$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa File: a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa (raw, json) Hash identifier: HYfnn0HifZEMkXCRyCfXqygMMoagHnsF0CPqUzwP2Ck= Subject key identifier: C3:F3:13:83:04:7F:F0:17:B8:F9:44:BA:07:90:4B:19:21:FB:FD:11 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F43285847B3CC09E375A645DF8405DE00 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 22659 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:09:e3:75:a6:45:df:84:05:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=a87694bd-e277-4c17-8d5a-b846e315f568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:1d:3b:64:65:86:2d:78:e6:35:c3:b3:df: 05:16:bd:70:f7:c9:0c:c8:93:d7:83:68:c3:74:69: 5e:50:0e:ad:ce:61:da:7b:bb:ed:8f:21:34:0e:4b: 65:c6:55:a9:49:c7:32:e4:28:53:54:2e:38:ff:58: 1d:81:6d:07:6f:d5:41:9a:10:ba:51:be:10:0a:b1: 5b:41:b9:e3:6b:11:4e:ed:4c:ef:91:22:f5:27:f2: 28:cd:9d:26:6c:94:2f:a0:ef:ea:c5:9d:5d:67:2e: 7e:f0:a0:64:fe:d3:a0:9f:6f:38:8d:40:01:6f:33: 2f:9f:f4:d2:6d:c1:c5:97:04:ca:cf:b8:56:0b:c3: 42:46:44:a5:8a:15:c3:ab:70:a5:cc:10:38:c9:db: 5a:c8:b8:61:2a:a7:57:18:27:bb:85:ce:30:f5:5d: 6f:58:3c:a4:64:83:e7:1b:5f:67:88:25:d1:f6:73: a4:43:78:c5:18:c2:ba:38:d5:af:9a:c2:05:0e:33: 06:da:b9:67:b7:7d:bb:06:6c:72:33:8e:1f:e6:98: 5c:82:cf:12:9a:82:18:38:02:7a:a6:f1:66:e9:f5: dc:f9:15:25:13:b6:47:89:4b:9c:b4:69:ef:22:ad: 1b:0a:ab:83:7c:35:d8:33:48:73:f9:da:9e:34:3b: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F3:13:83:04:7F:F0:17:B8:F9:44:BA:07:90:4B:19:21:FB:FD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8c:40:d2:e1:0a:c6:50:d9:d4:ca:0a:ae:c6:5e:a9:21:a5: 90:40:fd:b3:b3:c2:e7:aa:dd:a4:37:e5:4d:e5:2f:18:36:23: 55:c0:3a:bc:16:39:a7:33:6f:1b:00:e1:c1:2e:c4:e8:d7:89: 73:ef:83:35:a5:74:52:22:f5:6f:6e:ec:ef:e9:1f:b5:7b:1a: 83:24:70:fb:1b:2d:08:92:2b:3b:b0:be:39:c1:89:42:80:77: ad:18:ce:78:3d:d2:58:70:ad:e0:e2:00:04:29:14:c2:91:5b: 86:18:86:d4:fc:c1:c9:0d:e5:1a:42:8f:1b:e8:37:98:18:97: 99:7d:0c:c7:71:df:00:9d:9f:4d:1b:34:4d:fb:73:82:3a:1d: 16:e3:1d:ed:ea:c4:fd:63:9d:cb:7f:eb:80:90:55:3d:d7:40: 6f:f6:72:ab:ce:b1:49:3c:d4:14:0a:85:74:0e:b7:99:6d:6f: 7c:63:e6:07:05:d9:f6:a0:5f:11:10:92:99:8a:48:d9:b7:da: c7:ce:3a:8a:f8:3f:0c:4f:f5:1b:98:5b:0f:ef:d0:22:35:e9: 67:0b:68:86:1b:3a:98:9b:b7:46:24:0a:e2:24:5c:7d:7a:89: 56:77:da:46:18:2f:17:16:8f:f7:af:70:3b:3e:23:54:6b:2f: be:58:d7:74 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEezzAnjdaZF34QF3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YTg3Njk0YmQtZTI3Ny00YzE3LThkNWEtYjg0NmUzMTVmNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1wdO2Rlhi145jXDs98FFr1w98kMyJPXg2jD dGleUA6tzmHae7vtjyE0DktlxlWpSccy5ChTVC44/1gdgW0Hb9VBmhC6Ub4QCrFb QbnjaxFO7UzvkSL1J/IozZ0mbJQvoO/qxZ1dZy5+8KBk/tOgn284jUABbzMvn/TS bcHFlwTKz7hWC8NCRkSlihXDq3ClzBA4ydtayLhhKqdXGCe7hc4w9V1vWDykZIPn G19niCXR9nOkQ3jFGMK6ONWvmsIFDjMG2rlnt327BmxyM44f5phcgs8SmoIYOAJ6 pvFm6fXc+RUlE7ZHiUuctGnvIq0bCquDfDXYM0hz+dqeNDu98wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMPzE4MEf/AXuPlEugeQSxkh+/0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvYTEyNzZhOWMtMmQxYi0z ZTFhLWI4YTItZTA5MjQ5NzA5NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJjEDS4QrGUNnUygquxl6pIaWQQP2zs8Ln qt2kN+VN5S8YNiNVwDq8FjmnM28bAOHBLsTo14lz74M1pXRSIvVvbuzv6R+1exqD JHD7Gy0Ikis7sL45wYlCgHetGM54PdJYcK3g4gAEKRTCkVuGGIbU/MHJDeUaQo8b 6DeYGJeZfQzHcd8AnZ9NGzRN+3OCOh0W4x3t6sT9Y53Lf+uAkFU910Bv9nKrzrFJ PNQUCoV0DreZbW98Y+YHBdn2oF8REJKZikjZt9rHzjqK+D8MT/UbmFsP79AiNeln C2iGGzqYm7dGJAriJFx9eolWd9pGGC8XFo/3r3A7PiNUay++WNd0 -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:11 2024 by rpki-client on console-ams.rpki-client.org