$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa File: afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json) Hash identifier: /wEMSO9DX0h8MDnh9cGhQUouxAgJanRqp1euq+yqC2A= Subject key identifier: F1:CC:D3:68:B9:61:05:0F:1A:0A:AE:DE:86:9D:7D:EB:79:62:69:2E Certificate issuer: /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1 Certificate serial: 010D0C9F432858479D76BBD149CFB9153C244088 Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 399392 IP address blocks: 23.175.112.0/24 maxlen: 24 2602:fcb6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:bb:d1:49:cf:b9:15:3c:24:40:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=fd52da2d-f084-429f-8d97-c13fb4cfe351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:2e:5e:44:e7:4b:f6:cb:17:eb:59:1d:3b: 96:90:06:5d:ae:56:0f:ef:08:6d:44:13:3b:09:fc: fe:4d:80:77:38:95:0b:30:be:84:b7:46:61:9d:0f: 39:01:9d:ef:ed:06:50:ac:75:22:15:48:c6:e7:03: 97:13:48:f2:8d:84:fe:c2:d9:82:5d:3b:e4:6a:bd: 5e:a0:18:e2:36:d5:56:2c:11:42:d1:05:93:f6:dd: 00:9a:7c:79:2a:33:b4:74:e4:ef:c5:41:69:1c:35: ca:14:97:ea:30:92:da:be:89:d4:cf:a9:53:66:65: 9f:d5:3d:1c:c1:97:ea:ee:94:3c:f9:df:16:56:f9: cb:6f:a0:4e:aa:2b:cc:d5:3d:d4:d1:e5:32:8d:d5: 4d:55:61:3b:ad:42:61:4f:eb:0d:bc:fa:7c:77:54: 63:09:db:b0:1f:89:6b:e1:e7:74:11:b4:ac:23:fd: 2f:cc:ae:ea:84:04:26:71:c5:c0:7e:14:d2:61:d4: 55:b6:5b:b7:4a:bd:1e:cf:10:3c:01:b5:34:a1:e0: f1:46:1d:0a:f9:44:a6:68:8b:97:8e:7e:0d:2b:d5: a7:4a:2e:3a:a5:b6:f1:99:5c:15:30:45:96:0f:04: e9:02:56:4e:64:e8:5b:f5:da:3d:40:8e:a3:a7:1e: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CC:D3:68:B9:61:05:0F:1A:0A:AE:DE:86:9D:7D:EB:79:62:69:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl X509v3 Authority Key Identifier: keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer sbgp-ipAddrBlock: critical IPv4: 23.175.112.0/24 IPv6: 2602:fcb6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e1:38:ee:47:72:59:bd:56:ba:22:6c:87:2d:d7:a8:7d:11: 87:1b:0b:33:07:b3:a5:a4:9d:e6:21:14:e1:d6:6e:d8:08:0d: 04:67:48:87:dd:84:ee:8e:fe:2e:20:a5:69:68:b1:bd:b9:78: 0a:8f:36:0b:9d:e6:70:a8:74:db:75:f9:3a:5d:ed:ab:c9:02: 38:3f:80:ec:3c:66:b6:63:3b:5a:fd:86:72:82:f8:86:31:b6: 9f:44:4c:16:e3:49:ca:aa:36:77:68:e2:85:e4:e4:98:ee:ca: 3f:6a:8b:61:d5:5f:46:85:30:d0:a9:11:45:22:f0:3e:7c:3c: b7:03:19:d6:bd:3d:0e:9e:1f:15:14:33:80:cf:1e:c0:38:42: 63:99:7a:8b:92:d7:d4:31:dd:c3:e6:ba:d7:09:04:bf:09:d8: 1e:68:ec:62:50:40:04:38:fb:fa:83:4d:87:62:fb:19:53:83: ce:a3:27:91:ee:61:1a:eb:7e:01:82:1a:5a:37:00:d2:ed:2b: 24:3c:e1:24:fa:0d:6f:91:f4:8c:8a:72:3e:0a:8d:20:93:b4: 4c:ef:6b:a4:6a:c9:dd:6e:36:b2:9f:a7:1a:0f:ba:c2:81:e1: 7d:83:f3:0c:9b:0b:5d:b9:38:4a:d2:c6:62:8b:8c:9b:fd:09: 37:ea:79:d5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeddrvRSc+5FTwkQIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4NGFkYjMtODQzYi00ZDZlLWEyYjQtNmRjMzcwOTNk ZmUxMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmQ1MmRhMmQtZjA4NC00MjlmLThkOTctYzEzZmI0Y2ZlMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDUuXkTnS/bLF+tZHTuWkAZdrlYP7whtRBM7 Cfz+TYB3OJULML6Et0ZhnQ85AZ3v7QZQrHUiFUjG5wOXE0jyjYT+wtmCXTvkar1e oBjiNtVWLBFC0QWT9t0Amnx5KjO0dOTvxUFpHDXKFJfqMJLavonUz6lTZmWf1T0c wZfq7pQ8+d8WVvnLb6BOqivM1T3U0eUyjdVNVWE7rUJhT+sNvPp8d1RjCduwH4lr 4ed0EbSsI/0vzK7qhAQmccXAfhTSYdRVtlu3Sr0ezxA8AbU0oeDxRh0K+USmaIuX jn4NK9WnSi46pbbxmVwVMEWWDwTpAlZOZOhb9do9QI6jpx7QowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPHM02i5YQUPGgqu3oadfet5YmkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0 YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMzNzA5M2RmZTEvYWZjZWM0N2YtMGFiZC0z NDU1LTk4ZTEtMWM2NThlZWMwZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4NGFkYjMtODQzYi00ZDZlLWEy YjQtNmRjMzcwOTNkZmUxLzEzODRhZGIzLTg0M2ItNGQ2ZS1hMmI0LTZkYzM3MDkz ZGZlMS5jcmwwHwYDVR0jBBgwFoAUU41ctRjeiEpHXXXcXjTo22/Gbx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMz NzA5M2RmZTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF69wMA4E AgACMAgDBgQmAvy2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCO4TjuR3JZvVa6ImyHLdeofRGHGwszB7Ol pJ3mIRTh1m7YCA0EZ0iH3YTujv4uIKVpaLG9uXgKjzYLneZwqHTbdfk6Xe2ryQI4 P4DsPGa2Yzta/YZygviGMbafREwW40nKqjZ3aOKF5OSY7so/aoth1V9GhTDQqRFF IvA+fDy3AxnWvT0Onh8VFDOAzx7AOEJjmXqLktfUMd3D5rrXCQS/CdgeaOxiUEAE OPv6g02HYvsZU4POoyeR7mEa634BghpaNwDS7SskPOEk+g1vkfSMinI+Co0gk7RM 72ukasndbjayn6caD7rCgeF9g/MMmwtduThK0sZii4yb/Qk36nnV -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:38 2024 by rpki-client on console-ams.rpki-client.org