$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa File: f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa (raw, json) Hash identifier: BRI5iUt84A8yn3rau57v9SKGdR3LYWbSr0OqhuxMiLg= Subject key identifier: B8:B9:5E:A9:7E:E4:4F:F3:AD:AB:88:2B:65:FB:26:A0:F7:90:12:88 Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Certificate serial: 010D0C9F43285847BEF6D6DE2B1B75E2205D5140 Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 40916 IP address blocks: 163.123.152.0/24 maxlen: 24 163.123.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d6:de:2b:1b:75:e2:20:5d:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=aaafc8fc-fe76-4ecf-a6ab-1f8be7edd9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:45:88:f8:7c:a0:98:e5:c4:92:02:3a:4c: c7:53:16:b6:60:c4:60:cb:d8:d2:26:53:5e:42:a5: d5:6a:bc:c8:30:ad:97:c7:02:86:69:c4:26:09:22: 2f:5d:1b:41:20:92:a7:6b:fd:b9:c9:ef:fb:cd:af: 74:0c:ae:6f:75:08:67:e9:09:84:1f:9d:f8:20:c5: 7d:80:18:3a:9b:f3:17:b6:16:ba:11:98:3d:f4:6f: e0:b5:c2:6f:4e:59:4a:67:f0:91:e7:31:1c:7f:6b: 63:3f:1c:dc:5e:7b:b3:50:61:24:ae:ae:a9:1f:f4: 16:36:c9:0f:43:44:45:dc:b7:86:64:65:11:fd:71: 9d:6a:cc:da:6c:2c:7d:48:04:65:70:2e:d1:d8:d8: 4a:29:b8:1f:3e:06:1a:77:9a:56:cc:35:6e:80:9c: cb:53:e7:67:ed:55:1b:84:10:16:7f:2c:de:d0:7c: 0c:a0:e9:a4:91:d0:95:15:ea:bb:08:79:54:22:e4: 65:88:70:e4:46:f0:38:0f:77:28:ed:00:c5:d8:d3: df:4b:d0:9b:f2:93:2a:f7:e5:9b:d7:80:0a:23:1e: 2b:fe:8a:65:ec:1e:85:3b:d2:91:78:00:da:d7:0a: 4b:03:e0:76:3e:1b:42:2a:6f:93:0c:f9:b4:18:07: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:5E:A9:7E:E4:4F:F3:AD:AB:88:2B:65:FB:26:A0:F7:90:12:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl X509v3 Authority Key Identifier: keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer sbgp-ipAddrBlock: critical IPv4: 163.123.152.0/24 163.123.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4b:8c:33:2a:38:36:1e:cc:90:cd:0a:f7:80:1f:fa:60:ad: b0:58:d4:5b:33:04:9e:ae:df:f5:8d:63:d3:4c:37:7e:97:94: e3:77:5a:f0:2e:b2:26:eb:a3:b1:49:28:c2:51:c5:64:93:e5: a3:bc:fd:28:11:39:3a:ec:c1:ed:54:62:d2:7e:94:c8:d4:36: 44:b0:47:dc:6a:7a:61:9f:af:67:90:e3:b4:36:44:23:9d:a3: 1b:8f:d7:5c:92:e9:dd:50:e3:12:6f:c6:00:79:96:81:53:d3: 65:c0:19:13:29:5b:d5:e3:49:bd:44:c3:f3:be:44:5c:8a:3b: e9:1c:42:36:01:d7:de:36:5c:01:e5:84:9e:fd:2f:4d:18:ca: 95:7c:02:dd:ce:46:f1:d5:bb:4d:74:a1:19:c4:c3:0a:55:e4: 5f:d4:8d:52:25:9d:0f:df:a8:f0:c9:0d:53:56:3c:80:0e:0a: 04:2e:43:cd:1e:d3:af:be:a9:f1:84:8d:de:14:52:6e:75:80: b0:0d:4e:6f:b1:44:fa:67:3d:37:87:b8:8d:20:8d:ea:4e:fb: 41:c3:a8:81:13:9f:e9:04:1f:27:10:77:11:b4:60:38:06:f2: 65:84:bf:04:9b:e8:5e:3c:c4:7e:21:82:30:1e:83:0f:26:03: ad:50:de:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEe+9tbeKxt14iBdUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5 ZmUwMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YWFhZmM4ZmMtZmU3Ni00ZWNmLWE2YWItMWY4YmU3ZWRkOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsElFiPh8oJjlxJICOkzHUxa2YMRgy9jSJlNe QqXVarzIMK2XxwKGacQmCSIvXRtBIJKna/25ye/7za90DK5vdQhn6QmEH534IMV9 gBg6m/MXtha6EZg99G/gtcJvTllKZ/CR5zEcf2tjPxzcXnuzUGEkrq6pH/QWNskP Q0RF3LeGZGUR/XGdaszabCx9SARlcC7R2NhKKbgfPgYad5pWzDVugJzLU+dn7VUb hBAWfyze0HwMoOmkkdCVFeq7CHlUIuRliHDkRvA4D3co7QDF2NPfS9Cb8pMq9+Wb 14AKIx4r/opl7B6FO9KReADa1wpLA+B2PhtCKm+TDPm0GAee2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLi5Xql+5E/zrauIK2X7JqD3kBKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1 NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvZjIxZjEwZjAtZGEyZi0z N2M1LTk5ZDUtMDkzNWEyZDc0YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1 OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh ZmMwNTlmZTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAo3uYAwQA o3uaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFNLjDMqODYezJDNCveAH/pgrbBY1FszBJ6u3/WNY9NMN36X lON3WvAusibro7FJKMJRxWST5aO8/SgROTrswe1UYtJ+lMjUNkSwR9xqemGfr2eQ 47Q2RCOdoxuP11yS6d1Q4xJvxgB5loFT02XAGRMpW9XjSb1Ew/O+RFyKO+kcQjYB 1942XAHlhJ79L00YypV8At3ORvHVu010oRnEwwpV5F/UjVIlnQ/fqPDJDVNWPIAO CgQuQ80e06++qfGEjd4UUm51gLANTm+xRPpnPTeHuI0gjepO+0HDqIETn+kEHycQ dxG0YDgG8mWEvwSb6F48xH4hgjAegw8mA61Q3tQ= -----END CERTIFICATE-----Generated at Mon Nov 25 03:10:29 2024 by rpki-client on console-ams.rpki-client.org