$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa File: 097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json) Hash identifier: ls3vaxT8h3x5jPKEgUA3GoKqsPjelfoVpqxt3Unk41A= Subject key identifier: 8C:0A:0E:35:90:59:14:40:54:28:C4:21:E2:E1:BA:36:D1:44:2A:73 Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Certificate serial: 010D0C9F432858478CB68912A915BECBF7D0F080 Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 965 IP address blocks: 23.129.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:89:12:a9:15:be:cb:f7:d0:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=cab793ff-e6d6-49ce-a030-fd73c6f0e43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:6f:68:82:85:bb:33:6b:3b:d3:2b:27:c9: d9:26:36:de:3c:35:6b:4f:f1:d5:60:df:13:54:00: 28:f2:dc:e3:e1:45:d7:33:17:2a:e0:0e:3c:c2:22: c9:a2:e0:55:97:12:60:2a:0c:14:c0:31:33:4e:93: 60:77:f3:41:80:4f:c7:3b:2a:ca:87:c3:af:06:66: df:bb:cc:c5:4c:2d:ce:4a:27:f5:17:42:ee:18:95: 07:b6:e4:c5:c7:4e:1d:6e:e1:ea:60:43:29:eb:fb: fe:8e:70:c5:d1:28:0e:b9:22:16:86:81:3e:b5:b4: 94:c0:d5:82:92:94:4a:60:0c:be:54:4e:fd:01:66: 11:37:ed:67:8d:cd:31:bf:2a:8f:3e:ab:59:74:63: 68:6a:3f:13:bc:16:a0:ae:9c:a5:2d:b2:51:0b:f1: 05:8b:6c:18:f4:6c:39:2a:81:2d:20:90:da:ff:6c: a3:9b:7f:76:d8:db:ef:d1:81:b4:3c:0a:54:b9:7d: 34:be:95:9c:f4:c8:d2:f8:af:72:70:e9:a3:06:b9: e6:f3:9c:e2:f5:19:96:dc:7b:3f:45:e2:3c:45:56: e4:c1:cb:e8:0c:f4:9d:76:28:b8:70:0b:d5:6c:75: c5:d9:63:e3:b5:d6:03:b5:a1:73:a1:9b:0e:33:8d: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:0E:35:90:59:14:40:54:28:C4:21:E2:E1:BA:36:D1:44:2A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl X509v3 Authority Key Identifier: keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8c:94:06:a9:c8:06:59:f5:d8:8f:b7:a7:b0:40:fe:70:37: e0:c7:42:fe:b5:c0:52:a4:a8:5b:b1:5c:f7:91:b3:ad:7e:30: d1:5c:ac:4a:e7:b7:10:29:75:44:97:2b:78:6c:77:73:07:4b: d7:61:b3:e2:94:9b:55:ad:3a:dc:05:44:09:a4:d9:f0:90:a0: 9c:1a:ed:2b:75:9b:27:22:8c:e7:74:e7:42:75:12:67:7e:a3: a9:0d:1e:ff:e9:83:ef:6c:88:8f:65:ea:1e:2e:55:54:d9:d0: a6:c5:1d:aa:18:ca:1a:f1:ef:70:1d:aa:64:cd:05:52:af:9a: 0c:91:6d:cc:e6:af:12:83:b6:3f:cb:cb:bf:cc:99:dc:33:ba: 65:2b:d1:bd:c2:f7:82:5d:69:f9:04:7e:e3:99:4f:98:1e:bf: 2c:37:57:fb:a8:04:47:eb:bb:8f:20:d8:2b:71:33:a1:d7:0e: df:8c:92:e5:98:c4:cb:bd:66:a6:e6:7e:0f:05:f8:bd:8d:18: 9f:55:30:41:d4:e3:37:3b:3a:76:b6:ba:ca:e9:40:16:d6:93: a3:a9:e3:10:68:72:33:50:d0:96:7a:69:8e:84:80:89:e2:eb: d0:c0:40:26:76:e2:6a:f9:42:53:e3:54:a0:6f:2d:84:c2:9f: 92:40:f6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtokSqRW+y/fQ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk Y2JmMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk Y2FiNzkzZmYtZTZkNi00OWNlLWEwMzAtZmQ3M2M2ZjBlNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYpvaIKFuzNrO9MrJ8nZJjbePDVrT/HVYN8T VAAo8tzj4UXXMxcq4A48wiLJouBVlxJgKgwUwDEzTpNgd/NBgE/HOyrKh8OvBmbf u8zFTC3OSif1F0LuGJUHtuTFx04dbuHqYEMp6/v+jnDF0SgOuSIWhoE+tbSUwNWC kpRKYAy+VE79AWYRN+1njc0xvyqPPqtZdGNoaj8TvBagrpylLbJRC/EFi2wY9Gw5 KoEtIJDa/2yjm3922Nvv0YG0PApUuX00vpWc9MjS+K9ycOmjBrnm85zi9RmW3Hs/ ReI8RVbkwcvoDPSddii4cAvVbHXF2WPjtdYDtaFzoZsOM41sTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwKDjWQWRRAVCjEIeLhujbRRCpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3 MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMDk3YzA5NWQtZWNlNC0z YWI5LWI2NTQtMjFhNjdjOGI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5 NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0 ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2MlAapyAZZ9diPt6ewQP5wN+DHQv61wFKkqFuxXPeRs61+MNFcrErn txApdUSXK3hsd3MHS9dhs+KUm1WtOtwFRAmk2fCQoJwa7St1mycijOd050J1Emd+ o6kNHv/pg+9siI9l6h4uVVTZ0KbFHaoYyhrx73AdqmTNBVKvmgyRbczmrxKDtj/L y7/MmdwzumUr0b3C94JdafkEfuOZT5gevyw3V/uoBEfru48g2CtxM6HXDt+MkuWY xMu9Zqbmfg8F+L2NGJ9VMEHU4zc7Ona2usrpQBbWk6Op4xBocjNQ0JZ6aY6EgIni 69DAQCZ24mr5QlPjVKBvLYTCn5JA9ng= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org