$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa File: 9facefec-05a7-3b4a-bc11-635411da018c.roa (raw, json) Hash identifier: OEaopfYrEQcSSThBkUZFz8DT5D8kysv+bd00Z50FItg= Subject key identifier: 4C:88:B2:37:79:4B:1E:0F:FA:91:C4:49:77:47:7E:2C:58:7A:26:7F Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275 Certificate serial: 010D0C9F43285847F234F075EE00D218536A0280 Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa Signing time: Wed 20 Nov 2024 21:32:14 +0000 ROA not before: Wed 20 Nov 2024 21:32:14 +0000 ROA not after: Tue 18 Feb 2025 21:32:14 +0000 asID: 401104 IP address blocks: 23.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:34:f0:75:ee:00:d2:18:53:6a:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275 Validity Not Before: Nov 20 21:32:14 2024 GMT Not After : Feb 18 21:32:14 2025 GMT Subject: CN=550ac954-1a64-4869-83bd-e7ed2fbeeaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:22:fe:0c:aa:39:0a:5d:9d:9f:3a:26:58: c9:6e:27:fe:cc:a9:f9:80:96:20:78:34:09:05:90: 90:af:e7:80:cf:fa:95:07:5f:7e:8c:77:3b:3b:0d: 1c:00:64:04:eb:88:45:10:6a:37:5a:e5:96:0d:6d: 45:26:81:28:bf:ad:10:b6:b7:ad:85:92:c3:33:2f: c0:f1:4f:9c:e5:0f:d2:55:5b:11:2d:4b:d8:a7:33: 60:2d:17:7a:5f:66:1a:07:c4:37:46:74:1a:f9:2d: 6b:d6:35:50:76:24:ef:1c:29:c9:82:90:4b:ca:94: 53:49:68:8e:17:db:a7:e1:56:cc:b2:77:ef:23:92: 4f:b4:b6:50:03:a2:1c:e2:f9:a7:18:8b:1a:4b:1c: 01:b5:20:c8:80:c9:27:b7:aa:5c:6b:cd:c5:c7:f4: 73:d5:39:7c:7f:dc:f8:d7:00:97:f3:0e:21:34:fa: 77:90:39:03:a2:3e:1b:5d:9d:7f:bd:02:89:ed:41: 53:3d:51:36:ca:e7:1a:67:ad:08:01:a2:32:36:48: 3d:3d:15:16:16:f9:65:c7:90:50:93:bd:82:ed:0b: f7:18:16:05:89:cb:44:77:1d:47:ef:9a:67:39:37: a5:70:75:a0:5c:21:0d:dd:80:e2:49:47:a4:59:67: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:B2:37:79:4B:1E:0F:FA:91:C4:49:77:47:7E:2C:58:7A:26:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl X509v3 Authority Key Identifier: keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer sbgp-ipAddrBlock: critical IPv4: 23.190.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f7:23:88:6a:ba:1e:b9:b9:fc:a1:09:69:91:77:ee:1e:f4: f3:34:0c:20:9d:b4:0d:d1:cb:97:0c:78:f5:6e:ec:ec:51:99: df:fb:51:32:49:7f:6d:4f:4e:65:f2:9e:c2:31:08:d6:cc:1f: 96:78:3d:cd:44:2b:9d:c1:66:4e:4e:44:98:94:0e:12:a9:77: 84:f0:69:f2:08:f0:20:45:bf:46:31:61:fe:fc:87:20:ca:17: c7:3c:19:bd:c8:5a:7d:2c:1f:ab:2d:97:9c:63:75:cd:1d:18: 4e:6c:1a:c0:e3:f8:c4:5e:47:e3:3a:85:f9:2c:61:51:70:61: c8:6b:b1:cd:6b:5c:e7:e9:34:3e:26:d1:49:4a:13:31:2a:fa: c5:0d:b8:66:d2:67:19:33:61:35:97:54:68:e2:5a:01:7d:b7: 0d:bc:3a:59:0f:13:69:f9:18:d3:eb:05:e0:d7:0d:5c:ca:24: 29:b0:8d:9e:01:f5:46:3b:f9:58:3f:fd:f5:3d:25:b7:09:82: d6:7d:c9:da:b0:4d:fe:e7:ef:1d:07:ba:75:52:cb:ef:9e:64: c2:c7:16:87:8b:f8:da:a1:8f:77:2d:eb:65:86:b1:ff:8c:db: cb:8f:9a:77:56:bb:18:ee:82:d6:95:78:b6:f4:96:f3:a9:d5: 79:c9:9b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyNPB17gDSGFNqAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz Mjc1MB4XDTI0MTEyMDIxMzIxNFoXDTI1MDIxODIxMzIxNFowLzEtMCsGA1UEAxMk NTUwYWM5NTQtMWE2NC00ODY5LTgzYmQtZTdlZDJmYmVlYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVEi/gyqOQpdnZ86JljJbif+zKn5gJYgeDQJ BZCQr+eAz/qVB19+jHc7Ow0cAGQE64hFEGo3WuWWDW1FJoEov60QtrethZLDMy/A 8U+c5Q/SVVsRLUvYpzNgLRd6X2YaB8Q3RnQa+S1r1jVQdiTvHCnJgpBLypRTSWiO F9un4VbMsnfvI5JPtLZQA6Ic4vmnGIsaSxwBtSDIgMknt6pca83Fx/Rz1Tl8f9z4 1wCX8w4hNPp3kDkDoj4bXZ1/vQKJ7UFTPVE2yucaZ60IAaIyNkg9PRUWFvllx5BQ k72C7Qv3GBYFictEdx1H75pnOTelcHWgXCEN3YDiSUekWWfDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyIsjd5Sx4P+pHESXdHfixYeiZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvOWZhY2VmZWMtMDVhNy0z YjRhLWJjMTEtNjM1NDExZGEwMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh NmRhMDMyNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF76YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj3I4hquh65ufyhCWmRd+4e9PM0DCCdtA3Ry5cMePVu7OxRmd/7UTJJ f21PTmXynsIxCNbMH5Z4Pc1EK53BZk5ORJiUDhKpd4TwafII8CBFv0YxYf78hyDK F8c8Gb3IWn0sH6stl5xjdc0dGE5sGsDj+MReR+M6hfksYVFwYchrsc1rXOfpND4m 0UlKEzEq+sUNuGbSZxkzYTWXVGjiWgF9tw28OlkPE2n5GNPrBeDXDVzKJCmwjZ4B 9UY7+Vg//fU9JbcJgtZ9ydqwTf7n7x0HunVSy++eZMLHFoeL+Nqhj3ct62WGsf+M 28uPmndWuxjugtaVeLb0lvOp1XnJm+g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org