$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa File: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (raw, json) Hash identifier: 5d0zbqTN26PU5AosIqSJKLbZ4hkWQXUbmoRQYI++RFk= Subject key identifier: A5:DF:26:78:33:29:9E:64:20:25:59:C0:A2:67:35:3A:92:B4:4E:C8 Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1 Certificate serial: 010D0C9F4328584754E0C8A0763D4D762C405898 Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 34939 IP address blocks: 23.247.212.0/24 maxlen: 24 23.247.213.0/24 maxlen: 24 23.247.214.0/24 maxlen: 24 23.247.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c8:a0:76:3d:4d:76:2c:40:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=dc99c8a0-0ae0-4c34-98ea-2ad0407ecd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:ef:81:0c:c5:be:ec:6a:2c:25:41:ca:6c: a5:64:0b:cb:36:60:2a:07:f1:d7:82:e8:76:37:1f: 7d:3f:55:59:72:0a:5e:74:b7:2e:cb:3c:72:13:73: b7:d0:93:fb:70:5d:86:44:f3:6b:42:bb:09:ae:60: 04:5b:cf:7e:6f:7a:89:28:31:d5:84:97:99:ed:b0: a2:44:03:2b:2d:70:9b:fd:75:57:de:10:37:9f:67: be:d7:0a:34:bf:eb:99:75:fa:3a:59:b5:72:7b:e2: c5:86:77:ee:1a:06:67:ef:e4:da:f6:9e:be:22:ed: 22:67:d1:6c:ce:09:52:5a:ce:ad:54:3a:b9:4a:dc: 32:bb:45:0a:06:37:05:10:eb:33:07:fb:95:a5:65: b3:b0:60:af:4f:69:ab:27:ea:10:4e:3c:94:76:2e: 84:50:87:05:7d:95:d1:e5:5d:5b:f2:40:73:1e:88: fd:77:9c:71:d7:7a:11:1d:b6:c1:7a:74:17:b0:ce: 19:70:ab:fd:10:43:f7:4a:58:87:ae:c6:b9:ff:9d: 54:f9:2d:64:e8:72:da:67:c3:10:10:b0:01:eb:19: 5c:37:52:98:9a:56:37:e8:1e:47:ff:11:da:f2:a3: 6c:a5:03:14:16:1a:e2:fb:3d:a7:01:10:d2:ee:ab: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:26:78:33:29:9E:64:20:25:59:C0:A2:67:35:3A:92:B4:4E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl X509v3 Authority Key Identifier: keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:94:14:5c:9e:60:6a:0d:ac:c2:7b:16:0e:85:26:95:81:1b: 2f:87:29:7b:48:89:a4:28:19:ee:4d:1a:0a:ba:76:47:ce:de: b4:19:69:d1:e9:8a:35:a8:6e:01:40:0d:5e:01:f6:3c:51:b8: bd:c4:55:f7:10:ab:f4:c7:b3:a6:61:2e:99:1b:06:97:9e:f0: 7e:90:06:05:92:63:5c:77:fe:e2:8e:cf:17:c8:07:23:37:fe: d0:6f:07:56:5b:d5:53:2e:25:a0:e4:96:28:ae:6e:15:09:84: d4:f0:a6:3e:1b:85:c4:38:e4:08:8e:1a:7b:40:06:ff:de:22: 29:cd:ce:d6:60:f3:dc:c3:e3:90:69:4b:2d:71:0f:ce:a5:1b: cc:e0:f0:03:24:57:e3:09:75:88:86:47:d8:e9:ad:85:f4:97: 0e:28:7e:03:31:53:60:85:24:2e:fb:a2:70:35:f7:df:cc:97: f9:a0:68:98:82:56:85:50:12:5b:eb:46:5c:ad:2b:fb:e4:f5: e3:01:79:52:c8:ef:b6:e1:b4:39:3b:2d:dc:42:55:ae:9d:ce: d8:27:ea:02:db:3d:77:cc:de:29:6d:4e:8a:0e:17:20:05:c9: 7e:77:d2:df:64:63:1c:24:48:26:58:81:33:0f:d6:dc:cb:a8: 35:e7:6c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4Migdj1NdixAWJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3Njdl MWMxMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGM5OWM4YTAtMGFlMC00YzM0LTk4ZWEtMmFkMDQwN2VjZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAianvgQzFvuxqLCVBymylZAvLNmAqB/HXguh2 Nx99P1VZcgpedLcuyzxyE3O30JP7cF2GRPNrQrsJrmAEW89+b3qJKDHVhJeZ7bCi RAMrLXCb/XVX3hA3n2e+1wo0v+uZdfo6WbVye+LFhnfuGgZn7+Ta9p6+Iu0iZ9Fs zglSWs6tVDq5Stwyu0UKBjcFEOszB/uVpWWzsGCvT2mrJ+oQTjyUdi6EUIcFfZXR 5V1b8kBzHoj9d5xx13oRHbbBenQXsM4ZcKv9EEP3SliHrsa5/51U+S1k6HLaZ8MQ ELAB6xlcN1KYmlY36B5H/xHa8qNspQMUFhri+z2nARDS7qsoFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXfJngzKZ5kICVZwKJnNTqStE7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1 YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvNWIyNzVhMGEtZDliMC0z NjllLTkyZmUtZGM0Yjg0MDY0NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQwNWEzMmMtOTY0Yy00YjMwLWEw MDgtMGYyODc3NjdlMWMxLzc0MDVhMzJjLTk2NGMtNGIzMC1hMDA4LTBmMjg3NzY3 ZTFjMS5jcmwwHwYDVR0jBBgwFoAU6XN7Fc1m7aMLaGZDcZRSCBP32FgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4 Nzc2N2UxYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6UFFyeYGoNrMJ7Fg6FJpWBGy+HKXtIiaQoGe5NGgq6dkfO3rQZadHp ijWobgFADV4B9jxRuL3EVfcQq/THs6ZhLpkbBpee8H6QBgWSY1x3/uKOzxfIByM3 /tBvB1Zb1VMuJaDkliiubhUJhNTwpj4bhcQ45AiOGntABv/eIinNztZg89zD45Bp Sy1xD86lG8zg8AMkV+MJdYiGR9jprYX0lw4ofgMxU2CFJC77onA199/Ml/mgaJiC VoVQElvrRlytK/vk9eMBeVLI77bhtDk7LdxCVa6dztgn6gLbPXfM3iltTooOFyAF yX530t9kYxwkSCZYgTMP1tzLqDXnbCA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:00 2024 by rpki-client on console-fra.rpki-client.org