$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa File: 391fae6e-c374-3d34-84aa-27f280411df1.roa (raw, json) Hash identifier: clZkGmJDkO3liG2+ZXZ9S33Ys90rxoJ9QU1MvfhiZfo= Subject key identifier: 2E:1E:B1:F2:C1:CD:31:2B:84:02:E7:71:63:09:91:82:C6:66:6B:A1 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858475910BDCEF6B2AF7697772800 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 20473 IP address blocks: 8.9.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Oct 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:bd:ce:f6:b2:af:76:97:77:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=60fa089f-52ed-4bee-9bd4-6233fef2149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:d0:d4:3d:63:ce:78:50:80:08:a2:81:c2: e3:56:51:27:80:21:29:4c:71:b4:e6:98:4e:c3:54: a8:35:c9:97:43:d4:90:fe:d1:32:a8:01:fa:ea:cb: 52:ae:c5:c8:d9:39:d3:85:58:9c:cc:bc:88:71:fa: e8:00:09:48:f6:21:3d:bf:7f:e1:b5:a5:0d:d8:9b: 1b:a0:14:b6:6d:70:83:b2:b8:9f:c7:fd:1d:6d:ba: 32:2b:42:b9:39:5b:22:4d:20:bd:42:bb:19:8a:c2: 83:7a:83:92:ab:0a:ee:0a:d0:76:8e:f4:1a:42:82: 2e:51:54:99:7c:c4:bf:63:39:88:87:d6:db:90:89: 35:54:a8:6d:2f:7e:f3:8d:f3:eb:8a:61:20:2a:32: 50:04:f1:4e:ed:16:7e:28:5e:93:79:70:06:30:31: e4:73:2e:d4:c7:df:3a:56:39:7a:81:2f:2b:96:22: 27:2d:17:fc:e5:da:75:bf:b2:c7:7b:ab:34:1b:e2: 89:95:c8:97:d2:87:f6:54:10:ee:30:12:33:f9:f3: aa:2c:b5:cc:7b:eb:a8:52:c7:c1:aa:88:4a:c4:f9: e5:ef:23:13:4f:80:1d:7d:24:b4:3c:56:5f:0b:c2: e2:66:2e:4b:cd:47:93:43:51:bd:e5:21:e1:e4:0b: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:B1:F2:C1:CD:31:2B:84:02:E7:71:63:09:91:82:C6:66:6B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c1:1a:f1:90:42:fa:07:b6:c1:89:a5:ef:fa:a8:44:99:1b: 50:f2:76:7b:b3:f3:3c:1c:63:2d:6c:80:e0:96:72:2e:1e:0b: 5c:7d:85:b4:79:57:e2:00:09:3e:ad:d2:7b:03:25:86:15:41: 46:d0:ba:d6:c8:f2:ad:42:68:45:ff:3b:81:1e:5e:30:f3:7e: 88:f9:62:87:bc:2a:b4:44:85:ed:15:4b:ef:8e:5b:c0:12:34: c9:5a:45:06:67:c6:b9:50:93:67:f5:2a:b4:42:75:34:d3:2b: be:63:50:eb:48:a7:82:4f:fb:9e:49:4c:26:5e:e0:8b:1a:fe: d2:ee:01:eb:3a:ad:63:7e:7a:69:e7:5d:14:4c:fc:fb:4a:fe: e7:44:5a:9d:a0:1b:50:10:91:91:2b:05:dc:38:69:ab:6e:4e: a4:49:cc:f9:2b:8f:16:57:cf:3d:16:16:3d:41:b3:13:16:cb: aa:74:2b:8d:10:50:39:f3:a7:b1:fe:26:22:56:09:6f:48:93: f0:df:4d:90:c3:1f:ac:ee:92:77:11:f2:ab:60:20:8c:fb:d5: b3:c0:c8:c0:fa:4b:ea:42:5b:8b:4f:c3:ad:90:d0:4c:53:ff: 9c:7b:ae:1b:b0:89:be:72:af:e3:19:57:9d:40:1d:40:53:1d: b0:97:42:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEL3O9rKvdpd3KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk NjBmYTA4OWYtNTJlZC00YmVlLTliZDQtNjIzM2ZlZjIxNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+HQ1D1jznhQgAiigcLjVlEngCEpTHG05phO w1SoNcmXQ9SQ/tEyqAH66stSrsXI2TnThViczLyIcfroAAlI9iE9v3/htaUN2Jsb oBS2bXCDsrifx/0dbboyK0K5OVsiTSC9QrsZisKDeoOSqwruCtB2jvQaQoIuUVSZ fMS/YzmIh9bbkIk1VKhtL37zjfPrimEgKjJQBPFO7RZ+KF6TeXAGMDHkcy7Ux986 Vjl6gS8rliInLRf85dp1v7LHe6s0G+KJlciX0of2VBDuMBIz+fOqLLXMe+uoUsfB qohKxPnl7yMTT4AdfSS0PFZfC8LiZi5LzUeTQ1G95SHh5AueJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4esfLBzTErhALncWMJkYLGZmuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzkxZmFlNmUtYzM3NC0z ZDM0LTg0YWEtMjdmMjgwNDExZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTBGvGQQvoHtsGJpe/6qESZG1Dydnuz8zwcYy1sgOCWci4eC1x9hbR5 V+IACT6t0nsDJYYVQUbQutbI8q1CaEX/O4EeXjDzfoj5Yoe8KrREhe0VS++OW8AS NMlaRQZnxrlQk2f1KrRCdTTTK75jUOtIp4JP+55JTCZe4Isa/tLuAes6rWN+emnn XRRM/PtK/udEWp2gG1AQkZErBdw4aatuTqRJzPkrjxZXzz0WFj1BsxMWy6p0K40Q UDnzp7H+JiJWCW9Ik/DfTZDDH6zukncR8qtgIIz71bPAyMD6S+pCW4tPw62Q0ExT /5x7rhuwib5yr+MZV51AHUBTHbCXQj8= -----END CERTIFICATE-----Generated at Fri Oct 25 16:49:15 2024 by rpki-client on console-ams.rpki-client.org