$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa File: 4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa (raw, json) Hash identifier: QzwO7Usf4EZX/6vVvXLDoIwVZWtf4pI8HQqVeL5omt0= Subject key identifier: C8:50:E2:FA:DB:1D:31:8B:5A:9C:5C:53:41:FE:6F:74:C5:89:92:23 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F43285847B1015A2CC168D4DDB8C2B080 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 16509 IP address blocks: 23.180.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:5a:2c:c1:68:d4:dd:b8:c2:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=33834ce9-7b2e-4d4c-86a0-db614bee92b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:10:8b:1f:04:37:6c:74:9c:6d:22:e7:dd: c3:fe:14:f4:5a:9d:30:97:68:4a:29:4e:02:66:5a: fa:52:51:67:e6:7e:85:93:bd:1d:59:23:41:30:c7: 79:40:ba:c5:f4:87:4d:bf:17:6d:3d:aa:ac:74:b5: de:05:32:ba:a7:ea:46:cd:1d:72:64:36:4d:9e:16: e6:e8:4b:36:3e:1d:c9:c9:31:25:d0:55:4f:d9:d9: 66:ff:f8:d3:31:9c:5e:b6:3f:9e:c5:97:87:6e:84: e1:13:4d:53:9c:5b:bd:11:13:02:ab:27:a8:28:0a: 53:aa:1c:4c:23:37:fd:dd:07:09:ed:86:75:43:1e: a5:9a:10:80:a1:83:c4:98:18:05:04:fe:0f:6e:63: cc:0c:71:0d:e7:16:19:fc:b6:49:b6:ca:53:ad:b0: be:a8:eb:0b:2a:d8:6c:8a:76:62:2e:91:d0:b0:aa: ba:04:01:92:22:a1:96:4b:a1:1b:57:58:ce:b0:7d: 53:42:cc:4b:4f:c4:40:5f:70:5c:4b:ca:5d:d4:b1: 27:77:b4:32:20:46:02:de:33:37:d2:66:5e:61:eb: ea:da:94:c5:4e:ae:57:3a:02:38:9f:f4:8e:be:5d: 31:bb:b5:3e:e7:98:50:5d:df:d7:b6:d7:26:66:b3: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:E2:FA:DB:1D:31:8B:5A:9C:5C:53:41:FE:6F:74:C5:89:92:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 23.180.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1d:31:8c:31:25:73:60:ee:e1:04:8e:77:3d:bd:b4:2a:5e: 7b:9f:33:ba:3a:a4:24:84:40:52:77:60:d3:26:41:45:a6:4b: fe:3e:91:a7:a3:1e:99:16:f4:62:3e:35:ff:10:a1:62:f3:dc: 6a:e5:20:99:10:f4:da:1a:11:d0:bf:88:69:21:14:e0:bd:72: 9e:e8:ae:b2:31:f0:5f:7a:45:c5:5d:14:37:e3:aa:18:a0:d6: b0:a7:72:91:2f:a3:c6:6f:01:b0:05:fb:32:a5:63:c5:ad:61: 57:ad:04:09:50:9e:a0:75:47:31:1a:c7:d4:6a:8a:33:62:5a: 5a:d7:16:04:ac:f3:51:f4:7a:26:2e:d0:a1:a8:51:15:a3:7e: 93:c3:ca:53:35:c9:8f:07:32:9a:8f:d7:48:ba:b9:4d:99:de: 29:46:36:09:b4:66:d0:e2:a1:33:f6:81:c9:bb:81:b0:3a:88: ff:d2:f9:45:7b:a4:39:c6:6e:41:c3:25:3b:cc:48:99:07:92: a3:6f:f6:16:65:3e:04:f4:4d:a3:6d:38:03:97:a6:08:c2:87: 29:b5:ae:15:99:1c:66:22:bc:43:86:33:32:87:2f:29:d5:40: bb:47:1a:cf:b2:79:1f:d7:36:26:80:00:f6:d6:10:42:7f:98: 37:03:1b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVoswWjU3bjCsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk MzM4MzRjZTktN2IyZS00ZDRjLTg2YTAtZGI2MTRiZWU5MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwcQix8EN2x0nG0i593D/hT0Wp0wl2hKKU4C Zlr6UlFn5n6Fk70dWSNBMMd5QLrF9IdNvxdtPaqsdLXeBTK6p+pGzR1yZDZNnhbm 6Es2Ph3JyTEl0FVP2dlm//jTMZxetj+exZeHboThE01TnFu9ERMCqyeoKApTqhxM Izf93QcJ7YZ1Qx6lmhCAoYPEmBgFBP4PbmPMDHEN5xYZ/LZJtspTrbC+qOsLKths inZiLpHQsKq6BAGSIqGWS6EbV1jOsH1TQsxLT8RAX3BcS8pd1LEnd7QyIEYC3jM3 0mZeYevq2pTFTq5XOgI4n/SOvl0xu7U+55hQXd/XttcmZrNkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhQ4vrbHTGLWpxcU0H+b3TFiZIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvNGM1YTA3NWEtYzhkMi0z ZjllLWFlY2UtNmU0MjRmZDVmMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4dMYwxJXNg7uEEjnc9vbQqXnufM7o6pCSEQFJ3YNMmQUWmS/4+kaej HpkW9GI+Nf8QoWLz3GrlIJkQ9NoaEdC/iGkhFOC9cp7orrIx8F96RcVdFDfjqhig 1rCncpEvo8ZvAbAF+zKlY8WtYVetBAlQnqB1RzEax9RqijNiWlrXFgSs81H0eiYu 0KGoURWjfpPDylM1yY8HMpqP10i6uU2Z3ilGNgm0ZtDioTP2gcm7gbA6iP/S+UV7 pDnGbkHDJTvMSJkHkqNv9hZlPgT0TaNtOAOXpgjChym1rhWZHGYivEOGMzKHLynV QLtHGs+yeR/XNiaAAPbWEEJ/mDcDGyE= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:33 2024 by rpki-client on console-ams.rpki-client.org