$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/38122d3e-3fb4-396e-9e8e-ec347c256052.roa File: 38122d3e-3fb4-396e-9e8e-ec347c256052.roa (raw, json) Hash identifier: z12APNf/fgb0aQy5PTS5opgdW5i9RCDJh3NG4PmiL2Y= Subject key identifier: 48:78:6F:C3:84:81:FC:07:E5:4F:66:CB:04:56:7F:A0:15:41:75:8F Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F43285847D28A58C179CE57E50A8BDB00 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/38122d3e-3fb4-396e-9e8e-ec347c256052.roa Signing time: Sat 09 Nov 2024 13:18:27 +0000 ROA not before: Sat 09 Nov 2024 13:18:27 +0000 ROA not after: Fri 07 Feb 2025 13:18:27 +0000 asID: 401475 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:8a:58:c1:79:ce:57:e5:0a:8b:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Nov 9 13:18:27 2024 GMT Not After : Feb 7 13:18:27 2025 GMT Subject: CN=e82d21dd-4204-4c74-a809-1ff4bb5b9ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:22:a7:09:d7:af:a7:3b:25:e3:21:b2:c9: 06:85:66:02:9b:8c:e7:69:81:5d:fd:67:6c:3c:1a: c3:ff:17:8b:9b:fe:23:fb:da:80:f9:0e:ec:8a:10: d3:7b:62:2f:27:61:8b:1c:3c:9b:c6:14:0c:24:9c: 97:22:87:66:c2:b8:a2:19:08:8d:24:bf:fd:8c:59: b2:aa:0f:7b:09:b9:1c:cd:be:e2:c6:20:33:96:2d: af:80:ae:2c:f5:9f:74:0f:eb:ba:b2:1a:96:14:c8: 56:00:45:7d:1a:97:6e:c1:38:06:25:fb:df:b9:24: 67:d1:c1:ce:70:55:f0:56:43:16:ce:4d:65:2b:e3: a8:32:71:9d:b4:5c:23:e6:45:c5:13:96:ea:fd:fb: 2f:f7:b5:e8:7d:59:f6:4a:b9:ce:27:77:32:36:b3: aa:9f:d9:3e:7f:b9:32:a6:73:98:dd:d9:01:05:d3: 0d:6e:ca:da:57:ed:af:0c:84:4e:ff:04:6d:d2:c9: 16:31:f5:85:5b:63:81:5b:60:fe:0d:f0:9b:48:60: be:ce:35:36:c8:fe:eb:b6:2f:7e:4d:ed:2d:6e:fb: 80:0d:bc:8c:9d:e0:98:29:f4:d6:b2:47:84:65:df: ee:26:26:f6:e3:63:c0:0e:aa:21:04:4d:fe:6c:3e: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:6F:C3:84:81:FC:07:E5:4F:66:CB:04:56:7F:A0:15:41:75:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/38122d3e-3fb4-396e-9e8e-ec347c256052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4f:d6:90:74:80:30:78:0f:98:b0:1f:25:1a:e1:01:ed:52: 0c:6c:18:48:c8:06:ca:44:a7:ff:d9:a4:0b:2d:3b:ce:50:9e: 24:3c:a3:ea:67:61:6e:36:32:30:60:48:03:1c:21:39:7a:70: 94:7f:07:da:7c:0e:ec:58:74:af:3f:5e:b6:3b:78:48:02:6d: b7:5d:b7:4a:4f:58:83:e2:a4:f9:22:12:75:ad:c0:b5:1c:36: 69:95:16:13:c0:c8:a4:17:10:0d:31:35:e6:57:eb:eb:4e:63: 3d:b1:35:f8:58:f9:56:c1:6d:65:78:2f:33:38:85:64:18:ec: 1f:ce:d6:12:11:3e:40:a2:4c:1e:d2:4e:ec:26:e9:88:92:0d: 8b:e0:66:b5:d4:16:e6:cc:7d:b2:07:5e:e6:67:fd:04:d8:41: 00:39:63:1e:d3:6f:c0:9c:57:2d:ee:3e:8d:ae:b2:b0:e6:99: 5e:ad:a2:bb:41:0e:d3:d8:98:4c:df:35:32:7e:46:dd:06:6b: fa:50:ce:bf:9c:24:12:4a:e2:c7:24:71:d3:3b:ef:5c:5a:b2: 3e:77:05:fe:a5:e7:55:a9:a0:20:01:03:08:a2:2a:34:67:88: 06:b7:6a:1f:dc:ab:a3:93:96:c9:77:a0:fd:2a:3e:3a:fb:c0: 2e:0a:9f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSiljBec5X5QqL2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI0MTEwOTEzMTgyN1oXDTI1MDIwNzEzMTgyN1owLzEtMCsGA1UEAxMk ZTgyZDIxZGQtNDIwNC00Yzc0LWE4MDktMWZmNGJiNWI5YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60ipwnXr6c7JeMhsskGhWYCm4znaYFd/Wds PBrD/xeLm/4j+9qA+Q7sihDTe2IvJ2GLHDybxhQMJJyXIodmwriiGQiNJL/9jFmy qg97Cbkczb7ixiAzli2vgK4s9Z90D+u6shqWFMhWAEV9GpduwTgGJfvfuSRn0cHO cFXwVkMWzk1lK+OoMnGdtFwj5kXFE5bq/fsv97XofVn2SrnOJ3cyNrOqn9k+f7ky pnOY3dkBBdMNbsraV+2vDIRO/wRt0skWMfWFW2OBW2D+DfCbSGC+zjU2yP7rti9+ Te0tbvuADbyMneCYKfTWskeEZd/uJib242PADqohBE3+bD5vzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh4b8OEgfwH5U9mywRWf6AVQXWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMzgxMjJkM2UtM2ZiNC0z OTZlLTllOGUtZWMzNDdjMjU2MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFP1pB0gDB4D5iwHyUa4QHtUgxsGEjIBspEp//ZpAstO85QniQ8o+pn YW42MjBgSAMcITl6cJR/B9p8DuxYdK8/XrY7eEgCbbddt0pPWIPipPkiEnWtwLUc NmmVFhPAyKQXEA0xNeZX6+tOYz2xNfhY+VbBbWV4LzM4hWQY7B/O1hIRPkCiTB7S Tuwm6YiSDYvgZrXUFubMfbIHXuZn/QTYQQA5Yx7Tb8CcVy3uPo2usrDmmV6tortB DtPYmEzfNTJ+Rt0Ga/pQzr+cJBJK4sckcdM771xasj53Bf6l51WpoCABAwiiKjRn iAa3ah/cq6OTlsl3oP0qPjr7wC4KnwQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org