$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: 43hY3GK1t1N0iJ4365xpRul0IHBrlJ+X+sA9YM2fKMo= Subject key identifier: 05:2D:B2:39:23:C0:3E:2E:9E:18:2B:04:F2:DB:1A:54:D0:9B:54:43 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F43285847213B20278B9E6D0B518F9E00 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:20:27:8b:9e:6d:0b:51:8f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=7b6ebee0-e17a-4cd0-8a89-7178c2a77897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:a3:5b:36:d7:c7:4b:ff:bc:06:c8:2c:19: d5:1f:bd:f5:e1:a8:fb:c3:fe:76:bd:d6:f1:cb:56: f3:c5:91:aa:ad:03:b3:26:f5:fc:21:02:05:ec:ce: c1:22:cb:c2:91:a7:92:7f:71:ad:f7:eb:20:44:cc: 7c:1e:2c:3d:8e:3d:8c:32:2a:35:89:9f:09:5f:43: 03:2f:b4:61:fa:fd:94:91:6e:8b:92:9b:61:59:37: 0c:89:38:84:32:24:c4:4f:30:19:d9:c5:86:41:01: 6a:76:0d:bd:a2:8b:55:77:9f:08:b7:3b:25:96:ca: c4:c3:eb:00:0a:7a:7a:03:ef:11:d7:42:6e:3b:61: 96:6b:9c:ac:39:6d:34:71:80:75:6f:26:a8:86:84: 37:f5:17:a5:fa:21:0d:52:00:9e:cd:6a:2a:48:63: 15:2a:5c:d6:ff:92:f0:c9:11:85:59:09:0c:b5:eb: 22:3f:5b:4c:5b:ae:d0:ee:26:0f:12:a0:b8:01:22: 47:2e:33:2d:15:55:a1:7b:db:e8:81:a3:3f:6c:00: e1:89:65:f5:06:85:5b:65:94:36:ec:2a:02:4d:a0: 51:3c:f6:0d:ab:c4:bf:eb:ea:07:10:6f:0c:6a:7e: 86:99:7d:27:1e:3a:7f:d5:f6:e9:37:2b:a3:00:3b: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2D:B2:39:23:C0:3E:2E:9E:18:2B:04:F2:DB:1A:54:D0:9B:54:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5f:2e:0b:2a:30:16:98:fd:20:97:4e:a4:bf:19:27:63:c4: 56:7a:53:5f:dc:11:4a:a4:a2:a1:6c:a7:e2:fe:0a:38:1f:03: 3d:19:f4:65:17:6f:d8:15:6d:b3:36:38:3d:d3:cb:42:62:8c: b3:2f:68:d2:4f:61:44:84:cc:c9:bf:3f:89:fd:00:3d:96:06: b0:b5:c3:a3:18:af:00:c0:3d:fb:f8:1b:16:60:59:01:c4:42: f3:0f:f4:49:0d:29:ea:be:b1:ac:74:ed:4c:22:29:6a:51:fe: 1a:f4:8f:e7:de:20:14:8a:11:af:59:0d:b4:0b:7e:8a:d2:ef: cb:d2:a4:4f:1e:c7:c3:ae:a3:d8:fe:38:21:ea:09:10:63:4e: 35:f0:b5:f9:34:2c:3e:05:0d:07:77:eb:bb:81:1d:26:09:4f: 8e:c7:d7:00:ac:66:e1:da:5d:9a:06:4b:d9:06:cc:8f:c8:0f: 8f:91:8f:91:cc:e4:55:41:5a:b3:3d:2b:ad:ba:4c:ef:91:52: 94:b0:01:46:50:88:60:e7:c0:8d:7c:72:4e:23:be:e2:5a:c7: 05:2e:4a:24:ae:70:08:0a:6d:3c:a0:e3:c1:0a:f7:3f:3b:1c: a1:8b:4e:a1:c1:60:86:ca:d1:bc:84:da:36:17:5c:a7:d7:4b: d8:df:0b:14 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEchOyAni55tC1GPngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk N2I2ZWJlZTAtZTE3YS00Y2QwLThhODktNzE3OGMyYTc3ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/6jWzbXx0v/vAbILBnVH7314aj7w/52vdbx y1bzxZGqrQOzJvX8IQIF7M7BIsvCkaeSf3Gt9+sgRMx8Hiw9jj2MMio1iZ8JX0MD L7Rh+v2UkW6LkpthWTcMiTiEMiTETzAZ2cWGQQFqdg29ootVd58ItzsllsrEw+sA Cnp6A+8R10JuO2GWa5ysOW00cYB1byaohoQ39Rel+iENUgCezWoqSGMVKlzW/5Lw yRGFWQkMtesiP1tMW67Q7iYPEqC4ASJHLjMtFVWhe9vogaM/bADhiWX1BoVbZZQ2 7CoCTaBRPPYNq8S/6+oHEG8Man6GmX0nHjp/1fbpNyujADuL3QIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFAUtsjkjwD4unhgrBPLbGlTQm1RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCDXy4LKjAWmP0gl06kvxknY8RWelNf3BFKpKKhbKfi/go4HwM9 GfRlF2/YFW2zNjg908tCYoyzL2jST2FEhMzJvz+J/QA9lgawtcOjGK8AwD37+BsW YFkBxELzD/RJDSnqvrGsdO1MIilqUf4a9I/n3iAUihGvWQ20C36K0u/L0qRPHsfD rqPY/jgh6gkQY0418LX5NCw+BQ0Hd+u7gR0mCU+Ox9cArGbh2l2aBkvZBsyPyA+P kY+RzORVQVqzPSutukzvkVKUsAFGUIhg58CNfHJOI77iWscFLkokrnAICm08oOPB Cvc/Oxyhi06hwWCGytG8hNo2F1yn10vY3wsU -----END CERTIFICATE-----Generated at Sun Nov 24 15:55:35 2024 by rpki-client on console-ams.rpki-client.org