$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa File: 490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa (raw, json) Hash identifier: jLWXxHpu87ETx6pfBteI3gDSFho5s+WS5kDnDRLwPV8= Subject key identifier: 7E:B3:C8:5E:38:1F:79:E2:87:5F:EF:EA:76:84:AA:B3:A2:F9:22:10 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285847A04139A1FBA609E25D4CE700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 989 IP address blocks: 8.8.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:39:a1:fb:a6:09:e2:5d:4c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=e09d3a99-c8b9-4ba8-a320-60fd57c45f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:15:9e:5f:c4:90:e3:fb:59:fe:f8:0c:fc: 17:b4:5d:07:e0:e5:92:df:8d:d3:aa:55:e5:1a:6b: 1c:6c:6d:f1:5a:c6:bc:f3:18:41:23:37:a6:11:a4: da:f6:ba:52:d1:0a:d8:7a:ae:bb:35:69:88:45:b5: 95:d7:16:45:e1:33:f8:89:01:65:e3:ca:3c:d6:c2: 10:2c:9e:db:9b:bc:fa:b5:d2:7b:5c:15:e3:a6:60: 34:ae:77:ec:08:06:e9:bb:20:bb:99:13:36:6f:ed: a5:93:57:0c:be:b1:c2:7f:d8:55:df:d4:36:66:03: 59:53:33:d9:3e:98:4e:5e:32:66:fd:df:02:95:bb: cb:cf:a7:33:08:10:27:19:ca:3b:f9:99:f0:97:86: 80:38:4a:68:19:45:2c:33:8d:46:df:a7:de:82:03: 27:07:2d:2b:a1:60:e5:d8:5b:e3:e0:0b:4e:68:87: a8:40:60:d6:c0:da:45:eb:f1:06:71:3c:6c:87:97: b3:86:e2:b2:f2:8f:68:b5:c7:ca:c1:b2:30:ae:99: be:77:c8:4a:d8:f8:d4:b6:cf:d8:b7:cc:28:5b:31: 7c:68:ff:95:7d:ca:c6:d6:3a:0a:ae:80:1d:8e:da: fc:c7:34:70:c8:8f:e2:a6:5d:7c:4d:c7:4f:2a:9c: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:C8:5E:38:1F:79:E2:87:5F:EF:EA:76:84:AA:B3:A2:F9:22:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9c:b8:69:2f:6b:3b:92:f8:c2:68:c8:e8:1b:cf:7c:d9:1f: e8:88:34:52:ce:b1:5a:ee:be:c5:73:a0:67:04:0e:12:de:84: 1a:90:44:00:ce:f2:ae:8c:03:40:af:85:21:0f:57:d5:22:e0: 06:ac:2a:8a:69:e4:05:17:7e:69:2c:da:92:77:c1:a5:ff:78: 30:dc:9a:31:65:fb:42:af:9e:e1:00:b9:cd:83:94:7b:e4:ed: 64:ac:80:f1:00:ee:0d:dd:58:7a:34:e5:81:3c:65:97:36:47: 9a:6a:c4:ba:ac:a9:a5:fa:80:b8:29:65:a3:89:dd:76:9f:8b: 0f:ef:b6:1f:1f:73:9f:38:85:86:9e:b9:db:c1:48:fe:e5:67: b0:90:2e:ca:28:53:7f:cc:8d:36:f2:9a:a8:46:43:75:4b:be: 39:ef:cc:34:9b:fe:58:b2:d5:64:8d:d0:97:42:42:5f:cd:c5: fe:ff:1f:3b:ad:86:80:10:af:2c:75:24:39:b8:ca:2e:29:44: 00:1b:71:c8:de:e2:60:d3:61:f5:cd:14:bb:8c:c0:91:b3:2d: 45:ff:d1:01:6d:58:46:15:3e:b3:d8:47:af:c0:85:e5:c3:10: 66:ce:7a:d2:b5:ca:fa:22:a9:ac:a4:6f:78:93:74:a0:b4:8b: 5a:93:c6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQTmh+6YJ4l1M5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk ZTA5ZDNhOTktYzhiOS00YmE4LWEzMjAtNjBmZDU3YzQ1ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6gVnl/EkOP7Wf74DPwXtF0H4OWS343TqlXl GmscbG3xWsa88xhBIzemEaTa9rpS0QrYeq67NWmIRbWV1xZF4TP4iQFl48o81sIQ LJ7bm7z6tdJ7XBXjpmA0rnfsCAbpuyC7mRM2b+2lk1cMvrHCf9hV39Q2ZgNZUzPZ PphOXjJm/d8ClbvLz6czCBAnGco7+Znwl4aAOEpoGUUsM41G36feggMnBy0roWDl 2Fvj4AtOaIeoQGDWwNpF6/EGcTxsh5ezhuKy8o9otcfKwbIwrpm+d8hK2PjUts/Y t8woWzF8aP+VfcrG1joKroAdjtr8xzRwyI/ipl18TcdPKpx0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6zyF44H3nih1/v6naEqrOi+SIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDkwZDU1ZTktODJjMC0z Y2Q4LWI4OWMtOGZkMzRmODdmNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCAj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJScuGkvazuS+MJoyOgbz3zZH+iINFLOsVruvsVzoGcEDhLehBqQRADO 8q6MA0CvhSEPV9Ui4AasKopp5AUXfmks2pJ3waX/eDDcmjFl+0KvnuEAuc2DlHvk 7WSsgPEA7g3dWHo05YE8ZZc2R5pqxLqsqaX6gLgpZaOJ3Xafiw/vth8fc584hYae udvBSP7lZ7CQLsooU3/MjTbymqhGQ3VLvjnvzDSb/liy1WSN0JdCQl/Nxf7/Hzut hoAQryx1JDm4yi4pRAAbccje4mDTYfXNFLuMwJGzLUX/0QFtWEYVPrPYR6/AheXD EGbOetK1yvoiqaykb3iTdKC0i1qTxis= -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:58 2024 by rpki-client on console-fra.rpki-client.org