$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa File: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (raw, json) Hash identifier: 4zM/32eSkLPxlAIgVjzUDtxW82bkEbtIe4wpRPePQSY= Subject key identifier: 91:05:4A:C9:13:6D:36:A5:D5:C5:FF:FD:DC:83:DB:3E:8D:32:AD:5C Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F432858477C33F1E97E4F3B9A3305A080 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa Signing time: Wed 09 Oct 2024 15:04:51 +0000 ROA not before: Wed 09 Oct 2024 15:04:51 +0000 ROA not after: Tue 07 Jan 2025 16:04:51 +0000 asID: 399825 IP address blocks: 23.177.144.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7c:33:f1:e9:7e:4f:3b:9a:33:05:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Oct 9 15:04:51 2024 GMT Not After : Jan 7 16:04:51 2025 GMT Subject: CN=af88770e-f62f-4db2-9bb1-119644893854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:3d:6f:df:27:88:8a:25:3f:94:a1:3d:4b: e1:22:d7:74:bf:18:91:9d:3f:49:f1:0e:7e:d1:f7: aa:58:28:b6:80:1f:c1:75:9a:46:f5:84:19:ea:31: c6:44:7d:76:56:f2:d0:0c:21:ad:d2:30:ec:ae:fc: 93:22:61:62:d7:29:5d:b0:96:ba:7c:e5:58:7b:88: c5:e6:5f:d3:75:41:59:09:d3:92:cb:2c:88:3d:5c: 1d:4e:63:5d:b3:4c:05:f4:50:93:be:e1:27:5d:36: f9:c5:f8:56:b1:0f:c1:85:c9:ba:d5:fa:cc:c7:6e: 20:78:31:6e:bc:3f:6d:ad:e4:30:87:3b:5e:c1:9c: 41:ec:0d:29:6b:d1:c7:b6:29:bf:98:6d:ca:13:81: eb:39:fa:76:ce:14:23:d1:04:c2:74:8d:fa:55:ec: 87:38:1b:b3:06:62:5e:4a:a1:2f:b1:e7:b0:86:ff: 6b:f0:47:81:e7:84:b1:8f:6b:c3:3a:76:01:9f:45: 6a:4d:3f:61:7f:09:31:54:5b:4a:ce:b9:1c:db:41: 6a:72:9f:f7:66:49:89:f2:13:79:7f:4e:a8:89:88: 6f:ac:4b:93:99:a2:ef:20:4a:7d:1f:d1:24:40:6d: 62:79:02:fc:4e:71:54:9c:74:bc:5b:92:97:28:57: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:4A:C9:13:6D:36:A5:D5:C5:FF:FD:DC:83:DB:3E:8D:32:AD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv4: 23.177.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6f:f3:66:69:b4:b4:40:06:2e:c5:04:34:17:60:b4:cb:73: 2f:c4:76:e6:8c:f3:bd:60:0f:f3:69:3f:34:14:d4:d5:99:8a: 9f:b2:2a:7b:2b:f7:49:44:c1:13:35:2f:84:53:da:1e:ee:1d: 16:ef:77:a2:81:70:e5:aa:e2:98:37:67:43:5f:4e:92:9e:63: 87:51:cb:fe:db:5f:e5:60:af:89:31:7e:6a:ce:e6:fc:e3:c5: 72:84:f0:6c:97:dc:d1:cc:14:a8:6a:e6:93:95:76:71:59:1d: 78:a0:dd:63:e9:30:ed:82:77:ee:2e:e0:72:e1:96:59:e9:22: 02:9a:73:ad:83:dd:d0:c9:30:8e:15:bb:58:d7:e3:49:e0:3e: 5a:56:0f:d4:3e:31:91:a3:16:c0:05:26:c4:b2:56:93:32:5a: 70:c1:6c:ed:cc:4c:2c:60:9e:6e:4b:81:88:9a:20:d1:74:69: 47:1d:6f:a7:94:9e:06:58:40:26:8c:8d:68:47:c6:09:38:d7: c8:ba:5e:d8:93:fc:10:75:be:9d:6b:5c:16:b2:61:27:c1:cc: 4c:d0:6d:dc:b8:18:f2:f9:1d:d2:77:53:aa:17:31:13:5e:75: c5:3a:04:f9:10:97:6e:4e:a3:d7:9e:c0:2b:fa:ca:db:d8:39: 91:25:2f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd8M/Hpfk87mjMFoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI0MTAwOTE1MDQ1MVoXDTI1MDEwNzE2MDQ1MVowLzEtMCsGA1UEAxMk YWY4ODc3MGUtZjYyZi00ZGIyLTliYjEtMTE5NjQ0ODkzODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK49b98niIolP5ShPUvhItd0vxiRnT9J8Q5+ 0feqWCi2gB/BdZpG9YQZ6jHGRH12VvLQDCGt0jDsrvyTImFi1yldsJa6fOVYe4jF 5l/TdUFZCdOSyyyIPVwdTmNds0wF9FCTvuEnXTb5xfhWsQ/Bhcm61frMx24geDFu vD9treQwhztewZxB7A0pa9HHtim/mG3KE4HrOfp2zhQj0QTCdI36VeyHOBuzBmJe SqEvseewhv9r8EeB54Sxj2vDOnYBn0VqTT9hfwkxVFtKzrkc20Fqcp/3ZkmJ8hN5 f06oiYhvrEuTmaLvIEp9H9EkQG1ieQL8TnFUnHS8W5KXKFdGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEFSskTbTal1cX//dyD2z6NMq1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvMjMwNzEwMWMtYTQ0OC0z ZjZlLWI2MGMtMTQwYTdhNjFhMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBv82ZptLRABi7FBDQXYLTLcy/EduaM871gD/NpPzQU1NWZip+yKnsr 90lEwRM1L4RT2h7uHRbvd6KBcOWq4pg3Z0NfTpKeY4dRy/7bX+Vgr4kxfmrO5vzj xXKE8GyX3NHMFKhq5pOVdnFZHXig3WPpMO2Cd+4u4HLhllnpIgKac62D3dDJMI4V u1jX40ngPlpWD9Q+MZGjFsAFJsSyVpMyWnDBbO3MTCxgnm5LgYiaINF0aUcdb6eU ngZYQCaMjWhHxgk418i6XtiT/BB1vp1rXBayYSfBzEzQbdy4GPL5HdJ3U6oXMRNe dcU6BPkQl25Oo9eewCv6ytvYOZElL/M= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org