$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa File: bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json) Hash identifier: CoqyOohY8q7BN4S/7aiyClnHLwKcvu2CImA757uRTGQ= Subject key identifier: 9E:AB:57:11:B0:69:54:CF:FF:46:54:11:08:AF:A0:A3:B5:82:4C:76 Certificate issuer: /CN=687d1923-22fe-4744-9984-8ca387a57cf3 Certificate serial: 010D0C9F432858476F663370A1BFFA0BB0ABE040 Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 400495 IP address blocks: 23.133.104.0/24 maxlen: 24 2602:fbae::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:33:70:a1:bf:fa:0b:b0:ab:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3 Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=9d73a68b-11e8-4c9a-9867-d441934c2640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:a5:11:14:c2:ee:ab:24:78:d7:6c:69:df: 93:de:72:d0:70:26:0c:b0:1a:8d:81:6e:18:99:66: e8:f0:1b:0a:98:06:b7:a3:ec:1e:d5:b1:ed:eb:a7: 3b:9c:65:fd:10:f0:e4:91:74:68:c8:57:c9:71:29: ab:f2:28:e2:ea:fa:1c:c1:bb:88:06:2c:c4:a2:da: de:55:38:dc:d9:1d:85:4b:28:41:59:4e:3f:0f:24: 26:03:95:a0:13:ca:0c:5c:be:17:1d:47:02:ad:2d: d1:10:3f:36:b4:a4:6c:77:56:d0:d6:04:62:e6:fa: 81:7f:d3:f7:b1:b2:c4:a8:d2:87:eb:37:46:97:fe: 76:e8:72:b3:44:3c:81:24:a1:c6:d9:25:33:cb:7c: c4:44:29:aa:bf:01:72:ea:2d:f3:4f:24:6c:8d:90: 90:da:d9:bd:b4:1e:92:f5:ab:69:98:05:67:5b:00: 03:27:35:23:67:96:f3:a7:50:a3:62:18:e1:26:5e: 80:39:0a:f1:07:3b:e6:ef:43:72:50:b7:51:3b:b0: c1:1b:38:c1:45:39:fa:94:ba:61:d8:9d:2a:0a:6a: df:eb:22:a4:d5:e5:b3:8c:0a:a5:e8:52:ac:53:6b: 28:dc:07:44:53:b3:36:d9:a1:d6:69:c7:00:8a:aa: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:57:11:B0:69:54:CF:FF:46:54:11:08:AF:A0:A3:B5:82:4C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl X509v3 Authority Key Identifier: keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.133.104.0/24 IPv6: 2602:fbae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:32:91:4c:fb:34:3e:90:e1:55:db:f1:6d:21:0c:b6:19:3a: 03:74:ff:ec:33:e9:71:93:12:86:be:c8:41:be:a8:dc:3f:4b: 30:11:c6:64:f5:2c:de:89:0c:92:3e:3b:12:a7:cd:70:2d:f0: 47:22:8f:fe:61:8f:56:1c:ae:c5:c1:9e:b3:2b:62:9f:aa:60: a5:92:f1:77:6c:9e:d3:9f:cb:40:4b:da:d6:f5:81:1c:9c:a4: d2:30:68:84:ee:96:f1:0f:be:24:27:9c:7e:9d:99:01:f2:41: 87:4e:bb:c8:f4:d9:be:fc:4f:f3:6a:99:a5:e2:c2:7e:28:d8: 22:ae:9f:fe:44:b7:f8:25:08:f4:39:fa:d6:44:87:0c:92:ab: 8b:d9:4e:0c:cb:5b:0e:4a:ec:bd:ac:a0:09:32:8e:fc:21:3e: 2c:0f:c1:7a:fd:eb:e8:11:d5:41:79:8a:9c:66:c2:25:59:df: 27:53:40:b1:1a:79:64:1f:d9:ee:ad:e6:bb:ad:d3:92:ae:11: c7:ec:8a:6a:10:69:2d:ce:21:96:c6:82:a4:ea:00:c4:ed:85: 85:4c:d4:32:52:76:be:73:90:0a:20:a0:cd:c6:5d:4e:d3:88: 3b:65:7b:4d:ce:52:6e:e6:68:ef:21:53:37:b0:2f:b8:1e:2c: e7:60:49:ff -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdvZjNwob/6C7Cr4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3 Y2YzMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk OWQ3M2E2OGItMTFlOC00YzlhLTk4NjctZDQ0MTkzNGMyNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbKlERTC7qskeNdsad+T3nLQcCYMsBqNgW4Y mWbo8BsKmAa3o+we1bHt66c7nGX9EPDkkXRoyFfJcSmr8iji6vocwbuIBizEotre VTjc2R2FSyhBWU4/DyQmA5WgE8oMXL4XHUcCrS3RED82tKRsd1bQ1gRi5vqBf9P3 sbLEqNKH6zdGl/526HKzRDyBJKHG2SUzy3zERCmqvwFy6i3zTyRsjZCQ2tm9tB6S 9atpmAVnWwADJzUjZ5bzp1CjYhjhJl6AOQrxBzvm70NyULdRO7DBGzjBRTn6lLph 2J0qCmrf6yKk1eWzjAql6FKsU2so3AdEU7M22aHWaccAiqohswIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ6rVxGwaVTP/0ZUEQivoKO1gkx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvYmY2MTgzY2YtMTdjMi0z YTYzLWI5ZDgtYThjNGU2OWY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5 ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1 N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez ODdhNTdjZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VoMA4E AgACMAgDBgAmAvuuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmMpFM+zQ+kOFV2/FtIQy2GToDdP/sM+lx kxKGvshBvqjcP0swEcZk9SzeiQySPjsSp81wLfBHIo/+YY9WHK7FwZ6zK2KfqmCl kvF3bJ7Tn8tAS9rW9YEcnKTSMGiE7pbxD74kJ5x+nZkB8kGHTrvI9Nm+/E/zapml 4sJ+KNgirp/+RLf4JQj0OfrWRIcMkquL2U4My1sOSuy9rKAJMo78IT4sD8F6/evo EdVBeYqcZsIlWd8nU0CxGnlkH9nurea7rdOSrhHH7IpqEGktziGWxoKk6gDE7YWF TNQyUna+c5AKIKDNxl1O04g7ZXtNzlJu5mjvIVM3sC+4HiznYEn/ -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:38 2024 by rpki-client on console-ams.rpki-client.org