$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa File: ce5601fe-e061-3205-80ed-165a3269ddb3.roa (raw, json) Hash identifier: vbm0GfkE1vJlkPnL+/ZLDhJlMw8wDNCpIMs8037h0CU= Subject key identifier: 39:23:9A:C8:56:7E:AC:01:F7:57:C1:16:26:2D:3D:33:BB:A7:11:98 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285847A0414440099B4C1C910F5220 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 989 IP address blocks: 8.8.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:44:40:09:9b:4c:1c:91:0f:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=39cf18a6-cf18-4802-8940-052f42dbe3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:e9:87:29:62:23:d7:2e:db:f0:b1:25:b9: 17:12:1f:b3:05:6c:de:47:95:87:76:cc:c4:7e:85: 21:69:33:4d:5b:8f:8b:5b:3b:90:05:df:b8:3c:61: ff:d4:06:f7:c3:5c:26:f6:c3:5f:67:51:38:49:8c: 17:d2:f0:9c:3d:eb:b0:8c:46:fe:2f:ff:80:a1:27: d8:d5:40:a9:f6:68:c4:67:2a:67:ba:81:a6:4c:cc: 05:71:b6:fd:cc:64:35:e7:a7:97:5e:4a:81:e1:7e: fd:38:0a:eb:a6:f0:ea:7e:a0:25:a3:b4:f1:10:c4: 76:e1:7c:c4:0c:9e:63:8d:b2:5c:3f:52:2c:08:69: e7:f5:81:f5:4d:5d:1a:56:fc:81:50:27:2c:b3:94: 18:79:ba:58:9b:15:2a:47:ff:43:99:22:9a:3f:9f: 1e:72:a4:05:f6:90:bc:81:c1:3d:65:78:8f:03:e5: 72:42:80:f0:66:da:a1:ca:ff:a4:63:60:23:82:27: 58:a7:68:91:d2:f4:14:39:35:e7:2f:4f:d3:6b:6c: 98:cd:ea:22:fa:fb:f9:6e:45:5a:28:ed:7b:c4:31: 2e:d9:51:c1:6a:3a:c2:2b:68:d7:3c:d9:56:d2:07: 03:f2:a8:14:6b:59:f3:fe:18:45:36:be:14:35:8f: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:9A:C8:56:7E:AC:01:F7:57:C1:16:26:2D:3D:33:BB:A7:11:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7b:eb:0f:a3:6c:cb:db:5f:23:fe:2c:50:7b:fa:87:ed:0b: 12:91:8a:12:2d:f5:3c:28:dc:35:c3:73:35:a0:41:64:1f:73: 73:bb:ea:5d:95:73:79:89:0c:3b:92:6d:53:1e:29:10:0f:27: ee:b8:32:f0:91:86:d8:90:37:32:a3:ce:91:4d:c8:ae:0e:6e: a0:55:c5:31:26:b3:c8:39:38:46:4d:4d:ca:f1:ae:f3:85:b5: 22:88:6b:5e:90:90:33:a5:ef:8c:b4:f5:d7:75:ae:ee:62:a3: ad:ca:dc:f5:9b:27:f1:98:cf:6b:a5:ee:d9:2b:fc:aa:54:9c: 31:2f:79:0d:68:b5:68:08:a9:d0:51:9b:a8:b3:6f:0c:61:15: 87:d2:9d:80:19:da:7e:7f:6b:81:23:db:f2:dc:cd:53:c5:15: 52:eb:7d:7d:2e:6a:b2:ae:d2:4f:c5:8d:da:e9:5d:7c:e6:3b: e5:1e:2d:5b:ac:e2:4d:a0:ba:f3:60:7f:b6:92:34:7f:4e:d5: 55:3b:c4:27:ee:68:fe:6f:ac:bc:2a:0f:5e:dd:65:44:a3:27: 11:b6:6d:ff:7f:b7:b4:7a:e1:96:48:09:d3:ce:ce:d0:4c:58: 39:ed:60:6c:0d:3f:8b:10:91:63:76:9e:53:a4:e5:21:4f:b6: 48:d0:a5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQURACZtMHJEPUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk MzljZjE4YTYtY2YxOC00ODAyLTg5NDAtMDUyZjQyZGJlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02zphyliI9cu2/CxJbkXEh+zBWzeR5WHdszE foUhaTNNW4+LWzuQBd+4PGH/1Ab3w1wm9sNfZ1E4SYwX0vCcPeuwjEb+L/+AoSfY 1UCp9mjEZypnuoGmTMwFcbb9zGQ156eXXkqB4X79OArrpvDqfqAlo7TxEMR24XzE DJ5jjbJcP1IsCGnn9YH1TV0aVvyBUCcss5QYebpYmxUqR/9DmSKaP58ecqQF9pC8 gcE9ZXiPA+VyQoDwZtqhyv+kY2AjgidYp2iR0vQUOTXnL0/Ta2yYzeoi+vv5bkVa KO17xDEu2VHBajrCK2jXPNlW0gcD8qgUa1nz/hhFNr4UNY8B0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkjmshWfqwB91fBFiYtPTO7pxGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2U1NjAxZmUtZTA2MS0z MjA1LTgwZWQtMTY1YTMyNjlkZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB76w+jbMvbXyP+LFB7+oftCxKRihIt9Two3DXDczWgQWQfc3O76l2V c3mJDDuSbVMeKRAPJ+64MvCRhtiQNzKjzpFNyK4ObqBVxTEms8g5OEZNTcrxrvOF tSKIa16QkDOl74y09dd1ru5io63K3PWbJ/GYz2ul7tkr/KpUnDEveQ1otWgIqdBR m6izbwxhFYfSnYAZ2n5/a4Ej2/LczVPFFVLrfX0uarKu0k/FjdrpXXzmO+UeLVus 4k2guvNgf7aSNH9O1VU7xCfuaP5vrLwqD17dZUSjJxG2bf9/t7R64ZZICdPOztBM WDntYGwNP4sQkWN2nlOk5SFPtkjQpQA= -----END CERTIFICATE-----Generated at Mon Nov 25 01:16:35 2024 by rpki-client on console-fra.rpki-client.org