$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23aa7370-9adf-3374-b716-8bc7fc84862b.roa File: 23aa7370-9adf-3374-b716-8bc7fc84862b.roa (raw, json) Hash identifier: NSsCDaCQTKrN6RoBC9N61Avcjd0a6F6QlMmJMLtW34g= Subject key identifier: 3D:32:9E:F7:FE:15:D9:E0:11:F4:9F:44:C7:5D:87:7B:CD:8F:8C:C2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA5706471AF9F3B3D9500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23aa7370-9adf-3374-b716-8bc7fc84862b.roa Signing time: Thu 24 Oct 2024 18:03:03 +0000 ROA not before: Thu 24 Oct 2024 18:03:03 +0000 ROA not after: Wed 22 Jan 2025 19:03:03 +0000 asID: 401152 IP address blocks: 142.111.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a5:70:64:71:af:9f:3b:3d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:03 2024 GMT Not After : Jan 22 19:03:03 2025 GMT Subject: CN=dd129ecf-315b-4c56-8c26-451aa0700fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:e0:6b:fe:31:0b:6b:31:74:e4:35:5c:b8: 58:ff:a7:52:51:fe:c9:96:b9:4c:fe:6e:8c:bb:bf: 73:3d:f3:d1:51:d2:61:4a:56:d3:51:c5:58:ee:54: 81:18:d9:20:9b:de:94:20:e9:ea:ad:9f:3e:ef:78: 2b:d0:f0:d9:cf:fc:70:ff:d4:09:f2:08:80:6c:f4: 07:54:d8:0b:0e:51:64:78:c6:f2:70:fd:a5:05:b4: 6c:23:2d:43:61:4f:40:ee:41:f7:cd:ba:3a:35:15: da:a4:50:5a:4e:05:e0:5c:c9:f4:16:ac:a2:f9:f9: 73:c4:c0:29:18:76:8f:c7:71:41:62:de:4d:21:b1: a4:de:e0:51:5e:a5:d3:a6:0e:54:63:bd:03:3c:1d: 60:90:4a:a8:ac:ca:37:fc:bf:49:37:0d:99:02:4f: be:2e:f0:a8:14:68:fc:9b:c2:d9:e0:f7:06:3e:fa: 7a:19:31:f9:02:f0:5d:c9:3e:32:9a:b9:87:ff:d8: 2d:68:0f:8b:57:4f:62:c6:ed:9e:0a:82:6a:a3:be: 77:ba:51:6d:2a:5a:d4:9a:78:9c:1c:f9:77:72:1c: fe:84:1c:1d:8e:a1:40:ff:74:8f:eb:85:43:c7:06: 17:0e:e8:41:66:d4:02:0e:39:6f:d4:30:06:f5:e0: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:32:9E:F7:FE:15:D9:E0:11:F4:9F:44:C7:5D:87:7B:CD:8F:8C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23aa7370-9adf-3374-b716-8bc7fc84862b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a0:f4:61:9f:c3:e2:ec:67:c4:bd:b3:83:aa:f8:e2:8a:7f: 86:b9:32:d3:2e:a9:39:d7:4e:ad:cf:7d:52:24:21:45:9f:99: f5:7a:96:3e:00:b0:65:b0:83:d1:79:16:78:fe:a7:9a:a4:38: 67:55:27:31:12:e4:03:25:ce:a5:d2:ff:95:b6:d1:58:33:a6: 61:ad:e5:21:cd:39:4b:3e:f0:e2:c6:8a:fe:0d:c9:de:c6:75: 47:9c:dd:61:46:c2:12:1b:ee:6f:81:1b:13:cd:0b:f5:11:75: 9d:0e:af:97:06:15:75:c4:33:92:a1:18:fc:d0:f0:f0:09:83: ac:e5:40:bd:29:54:f3:fb:95:72:a3:2d:bd:60:f2:02:b7:36: 9c:24:ee:4b:22:f6:45:0a:20:66:5c:a5:87:23:b5:17:33:10: a5:d3:ff:76:47:c4:ed:3d:35:0d:62:f1:9d:38:09:f2:50:cf: ab:68:fb:9f:fc:48:72:0c:bd:56:87:16:c3:1c:2a:80:44:16: a7:55:84:a9:5a:45:8b:35:04:05:b4:c5:e9:7a:2f:a5:18:c0: d9:16:15:cd:9d:92:a3:c8:55:99:ab:41:02:c4:5a:fb:fc:1f: ec:f9:9e:cf:7b:f0:9b:b9:65:03:fa:24:5e:c3:b2:fd:02:25: fe:b9:1b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKVwZHGvnzs9lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwM1oXDTI1MDEyMjE5MDMwM1owLzEtMCsGA1UEAxMk ZGQxMjllY2YtMzE1Yi00YzU2LThjMjYtNDUxYWEwNzAwZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyinga/4xC2sxdOQ1XLhY/6dSUf7JlrlM/m6M u79zPfPRUdJhSlbTUcVY7lSBGNkgm96UIOnqrZ8+73gr0PDZz/xw/9QJ8giAbPQH VNgLDlFkeMbycP2lBbRsIy1DYU9A7kH3zbo6NRXapFBaTgXgXMn0Fqyi+flzxMAp GHaPx3FBYt5NIbGk3uBRXqXTpg5UY70DPB1gkEqorMo3/L9JNw2ZAk++LvCoFGj8 m8LZ4PcGPvp6GTH5AvBdyT4ymrmH/9gtaA+LV09ixu2eCoJqo753ulFtKlrUmnic HPl3chz+hBwdjqFA/3SP64VDxwYXDuhBZtQCDjlv1DAG9eDZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0ynvf+FdngEfSfRMddh3vNj4zCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjNhYTczNzAtOWFkZi0z Mzc0LWI3MTYtOGJjN2ZjODQ4NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADig9GGfw+LsZ8S9s4Oq+OKKf4a5MtMuqTnXTq3PfVIkIUWfmfV6lj4A sGWwg9F5Fnj+p5qkOGdVJzES5AMlzqXS/5W20VgzpmGt5SHNOUs+8OLGiv4Nyd7G dUec3WFGwhIb7m+BGxPNC/URdZ0Or5cGFXXEM5KhGPzQ8PAJg6zlQL0pVPP7lXKj Lb1g8gK3Npwk7ksi9kUKIGZcpYcjtRczEKXT/3ZHxO09NQ1i8Z04CfJQz6to+5/8 SHIMvVaHFsMcKoBEFqdVhKlaRYs1BAW0xel6L6UYwNkWFc2dkqPIVZmrQQLEWvv8 H+z5ns978Ju5ZQP6JF7Dsv0CJf65G34= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org