$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa File: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json) Hash identifier: gTAd+RIcnVVxxT9aSJ3KNwZREhSxZVvyRUhIb4CiUHY= Subject key identifier: 46:B6:91:15:D7:5D:9B:53:89:B9:35:51:A0:FD:C4:DB:81:22:93:95 Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Certificate serial: 010D0C9F4328584754E0C937BC3C43FF53AF0C00 Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 400142 IP address blocks: 23.191.176.0/24 maxlen: 24 2602:fc99::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c9:37:bc:3c:43:ff:53:af:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=1b0889b7-cd0e-4290-85e8-0b5585165e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:fa:d5:af:a0:86:c8:55:61:e0:c6:96:da: 9d:0f:82:35:1d:13:be:98:78:c8:4a:d2:17:0b:0e: 65:26:80:ee:56:cb:0f:1f:59:65:28:15:08:64:d9: 93:3d:98:c9:48:c2:fc:5b:31:3a:d7:c2:18:91:93: f5:30:54:e2:ae:a1:f8:1c:b3:c3:c8:39:6c:72:79: a9:19:a0:d9:b0:12:35:56:3f:5d:35:32:73:83:26: 3e:c8:c7:ee:85:da:7e:f9:2a:ad:cd:dc:59:66:7c: d6:49:5e:20:36:ea:48:05:55:a8:2b:f5:60:a9:97: f1:00:b7:e4:15:50:f9:cc:ba:d2:86:c4:00:c2:11: ce:3e:67:fd:ee:30:79:2a:7d:9f:83:14:fc:75:96: 6b:71:18:9e:f1:eb:bb:e7:be:97:32:88:03:0f:f3: de:18:31:40:8a:cf:45:3c:36:9a:2c:63:69:e8:a6: 90:f6:d7:37:38:27:77:f4:f5:d2:53:40:1c:5c:32: 21:74:f9:37:27:e7:b3:07:c6:6e:6c:ac:99:2b:5a: b6:ee:86:fe:c0:c1:e8:55:3d:32:d4:2f:ff:d8:73: 2e:a1:17:5d:84:fa:a0:59:15:66:d5:5b:b0:27:37: 71:6b:3b:31:74:a7:1b:e9:ae:df:d1:f8:33:99:32: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:91:15:D7:5D:9B:53:89:B9:35:51:A0:FD:C4:DB:81:22:93:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl X509v3 Authority Key Identifier: keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer sbgp-ipAddrBlock: critical IPv4: 23.191.176.0/24 IPv6: 2602:fc99::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:89:d1:72:fc:b4:e0:c8:b0:a5:ed:7f:74:f7:62:c9:d4:31: 16:be:cf:f7:18:f9:d0:c8:57:08:a8:ea:3a:fb:ea:86:8d:7d: 4e:7a:90:ad:32:1c:50:e2:8f:59:58:7f:a5:67:9d:2c:b3:4c: a6:bf:e6:da:c2:6a:08:b9:20:8c:7c:e6:24:09:d1:fe:bb:e9: 66:3a:e6:6f:7a:c8:21:d7:1c:41:a7:c4:0d:10:c6:6d:69:fd: 1e:1b:ea:74:c7:9a:e8:f6:47:40:8d:f7:5b:e8:c4:69:72:58: f1:b4:0f:4f:4a:04:22:f8:d9:76:55:72:aa:9f:58:74:4d:42: e6:e8:63:81:c6:15:39:9d:5b:10:b7:ba:9f:fa:4d:f5:7a:6f: e3:af:99:c3:cf:0b:62:e1:18:2c:9e:c9:85:b8:33:16:89:2a: 26:2d:06:8a:28:54:76:5a:1b:45:88:e1:b7:09:d0:a8:03:c2: fc:92:cb:b9:1d:b1:7f:0a:27:5f:06:25:2d:0c:fa:d1:bf:1c: 09:ad:5e:fe:d2:ed:9d:ad:6a:10:c6:40:86:2d:66:c1:07:f4: 22:af:a6:e1:59:1a:8b:51:1c:cc:f7:f2:13:c5:f2:55:96:aa: d2:eb:fb:0d:89:00:cc:2b:b6:8d:88:95:67:41:ef:29:72:2e: a1:29:d8:22 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdU4Mk3vDxD/1OvDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1 MDU1MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MWIwODg5YjctY2QwZS00MjkwLTg1ZTgtMGI1NTg1MTY1ZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyv61a+ghshVYeDGltqdD4I1HRO+mHjIStIX Cw5lJoDuVssPH1llKBUIZNmTPZjJSML8WzE618IYkZP1MFTirqH4HLPDyDlscnmp GaDZsBI1Vj9dNTJzgyY+yMfuhdp++SqtzdxZZnzWSV4gNupIBVWoK/VgqZfxALfk FVD5zLrShsQAwhHOPmf97jB5Kn2fgxT8dZZrcRie8eu7576XMogDD/PeGDFAis9F PDaaLGNp6KaQ9tc3OCd39PXSU0AcXDIhdPk3J+ezB8ZubKyZK1q27ob+wMHoVT0y 1C//2HMuoRddhPqgWRVm1VuwJzdxazsxdKcb6a7f0fgzmTIGHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEa2kRXXXZtTibk1UaD9xNuBIpOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJh ZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvNGExOWMwNjItZDIyNy0z MWQ3LWIwZGMtMmY1MjU1NjdkM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmMyYWU0OGYtNDc1Yi00MmIzLTlh NTYtY2U4ODUyNTE1MDU1LzJjMmFlNDhmLTQ3NWItNDJiMy05YTU2LWNlODg1MjUx NTA1NS5jcmwwHwYDVR0jBBgwFoAUhBs1SSOEDxgolRUcg9Kc2jDt5EwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4 NTI1MTUwNTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+wMA4E AgACMAgDBgQmAvyZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQidFy/LTgyLCl7X9092LJ1DEWvs/3GPnQ yFcIqOo6++qGjX1OepCtMhxQ4o9ZWH+lZ50ss0ymv+bawmoIuSCMfOYkCdH+u+lm OuZvesgh1xxBp8QNEMZtaf0eG+p0x5ro9kdAjfdb6MRpcljxtA9PSgQi+Nl2VXKq n1h0TULm6GOBxhU5nVsQt7qf+k31em/jr5nDzwti4RgsnsmFuDMWiSomLQaKKFR2 WhtFiOG3CdCoA8L8ksu5HbF/CidfBiUtDPrRvxwJrV7+0u2drWoQxkCGLWbBB/Qi r6bhWRqLURzM9/ITxfJVlqrS6/sNiQDMK7aNiJVnQe8pci6hKdgi -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:50 2024 by rpki-client on console-fra.rpki-client.org