$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa File: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (raw, json) Hash identifier: e+ngzu6hIxzEWRvhvdV9MKNeLScXHOFXlszeH1eOQu0= Subject key identifier: 49:05:0A:D9:73:91:7E:BA:45:8C:28:37:94:F6:AC:C3:1A:B6:1D:C2 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584765A0E5C0D93134CB700A3B80 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 14618 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:e5:c0:d9:31:34:cb:70:0a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=1e5abac7-f22d-4a29-93f8-21a9d05bbc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:1e:9a:54:90:ff:93:f1:de:a1:6c:de:6f: c3:18:ba:f1:6a:e2:1e:c4:1c:e7:7e:8b:91:01:e0: f4:f3:71:67:f5:8c:fe:64:94:4e:71:b2:cd:8f:e3: 7a:e8:8b:a1:0f:1b:65:16:e8:5b:aa:e5:eb:ec:a2: bf:41:f4:3a:a2:a9:cf:8b:06:33:0b:27:15:a5:2b: d8:30:8c:8f:36:c7:ad:50:ad:81:72:ad:83:6e:45: c1:73:82:d5:1c:f6:83:3d:bf:1e:d2:90:00:6b:13: ed:e1:c8:2b:07:78:64:e6:cc:df:a6:73:69:18:1a: 3c:e5:c5:b7:db:25:2a:36:c9:3c:87:58:61:ef:39: e7:09:34:75:61:a9:39:04:c7:3c:ee:da:1d:53:a4: f6:77:6f:67:c2:a9:c6:8f:e3:ef:bb:eb:d9:5c:57: 98:a0:7a:e4:1a:44:1b:42:b5:27:ed:b3:74:01:ee: 41:27:08:02:69:de:97:7e:a1:64:27:5c:a6:8c:09: 3f:9f:bf:30:10:4c:d3:07:a3:6f:50:30:bb:9d:70: 37:3a:9f:71:1b:4f:31:4c:2c:00:42:ea:62:6f:5c: 80:6c:78:c6:e7:6b:71:b4:8f:1f:51:1c:48:a2:9d: 68:9b:4d:6e:c7:a8:56:c5:70:3d:ee:b6:90:c6:25: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:0A:D9:73:91:7E:BA:45:8C:28:37:94:F6:AC:C3:1A:B6:1D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:51:0c:b2:b3:f6:5e:16:c8:85:86:ff:0c:0b:53:a7:86:c9: 16:47:38:03:b6:5d:f7:a0:2e:27:a5:6e:f2:16:de:63:11:53: b4:6f:d6:74:2e:6a:2e:71:be:1b:68:15:99:bf:4e:17:bc:11: 90:6e:96:84:d6:de:c4:84:eb:d4:4b:3f:47:03:7c:94:83:7d: c8:f3:a4:56:b3:5b:9d:ad:9a:f4:bc:5a:dd:7a:21:62:3e:e4: 6f:3a:e0:b3:a4:f2:58:01:85:b1:2c:01:68:fb:65:3a:39:79: 30:e5:e5:fe:46:06:7a:5b:f0:ab:f6:30:29:ee:62:d3:32:9b: a7:06:e9:91:c9:d0:45:e6:2e:b4:5b:80:c6:8a:df:ec:b2:d9: 35:c9:69:3d:07:9d:0e:10:b4:5e:42:da:c3:5c:d5:11:0b:bc: cb:7e:82:4b:1b:82:37:99:3d:1a:6b:b0:aa:b1:78:1f:0a:37: f9:b1:d0:47:fd:5e:70:e4:a7:a2:b1:74:97:a5:8c:77:b3:b9: 73:e8:64:ff:32:4e:fa:fb:52:a5:14:58:d7:82:98:31:44:1e: d5:2b:35:6e:a7:ba:5d:ab:ef:29:2c:8e:68:44:cf:0b:4f:b2: 63:34:2a:12:98:95:92:37:24:e7:12:91:65:ec:25:8d:a6:21: 3b:c4:2c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloOXA2TE0y3AKO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk MWU1YWJhYzctZjIyZC00YTI5LTkzZjgtMjFhOWQwNWJiYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsemlSQ/5Px3qFs3m/DGLrxauIexBznfouR AeD083Fn9Yz+ZJROcbLNj+N66IuhDxtlFuhbquXr7KK/QfQ6oqnPiwYzCycVpSvY MIyPNsetUK2Bcq2DbkXBc4LVHPaDPb8e0pAAaxPt4cgrB3hk5szfpnNpGBo85cW3 2yUqNsk8h1hh7znnCTR1Yak5BMc87todU6T2d29nwqnGj+Pvu+vZXFeYoHrkGkQb QrUn7bN0Ae5BJwgCad6XfqFkJ1ymjAk/n78wEEzTB6NvUDC7nXA3Op9xG08xTCwA Qupib1yAbHjG52txtI8fURxIop1om01ux6hWxXA97raQxiWntQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkFCtlzkX66RYwoN5T2rMMath3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvZGI2OGVmODYtOTQ3NS0z Y2IwLWI1NGUtZGU2N2M1MWExZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpRDLKz9l4WyIWG/wwLU6eGyRZHOAO2XfegLielbvIW3mMRU7Rv1nQu ai5xvhtoFZm/The8EZBuloTW3sSE69RLP0cDfJSDfcjzpFazW52tmvS8Wt16IWI+ 5G864LOk8lgBhbEsAWj7ZTo5eTDl5f5GBnpb8Kv2MCnuYtMym6cG6ZHJ0EXmLrRb gMaK3+yy2TXJaT0HnQ4QtF5C2sNc1RELvMt+gksbgjeZPRprsKqxeB8KN/mx0Ef9 XnDkp6KxdJeljHezuXPoZP8yTvr7UqUUWNeCmDFEHtUrNW6nul2r7yksjmhEzwtP smM0KhKYlZI3JOcSkWXsJY2mITvELKU= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:51 2024 by rpki-client on console-fra.rpki-client.org