$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/394e6102-f670-3aff-bd9d-ab7db8d8beef.roa File: 394e6102-f670-3aff-bd9d-ab7db8d8beef.roa (raw, json) Hash identifier: Q+D79bjrWRu9vBwGHZQ8YkvqRHY9KTLUNMkeOixqlDE= Subject key identifier: A0:D8:9D:76:71:17:B7:5A:97:F1:28:BB:B1:11:6E:35:05:49:2D:E0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA1435C990C3B15157380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/394e6102-f670-3aff-bd9d-ab7db8d8beef.roa Signing time: Thu 24 Oct 2024 18:03:01 +0000 ROA not before: Thu 24 Oct 2024 18:03:01 +0000 ROA not after: Wed 22 Jan 2025 19:03:01 +0000 asID: 401152 IP address blocks: 23.27.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a1:43:5c:99:0c:3b:15:15:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:01 2024 GMT Not After : Jan 22 19:03:01 2025 GMT Subject: CN=2088a090-8b57-4732-a0dd-edf816d28df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:79:12:53:6c:fc:6a:a0:70:05:80:81:04: 98:6f:e8:aa:b7:37:1b:03:c9:80:96:46:2c:28:61: ff:c7:7b:36:98:75:ef:7c:6e:1a:b5:2d:3b:b3:29: 9c:c6:6f:19:ab:8f:1c:14:fc:64:63:70:9a:fe:37: 00:bc:7f:69:37:15:ad:21:af:94:b1:5e:df:16:0e: dd:cb:01:0c:54:cf:09:0f:c6:8f:e4:80:ff:91:8c: 12:a1:58:f6:af:02:df:44:a7:d0:fc:3a:3a:bf:25: 4c:54:31:06:02:ea:b5:eb:a1:1c:11:19:95:c1:8c: e9:e1:5f:2e:0f:62:2a:38:48:81:4f:ed:a1:db:d1: 5a:0a:35:a5:61:3e:12:d3:dc:cc:eb:3e:6d:2f:4c: 58:90:65:ef:a4:6e:a8:08:71:e9:f1:2e:9f:7e:e7: c1:1f:05:50:ea:41:bb:68:85:db:23:76:3b:33:31: 0f:2c:98:7e:11:cc:7e:a9:2e:fd:e6:4b:7c:bb:d3: 90:af:47:19:e7:3c:36:7c:ec:4a:a4:09:44:34:b2: ea:4e:64:8e:21:7d:8f:01:19:d6:90:e2:93:0f:00: 51:dd:94:ad:b1:80:73:c6:d2:d4:c2:f2:12:bd:0c: 95:af:c7:6f:0b:76:9f:1c:0e:61:c6:e2:20:30:31: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:9D:76:71:17:B7:5A:97:F1:28:BB:B1:11:6E:35:05:49:2D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/394e6102-f670-3aff-bd9d-ab7db8d8beef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f7:c0:09:40:dd:dc:c1:7d:1f:a6:ea:6c:5a:29:1c:ba:38: d6:f9:aa:d8:05:8c:5e:0c:a2:89:99:38:04:76:43:58:bc:ab: 12:f5:ff:3b:df:a2:68:a4:d1:82:5e:84:76:5a:ee:a8:7c:57: cd:ac:2b:e7:bf:51:3c:9e:08:68:2c:9c:e1:dc:a4:f2:d5:5c: be:03:69:73:e0:57:ee:c0:e8:0f:58:a4:3c:a3:d6:44:13:54: 67:c6:23:36:47:0f:69:d5:19:22:41:69:c8:b3:55:c9:b7:50: 6e:83:86:db:bf:7b:30:b6:5c:ca:49:7d:be:fe:0b:bc:d1:dd: b5:c4:8d:5c:95:a1:2a:56:cd:56:77:a7:bf:41:d8:e0:2b:a6: 1a:29:c3:bb:bf:09:5c:88:ab:3a:ac:d7:a2:09:07:ef:63:a5: 70:86:21:22:f8:b6:35:87:c1:c8:51:24:66:40:1c:66:2a:8c: 5a:6e:9f:7c:fe:7e:05:2a:a7:92:aa:29:18:56:c3:08:f3:72: 64:41:b1:71:84:ae:a2:37:55:1d:1c:90:bc:bb:79:09:0d:e7: cd:fe:bb:38:b2:32:8a:12:8e:58:dc:29:22:be:6a:30:49:34: 86:80:e8:2d:ac:87:dd:28:a5:23:82:4f:7a:aa:11:3d:3c:08: b1:20:9c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKFDXJkMOxUVc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwMVoXDTI1MDEyMjE5MDMwMVowLzEtMCsGA1UEAxMk MjA4OGEwOTAtOGI1Ny00NzMyLWEwZGQtZWRmODE2ZDI4ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp55ElNs/GqgcAWAgQSYb+iqtzcbA8mAlkYs KGH/x3s2mHXvfG4atS07symcxm8Zq48cFPxkY3Ca/jcAvH9pNxWtIa+UsV7fFg7d ywEMVM8JD8aP5ID/kYwSoVj2rwLfRKfQ/Do6vyVMVDEGAuq166EcERmVwYzp4V8u D2IqOEiBT+2h29FaCjWlYT4S09zM6z5tL0xYkGXvpG6oCHHp8S6ffufBHwVQ6kG7 aIXbI3Y7MzEPLJh+Ecx+qS795kt8u9OQr0cZ5zw2fOxKpAlENLLqTmSOIX2PARnW kOKTDwBR3ZStsYBzxtLUwvISvQyVr8dvC3afHA5hxuIgMDED2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDYnXZxF7dal/Eou7ERbjUFSS3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzk0ZTYxMDItZjY3MC0z YWZmLWJkOWQtYWI3ZGI4ZDhiZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX3wAlA3dzBfR+m6mxaKRy6ONb5qtgFjF4MoomZOAR2Q1i8qxL1/zvf omik0YJehHZa7qh8V82sK+e/UTyeCGgsnOHcpPLVXL4DaXPgV+7A6A9YpDyj1kQT VGfGIzZHD2nVGSJBacizVcm3UG6Dhtu/ezC2XMpJfb7+C7zR3bXEjVyVoSpWzVZ3 p79B2OArphopw7u/CVyIqzqs16IJB+9jpXCGISL4tjWHwchRJGZAHGYqjFpun3z+ fgUqp5KqKRhWwwjzcmRBsXGErqI3VR0ckLy7eQkN583+uziyMooSjljcKSK+ajBJ NIaA6C2sh90opSOCT3qqET08CLEgnLE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:53 2024 by rpki-client on console-fra.rpki-client.org