$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: t8NMLzSdYTlfbtoIFF2cySaYXrGlY+xJzsB51jTAGGo= Subject key identifier: 74:B1:86:54:88:74:F6:78:0D:38:1E:60:1C:7B:AC:E2:6C:A2:B7:90 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F432858476F663A43D3D5BD44785DAB40 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:3a:43:d3:d5:bd:44:78:5d:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=dc710618-3931-46c5-b3ec-2194ae0c4658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:ec:9c:e0:6d:62:18:af:ea:9f:fa:12:0a: 63:5e:04:2e:9a:82:21:4b:85:58:d1:14:78:9a:9a: 82:aa:3c:50:de:b2:da:fa:d6:2e:55:5a:ae:40:fc: 2b:cd:ae:28:0b:56:69:95:3b:27:d9:a0:c4:7e:19: 36:c5:1d:2e:1c:bf:26:fe:46:d4:a5:cb:43:0f:3d: 58:1f:88:76:c3:19:ee:f4:a9:cd:0f:5f:a8:d4:db: ed:1a:f3:4b:da:09:20:11:ed:ad:17:2d:ce:06:c0: 22:d3:00:b0:64:d6:29:ce:df:f8:5b:1c:d2:95:c4: 20:69:8d:4f:8e:90:9a:9a:78:92:c6:ad:8b:77:35: ab:b9:01:bd:06:5c:ea:9d:48:9b:fa:f9:93:d4:de: b5:2c:42:d5:e1:80:bf:53:0f:4c:da:a2:e7:50:57: 16:5f:c3:f6:2d:46:ed:ca:ea:b5:5a:a8:99:d2:aa: 4d:f4:28:85:61:37:62:2f:e7:fd:8a:d7:29:a2:c5: 42:e1:23:90:bd:75:37:e8:c6:1a:c2:5f:00:f8:8c: 87:2a:62:25:ab:41:bc:67:b2:5d:5d:fb:38:e5:22: ef:c6:a4:4d:20:46:79:fd:94:1d:7a:02:8f:7a:4b: e4:5d:3f:c2:48:38:1c:c2:a2:b8:97:fb:36:a1:9a: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:86:54:88:74:F6:78:0D:38:1E:60:1C:7B:AC:E2:6C:A2:B7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:56:d1:2d:74:b2:3d:a9:27:77:b0:bb:e1:c3:d5:64:f1:42: 22:7f:a5:dd:5e:b8:c9:08:36:df:4a:10:67:07:4f:1b:b8:69: 7b:12:1e:27:e9:82:f3:25:cd:0f:dc:5f:fb:9b:f1:2b:ed:18: 3d:d5:de:6b:44:8e:97:c9:e5:16:13:fe:17:93:60:e9:3a:a9: 6a:2e:a7:4e:9e:a4:a8:63:7b:a9:d7:a5:c4:6d:1f:ca:67:76: 5e:c9:21:65:16:84:3c:04:b4:7b:21:79:53:2a:28:e0:7a:e5: d9:f5:23:c9:51:6b:74:11:21:68:65:e4:5f:bd:41:69:8e:b6: db:f4:57:30:59:a2:9a:1d:4f:e5:8a:5e:33:ab:be:24:f4:c2: 43:4e:31:dc:06:24:e2:f8:ea:f0:73:2c:8f:15:31:58:9f:48: 51:8c:10:59:3e:9a:2f:01:b8:97:90:2d:d1:d2:57:c2:cd:d4: 02:7c:95:7b:5b:ba:67:d8:27:28:de:59:9c:9b:91:f8:69:dc: 41:b9:d8:72:e1:4d:c2:4c:f7:90:ef:45:aa:75:50:91:b4:5e: cb:17:eb:47:18:a9:c7:7f:66:8c:e4:eb:95:53:53:5f:67:e5: fc:54:15:d8:d6:7c:4f:6b:51:d0:fd:26:a3:73:da:db:1b:88: 76:a2:8e:2c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdvZjpD09W9RHhdq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGM3MTA2MTgtMzkzMS00NmM1LWIzZWMtMjE5NGFlMGM0NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTjsnOBtYhiv6p/6EgpjXgQumoIhS4VY0RR4 mpqCqjxQ3rLa+tYuVVquQPwrza4oC1ZplTsn2aDEfhk2xR0uHL8m/kbUpctDDz1Y H4h2wxnu9KnND1+o1NvtGvNL2gkgEe2tFy3OBsAi0wCwZNYpzt/4WxzSlcQgaY1P jpCamniSxq2LdzWruQG9BlzqnUib+vmT1N61LELV4YC/Uw9M2qLnUFcWX8P2LUbt yuq1WqiZ0qpN9CiFYTdiL+f9itcposVC4SOQvXU36MYawl8A+IyHKmIlq0G8Z7Jd Xfs45SLvxqRNIEZ5/ZQdegKPekvkXT/CSDgcwqK4l/s2oZrfjQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHSxhlSIdPZ4DTgeYBx7rOJsoreQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYVtEtdLI9qSd3sLvhw9Vk8UIif6XdXrjJ CDbfShBnB08buGl7Eh4n6YLzJc0P3F/7m/Er7Rg91d5rRI6XyeUWE/4Xk2DpOqlq LqdOnqSoY3up16XEbR/KZ3ZeySFlFoQ8BLR7IXlTKijgeuXZ9SPJUWt0ESFoZeRf vUFpjrbb9FcwWaKaHU/lil4zq74k9MJDTjHcBiTi+OrwcyyPFTFYn0hRjBBZPpov AbiXkC3R0lfCzdQCfJV7W7pn2Cco3lmcm5H4adxBudhy4U3CTPeQ70WqdVCRtF7L F+tHGKnHf2aM5OuVU1NfZ+X8VBXY1nxPa1HQ/Sajc9rbG4h2oo4s -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org