$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa File: 644ba320-53cb-3343-a8c8-84fea857ab0e.roa (raw, json) Hash identifier: i/jVQjhGo5DtzE2mqDQDijOeD2+9YIgy1ER7nchd1gA= Subject key identifier: 75:68:D4:84:02:BB:7F:D3:AF:23:C9:BA:D3:2C:CB:3C:21:A4:F1:4B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584784566C09C1129E1B024F7300 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 394161 IP address blocks: 8.21.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:6c:09:c1:12:9e:1b:02:4f:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=9267826a-8a10-4f5a-911f-15c7683b87fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:e3:b0:0a:37:1c:6b:a1:04:09:8d:a9:8d: 6a:e3:55:20:48:46:1e:6d:b4:ed:86:5c:cc:16:4e: 22:d1:63:76:ca:52:ce:a9:21:08:a1:2e:65:b3:8c: 67:26:46:86:16:7e:c6:8e:b8:f1:56:a3:77:3e:0d: 7a:fa:7b:34:4a:e7:92:6a:23:d1:ee:99:7a:49:0c: ff:33:f8:54:ae:97:03:8a:96:2a:a4:4e:d5:0a:29: 78:3d:af:a5:93:c2:ed:e1:d7:d7:dc:de:11:aa:3f: 97:03:46:ce:22:72:fb:a7:45:2f:c7:67:da:dd:37: 10:87:b6:7a:a8:35:95:bd:82:3c:e5:c9:e3:55:f3: c8:19:85:1f:30:b5:5d:9b:9e:65:30:b3:c1:d6:f6: b0:30:ae:9e:a2:0d:12:86:d9:89:90:ff:ba:d2:fd: eb:5a:63:43:ed:b3:02:ec:c0:56:0e:d4:98:f1:00: 23:c0:c5:44:a9:47:74:64:5c:85:80:06:54:b0:12: 70:8f:a0:6c:5b:17:03:2e:97:db:8d:29:75:1c:0c: 90:f4:ec:28:df:f4:28:99:b2:cf:f4:df:8e:51:28: 88:53:07:e9:6a:09:64:b5:ed:61:07:e4:05:e9:3d: 2d:1e:2c:eb:be:59:01:24:38:ef:b6:05:21:60:0c: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:68:D4:84:02:BB:7F:D3:AF:23:C9:BA:D3:2C:CB:3C:21:A4:F1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:db:77:db:c4:6e:af:4a:44:48:12:32:57:cb:69:18:c1:45: 11:83:eb:04:3b:d9:2c:c4:f8:8c:3f:8d:c2:5b:37:db:6f:ac: 18:32:6b:84:0a:c4:ca:1f:3b:23:5b:5c:d6:3b:ef:3f:b5:48: ae:a8:d9:00:cc:09:3a:a2:d5:b7:54:fe:08:67:ac:45:eb:31: 9d:ca:db:ee:22:25:60:c5:62:37:d3:d8:ce:ef:ca:bc:ef:a3: 46:10:b3:49:df:7e:f6:55:e5:06:ef:c8:68:a1:ea:37:2f:9a: 29:cc:4b:b9:92:e9:db:d1:15:d8:b3:47:26:97:bf:99:be:f5: 7f:09:14:33:c5:30:ad:69:d0:64:0f:66:42:f5:f9:a5:48:70: 80:95:6f:21:37:8a:b1:3d:24:f0:72:4f:7d:0a:08:5b:ce:84: 60:3e:31:4b:50:18:04:ee:3e:e5:bc:dd:f4:0a:65:6b:4d:f3: ec:a7:aa:77:2e:98:30:8f:a3:62:17:f2:c9:3f:8a:48:26:14: f3:ac:bf:0b:3c:52:25:68:64:5c:5d:88:7d:de:0c:7e:94:97: d9:fa:9f:2b:92:07:7f:a2:e0:d3:24:48:ec:49:25:bc:65:91: 8e:de:db:a3:1f:6e:91:6d:dd:0c:67:e5:71:8a:44:3d:c8:db: 17:98:f5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVmwJwRKeGwJPcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk OTI2NzgyNmEtOGExMC00ZjVhLTkxMWYtMTVjNzY4M2I4N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJPjsAo3HGuhBAmNqY1q41UgSEYebbTthlzM Fk4i0WN2ylLOqSEIoS5ls4xnJkaGFn7GjrjxVqN3Pg16+ns0SueSaiPR7pl6SQz/ M/hUrpcDipYqpE7VCil4Pa+lk8Lt4dfX3N4Rqj+XA0bOInL7p0Uvx2fa3TcQh7Z6 qDWVvYI85cnjVfPIGYUfMLVdm55lMLPB1vawMK6eog0ShtmJkP+60v3rWmND7bMC 7MBWDtSY8QAjwMVEqUd0ZFyFgAZUsBJwj6BsWxcDLpfbjSl1HAyQ9Owo3/QombLP 9N+OUSiIUwfpaglkte1hB+QF6T0tHizrvlkBJDjvtgUhYAx6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVo1IQCu3/TryPJutMsyzwhpPFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjQ0YmEzMjAtNTNjYi0z MzQzLWE4YzgtODRmZWE4NTdhYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjbd9vEbq9KREgSMlfLaRjBRRGD6wQ72SzE+Iw/jcJbN9tvrBgya4QK xMofOyNbXNY77z+1SK6o2QDMCTqi1bdU/ghnrEXrMZ3K2+4iJWDFYjfT2M7vyrzv o0YQs0nffvZV5QbvyGih6jcvminMS7mS6dvRFdizRyaXv5m+9X8JFDPFMK1p0GQP ZkL1+aVIcICVbyE3irE9JPByT30KCFvOhGA+MUtQGATuPuW83fQKZWtN8+ynqncu mDCPo2IX8sk/ikgmFPOsvws8UiVoZFxdiH3eDH6Ul9n6nyuSB3+i4NMkSOxJJbxl kY7e26MfbpFt3Qxn5XGKRD3I2xeY9VA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org