:34:34: c4:20:af:30:78:95:3e:63:c5:59:93:28:c8:e2:29: 46:6c:58:6b:06:8f:50:45:57:0f:fe:1e:68:a6:df: 6d:db:3c:09:1a:d2:14:74:21:9f:07:57:aa:50:6c: b3:59:ff:4b:a3:5f:7f:33:12:e9:5a:89:ed:b7:00: 79:6d:9f:ea:62:e2:a9:b8:ac:a2:7c:b9:aa:09:89: ce:36:ce:c2:3f:9a:88:bc:c8:87:fe:89:00:52:aa: 8f:0c:2c:b7:a6:5b:f6:60:20:10:e0:c3:17:0c:7f: fd:cd:8d:d8:1d:84:db:45:e3:d6:05:11:19:68:8f: d7:5f:42:45:59:32:54:77:e4:3e:06:50:17:eb:ca: a8:02:92:c5:bf:bf:b0:69:ce:77:0f:33:52:72:00: b8:72:c8:41:4c:19:21:ab:44:ac:b5:2a:2e:14:1d: e9:eb:12:6e:14:65:0b:61:59:5f:82:3b:b5:2e:fa: 1c:b2:2e:f7:6a:27:91:79:3f:4a:03:b5:27:b8:d9: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9A:13:DE:7D:96:4C:7A:1F:49:47:AC:8D:49:94:3D:9D:25:67:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.42.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6f:16:a5:05:4c:b7:c0:ea:a3:cc:03:42:1d:44:ab:c9:f4: a1:b1:0b:5b:c5:f7:c3:b8:cd:ee:0c:b2:c6:8e:b8:db:a6:8d: 05:59:77:63:82:eb:9c:bf:fc:6f:90:67:f3:0e:da:68:90:07: 86:9a:e7:ce:57:89:f0:7a:72:e3:fc:04:1e:f4:b6:7d:4c:0e: a4:da:bd:03:2b:67:95:4e:32:87:82:18:8a:59:ca:5c:cc:b6: e0:0c:81:b4:46:71:0c:3c:98:48:47:b2:75:95:fa:69:d9:3a: ab:b0:d6:73:1f:d9:6e:21:dd:02:92:64:4b:82:e7:3d:4e:03: dd:78:7d:7c:3e:e7:a2:bd:9b:f5:77:06:11:64:fc:72:4c:2c: 3b:24:2d:f2:db:ed:76:21:5c:f5:f7:71:03:07:4b:2d:12:d3: 80:62:93:11:05:ec:96:72:a2:6e:07:60:0c:be:dc:52:c1:9e: 15:53:03:e5:6d:af:6a:cc:08:9a:a9:42:8f:2d:d4:5f:25:35: 3a:2f:9d:70:9f:6a:35:79:9e:a4:24:f0:e0:2a:73:18:60:84: b8:7c:a4:49:a9:d6:07:e2:c8:a4:21:de:fc:fc:46:b6:e0:9b: 67:9f:b7:00:22:c8:7d:ad:c3:0d:a3:da:33:f9:6a:c7:d4:ca: 9d:b9:ea:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAV7ayFTKMFJxoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZjZiZDEyNzEtMmUxOS00YzdlLWFhNmQtODQ4NThmYWU0YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmib2wdqI7FiVizGsEvQ3tGRQbuz+kW9lm9By Ts6lc13BOLx59HTXavk00vJ5qe4qcB5EF/0/8+RsNDTEIK8weJU+Y8VZkyjI4ilG bFhrBo9QRVcP/h5opt9t2zwJGtIUdCGfB1eqUGyzWf9Lo19/MxLpWonttwB5bZ/q YuKpuKyifLmqCYnONs7CP5qIvMiH/okAUqqPDCy3plv2YCAQ4MMXDH/9zY3YHYTb RePWBREZaI/XX0JFWTJUd+Q+BlAX68qoApLFv7+wac53DzNScgC4cshBTBkhq0Ss tSouFB3p6xJuFGULYVlfgju1Lvocsi73aieReT9KA7UnuNlvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqaE959lkx6H0lHrI1JlD2dJWcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmRjMzhkODktNGUyYi0z MmFiLTk0ZDktZTdkNDA1ODYxMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtvFqUFTLfA6qPMA0IdRKvJ9KGxC1vF98O4ze4MssaOuNumjQVZd2OC 65y//G+QZ/MO2miQB4aa585XifB6cuP8BB70tn1MDqTavQMrZ5VOMoeCGIpZylzM tuAMgbRGcQw8mEhHsnWV+mnZOquw1nMf2W4h3QKSZEuC5z1OA914fXw+56K9m/V3 BhFk/HJMLDskLfLb7XYhXPX3cQMHSy0S04BikxEF7JZyom4HYAy+3FLBnhVTA+Vt r2rMCJqpQo8t1F8lNTovnXCfajV5nqQk8OAqcxhghLh8pEmp1gfiyKQh3vz8Rrbg m2eftwAiyH2tww2j2jP5asfUyp256k8= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org