$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: H/qCOD/2xNec3qMDVs6hGYll5YOeezriCwRngq30Uig= Subject key identifier: 62:C3:DA:7B:8A:7C:B3:C9:31:B8:C1:59:93:35:74:07:D2:BE:B8:8D Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F432858477230EECB4799DACFFE7F71C0 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 7311 IP address blocks: 23.155.64.0/24 maxlen: 24 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:ee:cb:47:99:da:cf:fe:7f:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=799c7811-ca52-4b80-9dde-a284b93fba11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:17:04:c1:a1:96:8f:c6:00:dc:a5:24:c7: 24:77:45:d4:98:1e:70:80:41:a9:0e:c8:e7:d4:14: b5:5d:b6:96:e0:19:7e:5f:01:00:72:5f:d3:7e:d9: 11:8a:44:d1:e0:76:c1:a9:9e:12:14:74:54:39:05: 10:d4:ca:0d:bc:52:01:73:ab:1a:58:be:79:40:f6: 82:aa:7f:1a:71:cc:28:be:47:9c:b6:64:48:24:7a: 61:ea:2e:72:a9:2f:df:3b:e3:71:b8:88:70:8e:5e: 1d:57:0a:2f:67:06:c2:21:9b:09:9d:27:7e:54:b6: df:b2:16:6a:54:c3:3b:10:75:03:57:c5:e3:f6:c2: 20:59:ae:a2:91:43:ee:5c:e5:6f:48:07:31:ac:a5: 17:c8:f4:74:21:b0:a8:40:f1:b6:ee:dd:40:3d:38: 3a:02:5b:c2:65:4b:41:9d:1b:92:4f:7d:62:90:20: 48:61:6e:08:5c:21:fd:f0:f0:aa:a4:79:64:7a:30: 9d:21:8d:fe:f1:ea:fb:ef:b3:fd:b0:b6:18:cb:d7: 71:bc:fa:49:cc:6a:4a:0f:8c:3a:18:a9:cb:41:e2: ea:25:45:52:36:37:9e:14:a5:67:ab:cf:b6:61:dc: aa:3f:cc:b1:91:ec:25:5e:db:4e:be:2b:2d:4e:d4: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C3:DA:7B:8A:7C:B3:C9:31:B8:C1:59:93:35:74:07:D2:BE:B8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 23.155.64.0/24 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b7:66:5d:67:98:9b:be:3f:de:d2:24:f0:b0:ea:7a:eb:1b: aa:6f:12:d9:b4:64:20:30:c6:b1:36:eb:f3:ee:bf:95:5f:5d: 0f:2a:fc:12:14:20:59:bd:8e:26:50:08:52:e3:9f:57:88:8d: cc:c4:04:9c:1c:85:02:b0:48:52:76:24:9d:91:ac:cf:77:51: b9:d2:60:c7:f2:80:b9:4e:06:a9:e0:78:fa:b8:3e:da:8a:95: 91:41:44:5f:b7:8a:04:af:b5:d7:78:22:9e:5a:f4:20:ce:be: a8:8d:39:b4:7a:b3:c1:b4:d0:8b:3d:8d:3d:58:2d:66:56:bc: 26:8d:c2:46:36:0c:27:5c:b5:c5:30:53:9a:e7:26:dd:1a:0f: 78:17:d2:a4:45:42:2b:b7:a3:b0:1a:d1:7c:97:f6:43:24:57: 5e:9b:d1:38:b7:c6:77:d2:9b:94:01:f2:9d:27:a6:18:fd:73: 28:9e:c4:a4:2c:69:2e:56:c1:9d:83:bb:ec:18:b4:7e:54:a2: 92:41:e7:c1:70:0f:55:d9:bd:72:84:f2:dc:81:13:d8:13:8c: cd:1e:67:76:cc:e0:20:45:9c:9f:6f:19:64:ce:25:90:b7:45: e5:0d:00:19:dd:b2:34:ff:97:23:45:06:12:c9:69:9c:a8:f4: 21:db:2c:83 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdyMO7LR5naz/5/ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk Nzk5Yzc4MTEtY2E1Mi00YjgwLTlkZGUtYTI4NGI5M2ZiYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWUXBMGhlo/GANylJMckd0XUmB5wgEGpDsjn 1BS1XbaW4Bl+XwEAcl/TftkRikTR4HbBqZ4SFHRUOQUQ1MoNvFIBc6saWL55QPaC qn8accwovkectmRIJHph6i5yqS/fO+NxuIhwjl4dVwovZwbCIZsJnSd+VLbfshZq VMM7EHUDV8Xj9sIgWa6ikUPuXOVvSAcxrKUXyPR0IbCoQPG27t1APTg6AlvCZUtB nRuST31ikCBIYW4IXCH98PCqpHlkejCdIY3+8er777P9sLYYy9dxvPpJzGpKD4w6 GKnLQeLqJUVSNjeeFKVnq8+2YdyqP8yxkewlXttOvistTtSzcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGLD2nuKfLPJMbjBWZM1dAfSvriNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5tAAwQA oYG6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADy3Zl1nmJu+P97SJPCw6nrrG6pvEtm0ZCAwxrE26/Puv5Vf XQ8q/BIUIFm9jiZQCFLjn1eIjczEBJwchQKwSFJ2JJ2RrM93UbnSYMfygLlOBqng ePq4PtqKlZFBRF+3igSvtdd4Ip5a9CDOvqiNObR6s8G00Is9jT1YLWZWvCaNwkY2 DCdctcUwU5rnJt0aD3gX0qRFQiu3o7Aa0XyX9kMkV16b0Ti3xnfSm5QB8p0nphj9 cyiexKQsaS5WwZ2Du+wYtH5UopJB58FwD1XZvXKE8tyBE9gTjM0eZ3bM4CBFnJ9v GWTOJZC3ReUNABndsjT/lyNFBhLJaZyo9CHbLIM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org