$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa File: 23bb4361-0bbd-3870-a99b-dd859a3e6667.roa (raw, json) Hash identifier: H8Z2t69GuRO9fkrFYzAWiweUNe/+keS5zZdkmdKjVR8= Subject key identifier: D9:9E:7A:8D:5C:F3:1E:B1:79:76:46:18:E2:18:D5:83:36:1A:8D:57 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285847C8D9E45FB0E81BC0CC21B85C Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 396955 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e4:5f:b0:e8:1b:c0:cc:21:b8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=c1a8dcb9-80f5-470e-84d6-dc3042d4b82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:db:e3:33:0e:e7:23:dc:38:09:fc:66:b0: 57:5c:12:1e:74:2a:d7:12:1a:66:c3:23:08:de:31: 36:82:b8:fa:36:2c:9b:57:2c:c7:00:c6:af:fb:d0: 98:f7:7f:0c:7b:c1:1f:04:36:12:52:e6:c6:49:11: 67:9b:05:a3:02:18:d5:50:f0:1c:a8:95:55:67:95: 6a:9e:25:af:e0:17:e4:8b:dd:30:bf:c6:1b:8f:0d: fe:1f:69:58:01:8b:e1:98:06:52:c8:45:be:b1:e0: 7c:a6:a0:23:5d:61:e3:bc:dd:70:3b:89:e7:2a:05: 7a:0a:0b:bf:65:0c:8c:6d:74:d1:93:6d:e8:2d:9f: 5b:d3:95:79:7a:25:5f:5c:9d:ad:5b:d5:b0:4e:ca: fd:c2:15:f7:38:35:f1:8b:8b:ca:a9:af:87:b2:9b: 5e:bb:c6:27:29:5c:8c:7c:d5:cc:0f:2f:58:25:43: 23:cc:03:d8:ac:40:21:eb:ca:0f:ae:9a:4e:1b:d6: d2:09:36:82:f1:b8:82:07:25:14:30:a6:cc:ab:92: 5a:20:14:e2:4d:95:54:89:a8:c4:35:80:c4:01:2b: c1:4f:a8:f7:37:95:ae:22:68:71:f1:c3:76:5b:64: e5:cd:bd:5c:de:c4:29:78:23:1e:48:10:5c:3c:83: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:7A:8D:5C:F3:1E:B1:79:76:46:18:E2:18:D5:83:36:1A:8D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ff:e9:58:d4:ef:e3:9d:99:13:31:31:af:e7:59:28:2e:36: 62:f2:89:5b:46:23:68:28:3c:9c:cd:6a:24:f1:6a:73:08:eb: 01:10:b5:02:aa:b7:10:32:cf:7e:21:55:12:8a:35:70:60:b0: 6a:52:6a:ae:2b:a4:fa:30:98:ef:bc:c9:c1:98:e6:17:76:b3: 0b:9a:93:5b:7d:0b:57:54:c5:f5:7c:8e:62:88:f0:c1:b8:72: 81:70:cc:32:4c:c6:7b:96:97:b3:1b:d4:03:7c:90:f3:0e:61: f4:56:35:ab:5d:23:96:4a:63:a0:28:2c:05:77:8b:65:b4:58: cd:31:ec:49:c6:b7:8b:d9:98:57:d5:0b:f1:c0:7a:21:8a:ae: a7:e8:60:74:b0:89:e4:36:0d:90:ea:65:29:67:36:88:86:ed: b1:44:b0:e2:87:54:e2:ee:28:45:72:74:a3:1b:b4:4c:e5:54: f0:44:f5:3b:80:78:7e:9f:8f:7b:29:c7:1b:31:4c:fc:ea:89: e1:70:be:f6:23:51:e5:dd:a5:7a:a2:0f:b5:75:8c:8a:54:57: 32:c9:21:ba:fd:2a:8e:8f:75:95:56:e1:1a:ce:f8:22:b0:28: 52:45:00:8a:46:0c:96:90:11:33:60:4e:be:9d:ce:2d:5a:99: cf:19:4a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2eRfsOgbwMwhuFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk YzFhOGRjYjktODBmNS00NzBlLTg0ZDYtZGMzMDQyZDRiODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCPb4zMO5yPcOAn8ZrBXXBIedCrXEhpmwyMI 3jE2grj6NiybVyzHAMav+9CY938Me8EfBDYSUubGSRFnmwWjAhjVUPAcqJVVZ5Vq niWv4Bfki90wv8Ybjw3+H2lYAYvhmAZSyEW+seB8pqAjXWHjvN1wO4nnKgV6Cgu/ ZQyMbXTRk23oLZ9b05V5eiVfXJ2tW9WwTsr9whX3ODXxi4vKqa+Hspteu8YnKVyM fNXMDy9YJUMjzAPYrEAh68oPrppOG9bSCTaC8biCByUUMKbMq5JaIBTiTZVUiajE NYDEASvBT6j3N5WuImhx8cN2W2Tlzb1c3sQpeCMeSBBcPIOQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmeeo1c8x6xeXZGGOIY1YM2Go1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMjNiYjQzNjEtMGJiZC0z ODcwLWE5OWItZGQ4NTlhM2U2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3/6VjU7+OdmRMxMa/nWSguNmLyiVtGI2goPJzNaiTxanMI6wEQtQKq txAyz34hVRKKNXBgsGpSaq4rpPowmO+8ycGY5hd2swuak1t9C1dUxfV8jmKI8MG4 coFwzDJMxnuWl7Mb1AN8kPMOYfRWNatdI5ZKY6AoLAV3i2W0WM0x7EnGt4vZmFfV C/HAeiGKrqfoYHSwieQ2DZDqZSlnNoiG7bFEsOKHVOLuKEVydKMbtEzlVPBE9TuA eH6fj3spxxsxTPzqieFwvvYjUeXdpXqiD7V1jIpUVzLJIbr9Ko6PdZVW4RrO+CKw KFJFAIpGDJaQETNgTr6dzi1amc8ZSp4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:55 2024 by rpki-client on console-ams.rpki-client.org