$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json) Hash identifier: hPf2bp3RylmSYv4/5qbMrGa1VMwFJ1vA9Ag9YRSJvK4= Subject key identifier: 7D:AF:5D:00:3D:AA:B1:DE:27:81:CE:9E:08:62:09:0A:A0:56:04:F6 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F432858477660FBEE047F62B0506642C0 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 400554 IP address blocks: 23.134.120.0/24 maxlen: 24 2602:fb9d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:60:fb:ee:04:7f:62:b0:50:66:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=d87d085f-6c3c-403e-bc10-b3de41fba1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:d7:4e:51:20:1c:c7:34:a2:ce:65:23:18: da:51:65:9d:8c:c0:45:be:e0:b0:4b:12:af:28:f9: 1d:56:cf:85:b1:8e:f8:a2:2d:ac:5f:91:4e:4d:ad: 7f:8f:18:70:df:6b:0a:44:7d:88:53:96:ed:47:d1: 64:58:fc:55:6f:80:8d:69:f1:0a:71:da:e1:91:6c: 74:87:73:b9:81:cd:4c:77:42:01:ac:6f:3b:55:86: 65:30:eb:4d:e8:de:59:8f:7e:6a:78:dd:96:da:7a: a9:88:06:db:e5:91:e0:0b:69:c1:9f:f6:a5:17:93: 3f:ed:e6:35:09:a8:4a:2a:92:bd:98:75:41:41:ff: 82:69:f7:97:66:4e:0d:74:ff:8b:7f:fa:ad:37:03: 47:98:7b:eb:06:db:7a:c9:3d:33:94:46:08:57:7a: 32:05:1a:56:01:57:df:a3:76:15:55:90:fb:e1:90: e4:ad:78:4b:59:06:df:67:63:c0:1f:5f:75:58:30: b9:8e:78:e6:ab:66:50:d4:41:df:2d:9a:ac:1b:7d: 47:9a:46:4e:a9:34:27:f7:67:d3:e1:6a:59:98:e6: 1a:f5:f2:07:45:f9:06:6f:c9:6b:37:c9:ce:a6:60: 20:af:10:5a:30:a3:2c:d1:17:e4:48:49:da:61:34: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:5D:00:3D:AA:B1:DE:27:81:CE:9E:08:62:09:0A:A0:56:04:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 23.134.120.0/24 IPv6: 2602:fb9d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e0:d7:24:e5:64:a2:9c:98:14:54:91:3d:58:c3:a9:0d:50: 99:35:76:fa:ab:bb:6c:52:77:ae:1d:9c:de:c8:01:75:7b:9d: 38:35:7c:3a:21:6d:77:0d:44:a3:d2:57:fb:5f:90:68:9a:1d: 86:36:2a:c3:88:22:94:ec:8a:11:4d:eb:32:4d:72:36:5a:7d: 16:63:d9:4c:f0:0b:33:99:12:15:ae:a8:bb:e3:77:35:22:21: 50:aa:48:c8:47:29:0a:5c:89:cc:47:ed:2e:56:aa:2b:55:24: 73:b2:29:e2:fe:7d:33:04:f0:71:bf:ef:d1:21:c2:db:7a:ea: e9:f0:3e:a6:61:9a:a7:6b:6e:1e:4d:ab:67:6c:cb:c1:d3:ee: c9:47:81:0a:7d:9a:a9:59:d1:4d:3a:e3:77:25:7e:b5:7b:f9: b0:cb:ec:9c:59:e0:fc:82:7e:29:61:f5:90:40:dd:b0:25:27: 48:ee:9d:e0:80:42:1c:62:2f:3d:df:0f:24:3f:78:88:eb:dd: 03:7c:a2:05:f4:08:8f:5a:9b:0f:4e:14:80:71:56:e5:1d:d1: 3d:b8:97:db:79:16:fe:c4:13:8e:c9:4f:6f:8a:fd:67:b9:7e: 4a:42:11:0d:7c:24:4e:8e:d6:f8:cb:d7:4a:2e:d4:a5:9b:95: 7a:7c:cf:c0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEd2YPvuBH9isFBmQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZDg3ZDA4NWYtNmMzYy00MDNlLWJjMTAtYjNkZTQxZmJhMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHXTlEgHMc0os5lIxjaUWWdjMBFvuCwSxKv KPkdVs+FsY74oi2sX5FOTa1/jxhw32sKRH2IU5btR9FkWPxVb4CNafEKcdrhkWx0 h3O5gc1Md0IBrG87VYZlMOtN6N5Zj35qeN2W2nqpiAbb5ZHgC2nBn/alF5M/7eY1 CahKKpK9mHVBQf+CafeXZk4NdP+Lf/qtNwNHmHvrBtt6yT0zlEYIV3oyBRpWAVff o3YVVZD74ZDkrXhLWQbfZ2PAH191WDC5jnjmq2ZQ1EHfLZqsG31HmkZOqTQn92fT 4WpZmOYa9fIHRfkGb8lrN8nOpmAgrxBaMKMs0RfkSEnaYTT2AwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFH2vXQA9qrHeJ4HOnghiCQqgVgT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvMTk2MDEzNzUtOGI1YS0z YzA1LTlkZmUtYmRjNmY2MDExMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Z4MA4E AgACMAgDBgAmAvudADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw4Nck5WSinJgUVJE9WMOpDVCZNXb6q7ts UneuHZzeyAF1e504NXw6IW13DUSj0lf7X5Bomh2GNirDiCKU7IoRTesyTXI2Wn0W Y9lM8AszmRIVrqi743c1IiFQqkjIRykKXInMR+0uVqorVSRzsini/n0zBPBxv+/R IcLbeurp8D6mYZqna24eTatnbMvB0+7JR4EKfZqpWdFNOuN3JX61e/mwy+ycWeD8 gn4pYfWQQN2wJSdI7p3ggEIcYi893w8kP3iI690DfKIF9AiPWpsPThSAcVblHdE9 uJfbeRb+xBOOyU9viv1nuX5KQhENfCROjtb4y9dKLtSlm5V6fM/A -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:15 2024 by rpki-client on console-ams.rpki-client.org