$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: dBIgL8dSHm1+sfiZY4kVIE/MazjGW4XatRkWfVRMJ6s= Subject key identifier: 66:5D:CC:82:C7:5B:33:52:05:E0:06:01:85:40:49:B8:3A:6C:16:44 Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F432858474F4B6BC6CCC81AEAB5C89280 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 399717 IP address blocks: 23.179.176.0/24 maxlen: 24 64.112.106.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:6b:c6:cc:c8:1a:ea:b5:c8:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=4fd380fe-27c7-4299-803b-37fe3a7e2986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:49:a4:16:a9:3a:f4:f7:d8:5b:d1:ff:81: 37:a6:b3:4e:93:b2:63:1d:56:a9:ad:8f:7e:39:24: 0f:5b:23:e6:d5:2c:17:b0:56:20:4d:2d:78:a9:ef: 19:d0:f1:3b:60:c7:21:ca:ac:9a:65:4d:9a:66:27: a1:1a:01:ce:10:2d:1f:20:33:88:87:b2:ab:aa:55: 0e:18:68:68:d4:7e:2c:70:89:98:91:63:74:85:1f: db:41:c1:46:55:32:6a:9e:aa:29:00:ce:3d:d6:53: cb:b8:ec:16:5f:57:cf:d6:c3:91:0e:4d:f5:0e:3b: 8b:89:1c:b0:12:30:a9:a5:83:07:3a:8f:b4:32:a4: af:b0:d2:ba:bd:58:b5:a6:8a:e9:7d:79:cc:8b:fb: d2:ef:c1:71:9d:e1:4e:f5:ba:69:47:61:88:62:3f: bc:36:98:b6:80:f5:e9:3c:2d:b4:0b:13:cf:6c:e2: d4:d7:c6:e1:4b:6c:14:eb:08:db:24:da:8d:d6:32: 90:9e:3d:11:29:3b:b2:2a:33:e1:8b:ef:84:d0:48: a7:10:63:82:9a:43:ad:97:40:11:87:ce:23:d8:90: f6:ba:4b:33:2a:f8:24:9b:5d:90:63:50:7e:75:4f: 54:80:66:13:11:ad:ef:5e:7a:b9:b7:76:67:0a:15: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:CC:82:C7:5B:33:52:05:E0:06:01:85:40:49:B8:3A:6C:16:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:53:1b:f0:86:32:24:de:6a:16:00:90:f4:39:79:93:d6:02: ad:c7:ba:f0:82:56:a7:61:83:c0:8f:f1:c4:0b:df:f7:79:3a: fb:40:92:04:92:81:5a:b8:13:c6:d6:2a:f9:72:7b:b9:4a:5a: ad:38:85:d2:dd:0f:24:d2:1c:f0:8f:17:54:a9:be:6e:36:61: ca:f5:53:e1:f7:65:2a:08:41:79:e7:3a:9f:27:4b:61:88:84: 2c:6b:92:d0:04:2a:7e:74:43:d6:87:f5:3c:c4:c6:7f:0d:b7: b5:ff:61:08:a2:a6:13:89:37:aa:1c:ab:c9:e4:8b:b2:56:71: 4f:ea:3a:f4:10:8c:8e:8b:69:8b:40:a6:4f:38:42:c6:1d:91: bc:b9:f3:eb:d6:7c:89:29:12:37:5a:41:69:7e:6b:e1:01:fa: 50:d2:c5:2f:9b:f0:64:ac:1a:1f:97:2e:1a:44:75:b4:eb:24: a7:d2:dc:7e:49:a4:12:ba:72:1b:30:c9:71:a8:2f:70:b2:52: 1e:e7:d8:9c:42:7c:18:33:29:ee:1f:ca:30:ce:5a:c8:14:32: 02:fa:f1:b8:0c:b4:b5:5d:06:24:69:7f:33:fe:dd:ff:78:c4: 8b:eb:e1:24:44:5d:32:e2:69:c5:a8:76:2c:ef:23:bf:7b:7a: b0:35:d0:c2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEdPS2vGzMga6rXIkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NGZkMzgwZmUtMjdjNy00Mjk5LTgwM2ItMzdmZTNhN2UyOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4dJpBapOvT32FvR/4E3prNOk7JjHVaprY9+ OSQPWyPm1SwXsFYgTS14qe8Z0PE7YMchyqyaZU2aZiehGgHOEC0fIDOIh7KrqlUO GGho1H4scImYkWN0hR/bQcFGVTJqnqopAM491lPLuOwWX1fP1sORDk31DjuLiRyw EjCppYMHOo+0MqSvsNK6vVi1porpfXnMi/vS78FxneFO9bppR2GIYj+8Npi2gPXp PC20CxPPbOLU18bhS2wU6wjbJNqN1jKQnj0RKTuyKjPhi++E0EinEGOCmkOtl0AR h84j2JD2ukszKvgkm12QY1B+dU9UgGYTEa3vXnq5t3ZnChWm2wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGZdzILHWzNSBeAGAYVASbg6bBZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9UxvwhjIk3moWAJD0OXmT1gKt x7rwglanYYPAj/HEC9/3eTr7QJIEkoFauBPG1ir5cnu5SlqtOIXS3Q8k0hzwjxdU qb5uNmHK9VPh92UqCEF55zqfJ0thiIQsa5LQBCp+dEPWh/U8xMZ/Dbe1/2EIoqYT iTeqHKvJ5IuyVnFP6jr0EIyOi2mLQKZPOELGHZG8ufPr1nyJKRI3WkFpfmvhAfpQ 0sUvm/BkrBofly4aRHW06ySn0tx+SaQSunIbMMlxqC9wslIe59icQnwYMynuH8ow zlrIFDIC+vG4DLS1XQYkaX8z/t3/eMSL6+EkRF0y4mnFqHYs7yO/e3qwNdDC -----END CERTIFICATE-----Generated at Fri Nov 22 17:21:18 2024 by rpki-client on console-ams.rpki-client.org