$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa File: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (raw, json) Hash identifier: hoFaL3lSN5AVe4zIjvKD0Fo9tvxll7OqegjMuQ3y2m8= Subject key identifier: 0F:FC:74:72:3B:CF:C8:10:E0:32:DB:12:E0:4A:91:E4:08:ED:A7:F3 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584774FB97D80199B9570439DE70 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 64272 IP address blocks: 23.134.64.0/24 maxlen: 24 2602:fecb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:97:d8:01:99:b9:57:04:39:de:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=5e112320-a004-475a-a386-058346daf6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:e1:fe:6e:08:72:e5:c1:fa:9a:66:64:26: fe:0d:20:5a:26:24:d1:16:62:bb:78:6b:cb:c4:92: 9d:1b:64:67:e9:78:3c:71:03:00:79:e2:6e:92:6d: 92:b4:0f:62:e2:74:72:4a:c5:b5:f5:b1:55:89:30: 0f:83:6e:c4:51:00:4c:c0:e7:5f:20:4b:75:33:5b: ec:16:89:ab:36:98:38:5d:8d:71:65:1d:03:45:e1: 9c:c0:14:66:bd:ff:f5:bc:19:a4:51:1f:09:4b:c1: cb:12:a7:46:9b:a5:2d:99:53:cb:c8:a7:41:04:46: cb:8c:04:eb:91:2a:c7:bc:32:cd:b9:0a:e9:fb:00: 7d:6a:35:7a:2c:be:11:a3:80:d4:11:ec:7c:74:68: 7b:8a:7e:fc:36:61:70:0c:10:81:23:aa:9b:4e:63: ef:ec:b8:78:b3:7e:24:ec:5e:e2:c2:a7:3f:22:d9: 7a:c8:78:60:51:b9:30:25:6d:8b:69:fd:9d:7c:a5: 82:fa:51:5b:d9:37:94:f5:da:75:a1:96:f2:1d:ba: 50:56:59:a0:07:38:fb:31:74:0b:86:30:ad:35:94: e5:4e:26:06:5b:25:09:df:1d:99:cf:e9:26:b7:7c: 5f:c0:0e:36:16:e5:34:f4:92:7c:8a:5b:e6:c5:3f: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FC:74:72:3B:CF:C8:10:E0:32:DB:12:E0:4A:91:E4:08:ED:A7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5a:1c:b4:8c:49:58:f6:f3:a9:5c:9f:ac:9f:6a:4b:8c:8e: fb:33:7c:3a:2c:f3:f5:dc:25:e3:b5:79:7b:5c:17:4b:4a:5a: 8f:6a:49:ad:30:bc:fc:89:3b:08:24:30:ba:c4:40:15:dd:06: 71:19:9c:db:10:d1:e6:d8:e6:3e:76:db:eb:f9:1b:e6:59:93: e6:95:23:85:08:f5:8d:53:65:6b:ea:ad:30:54:b7:86:d4:e3: 4a:57:16:9f:8e:f9:3a:9a:bb:7a:a0:f7:a0:c6:86:a5:6d:a4: 38:6b:7d:d7:44:62:c0:c5:5e:44:3a:cc:af:dc:2f:3a:8a:64: 00:be:bc:3e:96:87:fe:e1:eb:0c:d5:cf:5f:8a:6d:a7:55:38: 3c:a0:91:46:d3:1e:09:92:76:4b:dc:f6:5b:79:6d:d4:fa:5a: be:95:60:bf:5b:26:16:3c:43:aa:0e:67:ff:82:c8:dd:13:75: d5:4e:c5:3f:12:5d:fc:91:89:94:67:88:93:e6:45:50:1a:53: f8:10:4e:f9:49:43:5a:81:bf:3a:4b:4a:7c:c5:0f:8f:64:e4: dd:3f:85:fb:cf:59:5b:bb:92:7d:60:02:d3:00:0c:5f:4a:3f: b7:32:7b:ed:7d:7a:4f:87:2e:ca:1e:6e:86:aa:71:22:ab:72: 42:94:e9:49 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEd0+5fYAZm5VwQ53nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk NWUxMTIzMjAtYTAwNC00NzVhLWEzODYtMDU4MzQ2ZGFmNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0fh/m4IcuXB+ppmZCb+DSBaJiTRFmK7eGvL xJKdG2Rn6Xg8cQMAeeJukm2StA9i4nRySsW19bFViTAPg27EUQBMwOdfIEt1M1vs FomrNpg4XY1xZR0DReGcwBRmvf/1vBmkUR8JS8HLEqdGm6UtmVPLyKdBBEbLjATr kSrHvDLNuQrp+wB9ajV6LL4Ro4DUEex8dGh7in78NmFwDBCBI6qbTmPv7Lh4s34k 7F7iwqc/Itl6yHhgUbkwJW2Laf2dfKWC+lFb2TeU9dp1oZbyHbpQVlmgBzj7MXQL hjCtNZTlTiYGWyUJ3x2Zz+kmt3xfwA42FuU09JJ8ilvmxT92pwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA/8dHI7z8gQ4DLbEuBKkeQI7afzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvYTliMDkwYmEtNGUyZS0z ZmQwLWJkYTItZjViMGU3MzhlNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZAMA4E AgACMAgDBgQmAv7LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqWhy0jElY9vOpXJ+sn2pLjI77M3w6LPP1 3CXjtXl7XBdLSlqPakmtMLz8iTsIJDC6xEAV3QZxGZzbENHm2OY+dtvr+RvmWZPm lSOFCPWNU2Vr6q0wVLeG1ONKVxafjvk6mrt6oPegxoalbaQ4a33XRGLAxV5EOsyv 3C86imQAvrw+lof+4esM1c9fim2nVTg8oJFG0x4JknZL3PZbeW3U+lq+lWC/WyYW PEOqDmf/gsjdE3XVTsU/El38kYmUZ4iT5kVQGlP4EE75SUNagb86S0p8xQ+PZOTd P4X7z1lbu5J9YALTAAxfSj+3MnvtfXpPhy7KHm6GqnEiq3JClOlJ -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:32 2024 by rpki-client on console-fra.rpki-client.org