$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa File: 33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa (raw, json) Hash identifier: RfhpSRugUSxgmnGLE4n0LgHPYEgOduQuExx7k1VS3UA= Subject key identifier: F3:27:0F:9A:AB:B4:BC:73:EA:2D:C8:64:7E:14:F5:91:6F:56:8D:5F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA1A09C99C124C4D92780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa Signing time: Thu 24 Oct 2024 18:03:01 +0000 ROA not before: Thu 24 Oct 2024 18:03:01 +0000 ROA not after: Wed 22 Jan 2025 19:03:01 +0000 asID: 401152 IP address blocks: 23.27.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a1:a0:9c:99:c1:24:c4:d9:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:01 2024 GMT Not After : Jan 22 19:03:01 2025 GMT Subject: CN=3fdf30b5-dc6b-4eff-86fa-916f9f5291c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:be:91:72:02:7d:15:99:40:36:7a:69:16: d9:5a:29:92:4f:aa:b1:68:e0:0c:79:7c:ba:ef:12: f3:46:0c:ac:a9:ca:70:c1:44:83:45:63:90:17:17: 61:4e:26:5e:fc:2e:af:c2:66:94:e0:cf:fc:ec:ee: 04:e1:1e:42:b4:99:a0:c5:a0:33:67:1e:b4:21:ca: 53:2c:1b:98:b6:f9:53:35:09:2f:05:db:33:03:b9: 1d:4f:d7:fc:55:53:52:aa:c4:4a:57:68:a2:23:3e: cd:8a:9d:a6:55:8e:27:28:b8:bb:c7:77:68:b9:e6: 56:60:55:ab:a4:10:f7:39:07:1b:0f:1d:be:94:6c: e0:f8:fc:d6:d0:ef:da:1b:48:88:a4:05:ca:8b:5e: 8f:96:fd:1a:76:73:31:2b:63:29:f1:4a:1f:39:54: c2:c2:a6:3e:31:64:68:fb:cb:1c:58:b8:3d:e0:c3: 2f:ef:41:b6:cc:3b:91:cc:2a:07:ff:65:d6:17:9a: 2d:7e:21:54:df:89:88:ef:ad:06:8f:78:bb:f4:e0: 2f:e1:3a:b4:ba:a4:e1:80:23:df:1c:40:13:bd:36: d4:5b:1e:ed:41:62:7f:75:d5:64:3c:6e:37:ad:df: 94:33:fa:fd:73:70:4a:4a:c3:81:44:73:59:31:c3: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:0F:9A:AB:B4:BC:73:EA:2D:C8:64:7E:14:F5:91:6F:56:8D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:70:96:98:99:01:aa:9a:33:56:9a:94:84:18:9c:fd:09:e8: 57:46:b2:0b:47:8d:ec:b2:df:ec:71:66:17:cb:e1:9b:ef:01: fe:f8:8a:30:01:b7:1e:d2:1e:51:fc:7c:43:d7:4a:ea:76:18: af:77:db:ae:ff:6c:93:10:d8:7c:5a:c3:a3:f7:58:7f:27:14: 50:bf:7b:1f:f9:47:ed:cc:c8:fc:f2:c4:5d:0c:c4:27:46:01: 91:a2:62:3f:86:9b:2c:83:ab:3e:e9:04:b9:3a:32:99:2b:d1: 06:cd:59:f2:40:68:45:84:14:b0:ee:69:69:da:43:1e:ac:61: 36:93:fe:f2:80:af:13:f1:3d:94:73:f9:ee:92:88:86:41:ec: 81:96:cd:fa:b1:1d:97:1e:2e:87:31:7f:12:77:0c:71:12:16: 86:9b:3d:52:00:32:64:22:72:00:b7:f0:a3:94:90:1d:6b:39: 5a:7e:b5:7c:54:67:93:52:fc:55:96:de:76:8f:8b:89:67:e7: df:49:86:ef:ec:5e:7b:81:83:b5:c0:5f:5c:74:15:a5:52:5d: 9b:e0:64:54:10:20:b6:1f:2b:d9:cc:00:01:23:0f:b6:21:42: 1b:29:95:ee:d7:72:63:00:3d:0f:1a:4f:44:6b:a4:83:16:e6: 9f:26:13:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKGgnJnBJMTZJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwMVoXDTI1MDEyMjE5MDMwMVowLzEtMCsGA1UEAxMk M2ZkZjMwYjUtZGM2Yi00ZWZmLTg2ZmEtOTE2ZjlmNTI5MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26C+kXICfRWZQDZ6aRbZWimST6qxaOAMeXy6 7xLzRgysqcpwwUSDRWOQFxdhTiZe/C6vwmaU4M/87O4E4R5CtJmgxaAzZx60IcpT LBuYtvlTNQkvBdszA7kdT9f8VVNSqsRKV2iiIz7Nip2mVY4nKLi7x3doueZWYFWr pBD3OQcbDx2+lGzg+PzW0O/aG0iIpAXKi16Plv0adnMxK2Mp8UofOVTCwqY+MWRo +8scWLg94MMv70G2zDuRzCoH/2XWF5otfiFU34mI760Gj3i79OAv4Tq0uqThgCPf HEATvTbUWx7tQWJ/ddVkPG43rd+UM/r9c3BKSsOBRHNZMcOjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMnD5qrtLxz6i3IZH4U9ZFvVo1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzNhMDE1YTQtMDk1ZS0z YTUwLWE0YTktZjJjMTIzZWU5YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5wlpiZAaqaM1aalIQYnP0J6FdGsgtHjeyy3+xxZhfL4ZvvAf74ijAB tx7SHlH8fEPXSup2GK93267/bJMQ2Hxaw6P3WH8nFFC/ex/5R+3MyPzyxF0MxCdG AZGiYj+GmyyDqz7pBLk6Mpkr0QbNWfJAaEWEFLDuaWnaQx6sYTaT/vKArxPxPZRz +e6SiIZB7IGWzfqxHZceLocxfxJ3DHESFoabPVIAMmQicgC38KOUkB1rOVp+tXxU Z5NS/FWW3naPi4ln599Jhu/sXnuBg7XAX1x0FaVSXZvgZFQQILYfK9nMAAEjD7Yh Qhsple7XcmMAPQ8aT0RrpIMW5p8mE1c= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:02 2024 by rpki-client on console-ams.rpki-client.org