$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: VnbEIhLPe7NVNwUFmdxJ8o0nYrych6JQdtGmwrHpqnE= Subject key identifier: CA:2C:F2:56:51:47:D0:4A:55:FA:27:EF:25:B3:8D:71:09:BD:5F:77 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F432858478F812D55202D917F9C923980 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:2d:55:20:2d:91:7f:9c:92:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=3d2d8506-0ef8-4ca6-8df8-cb2564b6fdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:10:62:64:bc:a9:f4:bf:b5:be:78:0f:65: 4a:41:71:1e:cd:b0:45:e5:9e:3b:5e:a4:0f:f2:cc: da:b6:d6:a6:8b:bc:fa:f0:ac:21:46:93:02:45:8e: 1e:54:4b:db:96:7f:52:99:a7:59:09:31:92:a4:6d: a3:a3:f0:76:3e:6c:b4:bd:6c:a0:ee:71:07:19:b0: e3:93:95:c0:8b:4d:20:93:3a:eb:e5:0f:59:18:08: 19:8f:5c:2d:bf:cf:24:e2:b4:b1:e4:df:22:0e:3e: 35:51:49:52:d8:9e:77:88:6e:41:4a:08:ab:08:83: 09:a0:70:3a:c2:9a:f5:a7:2c:1b:4c:c6:06:78:b1: 0b:a9:62:0f:bf:00:d0:52:28:4f:cd:29:8e:8f:8d: af:1a:04:30:ff:d1:cb:fd:4d:d5:60:74:2e:5f:31: b8:4a:6e:97:35:f2:92:0d:7a:69:0d:c0:c8:6c:24: 37:f1:9b:a3:64:f7:1c:a5:ab:a1:2b:e2:46:14:a7: fc:92:62:06:cf:f3:e1:52:cb:b9:10:36:ae:83:60: 7b:ad:70:b7:83:e0:5d:6d:cf:40:66:59:13:5e:e9: c6:01:32:8a:53:cf:8f:25:6e:00:17:f6:ed:57:08: 65:32:c2:ac:a3:8d:55:a6:8e:7d:20:d4:06:81:fa: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:F2:56:51:47:D0:4A:55:FA:27:EF:25:B3:8D:71:09:BD:5F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8d:c9:52:e9:77:d7:f2:77:53:f3:14:43:df:7e:a9:57:24: 17:41:0b:9f:1e:fc:6e:f4:76:41:7d:fa:1b:17:bd:74:44:48: 2b:6e:0a:3d:05:65:16:cc:85:2f:27:9e:91:68:46:55:73:f2: ba:1a:7e:d1:c6:02:e2:b9:e9:06:63:70:f0:95:25:ad:7f:74: 74:11:a0:79:cd:af:99:83:5f:f5:67:e2:f9:7e:e5:2d:aa:ff: a5:a0:f9:90:f3:87:17:19:c6:f8:8b:e9:01:61:d3:b9:34:36: 12:0d:dd:f8:ec:3a:73:bf:90:c5:f5:86:92:59:15:2e:ca:ff: f8:1b:7d:90:bd:00:04:1c:b1:cb:1a:13:31:6d:10:48:c8:d0: 3e:b6:f3:61:f7:6e:60:33:b3:ed:8b:cd:cc:b7:21:cc:24:b5: e0:1f:ef:79:50:17:4f:d5:48:6e:b8:95:7e:11:57:69:b9:74: fb:d0:4a:84:9e:77:14:35:46:3b:53:51:cd:8a:1c:b3:80:ff: da:c3:15:44:bb:c6:0e:58:99:2e:82:f3:67:09:7f:67:89:f7: 7d:59:8a:44:4c:c9:bd:90:71:d6:00:0e:d5:c9:db:dd:ee:b9: 0b:dd:68:43:95:de:48:8d:0c:6a:5e:17:c8:dd:a7:1f:d7:8b: ce:02:0c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgS1VIC2Rf5ySOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk M2QyZDg1MDYtMGVmOC00Y2E2LThkZjgtY2IyNTY0YjZmZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtegQYmS8qfS/tb54D2VKQXEezbBF5Z47XqQP 8szattami7z68KwhRpMCRY4eVEvbln9SmadZCTGSpG2jo/B2Pmy0vWyg7nEHGbDj k5XAi00gkzrr5Q9ZGAgZj1wtv88k4rSx5N8iDj41UUlS2J53iG5BSgirCIMJoHA6 wpr1pywbTMYGeLELqWIPvwDQUihPzSmOj42vGgQw/9HL/U3VYHQuXzG4Sm6XNfKS DXppDcDIbCQ38ZujZPccpauhK+JGFKf8kmIGz/PhUsu5EDaug2B7rXC3g+Bdbc9A ZlkTXunGATKKU8+PJW4AF/btVwhlMsKso41Vpo59INQGgfrPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMos8lZRR9BKVfon7yWzjXEJvV93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeNyVLpd9fyd1PzFEPffqlXJBdBC58e/G70dkF9+hsXvXRESCtuCj0F ZRbMhS8nnpFoRlVz8roaftHGAuK56QZjcPCVJa1/dHQRoHnNr5mDX/Vn4vl+5S2q /6Wg+ZDzhxcZxviL6QFh07k0NhIN3fjsOnO/kMX1hpJZFS7K//gbfZC9AAQcscsa EzFtEEjI0D6282H3bmAzs+2Lzcy3IcwkteAf73lQF0/VSG64lX4RV2m5dPvQSoSe dxQ1RjtTUc2KHLOA/9rDFUS7xg5YmS6C82cJf2eJ931ZikRMyb2QcdYADtXJ293u uQvdaEOV3kiNDGpeF8jdpx/Xi84CDP8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org