$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa File: 12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json) Hash identifier: VnHMeHJCju2591hOj3+uH72O6k73f/aOwQXz8aHy9nM= Subject key identifier: 8C:B9:8E:B6:91:1A:D0:6A:F4:78:2D:1F:36:6D:62:62:98:C8:6D:41 Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Certificate serial: 010D0C9F43285847861FF161E2F49CE3DF1B8680 Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa Signing time: Sun 13 Oct 2024 04:22:38 +0000 ROA not before: Sun 13 Oct 2024 04:22:38 +0000 ROA not after: Sat 11 Jan 2025 05:22:38 +0000 asID: 30006 IP address blocks: 23.191.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:86:1f:f1:61:e2:f4:9c:e3:df:1b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Validity Not Before: Oct 13 04:22:38 2024 GMT Not After : Jan 11 05:22:38 2025 GMT Subject: CN=98918202-18cc-4fbe-9bf5-17f65917c31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:51:4f:06:53:c8:eb:42:43:ea:f3:ea:07: 86:08:9a:ef:f6:f2:46:e1:94:40:94:96:75:32:2a: 5a:d0:42:3d:9d:d6:6a:84:66:aa:5c:62:16:57:46: 3d:7f:52:d9:30:0e:8c:b2:3a:c0:5b:f1:b1:99:86: 18:90:d9:4f:21:be:60:2c:7a:74:5c:5c:1e:94:ca: 78:2d:ff:54:51:db:37:87:aa:9d:55:06:f8:b9:2c: f0:69:a1:57:37:5e:86:2e:80:3b:19:83:00:db:43: 32:0c:1d:8e:6f:b2:e1:42:c5:84:42:7f:b1:5a:e3: 8f:20:c8:fa:83:18:36:dd:c5:4f:89:47:06:d2:25: bc:ad:b3:33:f9:4c:26:ae:5d:ef:d0:fe:eb:d6:60: fa:36:8e:56:00:b1:45:d1:7e:0a:2a:b4:cb:e8:71: 20:b8:e8:43:6d:ce:e7:44:cc:b6:0e:a7:5b:08:d2: fd:95:8d:ba:14:13:76:d2:38:cc:dd:c0:8e:ad:87: 29:e6:42:66:05:5b:9d:c6:75:79:29:01:af:b2:bc: 55:fc:4e:cb:b9:2a:2a:d4:3a:07:8c:fa:3b:b3:8a: ee:a3:f1:27:97:7d:d7:8e:3c:80:31:82:fc:e6:a2: 18:24:0e:fe:bb:cc:a4:c6:fd:ab:39:1f:fb:dc:dd: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:8E:B6:91:1A:D0:6A:F4:78:2D:1F:36:6D:62:62:98:C8:6D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl X509v3 Authority Key Identifier: keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer sbgp-ipAddrBlock: critical IPv4: 23.191.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:03:f2:91:41:2c:4e:32:8c:0d:d3:f1:44:97:99:15:e2:51: 23:fd:9f:95:ea:fb:1e:11:dc:da:1a:7b:79:4c:70:f2:08:97: 95:da:31:d0:5e:0e:0e:b5:cd:c7:fb:38:25:20:54:de:ff:f4: 0a:7d:d1:eb:1e:6b:82:5b:c3:5f:f1:7b:fa:1d:f2:e5:0d:36: 1d:20:d3:6c:03:e4:5f:27:32:8e:3f:41:eb:63:c6:be:cb:15: 09:c9:29:41:1c:50:34:24:d2:02:47:8a:12:9d:e5:ce:e7:d5: 1f:df:e2:6c:ed:7b:06:0d:80:02:6c:10:11:ab:be:68:c1:28: 3e:75:54:9a:f1:92:04:62:00:88:c7:dd:c5:f6:30:cc:d7:6b: 98:8f:a3:52:e4:1b:7e:79:25:ec:f0:e7:0d:07:cf:f6:96:f6: 57:17:68:67:a3:38:3f:58:59:14:4f:b3:67:8c:93:b8:2c:87: 47:8e:1a:5b:aa:e7:6b:63:09:21:1b:37:d3:8b:2b:10:83:24: 2f:29:c9:d5:fc:29:1d:59:6e:7d:0f:8b:f4:5a:ee:50:c6:85: fd:c4:8e:ea:93:d2:f2:5a:e4:08:09:c1:dd:81:fc:ff:ed:38: 5d:d9:fe:bb:be:e7:39:ef:10:cf:a8:a6:57:82:60:a7:ff:d6: a5:9a:9c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeGH/Fh4vSc498bhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MTljZDMtZjk2OS00OWFkLWFjMDktM2ZiNDAzOTJj ZGM1MB4XDTI0MTAxMzA0MjIzOFoXDTI1MDExMTA1MjIzOFowLzEtMCsGA1UEAxMk OTg5MTgyMDItMThjYy00ZmJlLTliZjUtMTdmNjU5MTdjMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9VRTwZTyOtCQ+rz6geGCJrv9vJG4ZRAlJZ1 Mipa0EI9ndZqhGaqXGIWV0Y9f1LZMA6MsjrAW/GxmYYYkNlPIb5gLHp0XFwelMp4 Lf9UUds3h6qdVQb4uSzwaaFXN16GLoA7GYMA20MyDB2Ob7LhQsWEQn+xWuOPIMj6 gxg23cVPiUcG0iW8rbMz+Uwmrl3v0P7r1mD6No5WALFF0X4KKrTL6HEguOhDbc7n RMy2DqdbCNL9lY26FBN20jjM3cCOrYcp5kJmBVudxnV5KQGvsrxV/E7LuSoq1DoH jPo7s4ruo/Enl33XjjyAMYL85qIYJA7+u8ykxv2rOR/73N0fQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy5jraRGtBq9HgtHzZtYmKYyG1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYx OWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0MDM5MmNkYzUvMTJlMWQyMzYtYjdmOC0z N2RiLThkNWQtZjYwNDIyNWY4Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MTljZDMtZjk2OS00OWFkLWFj MDktM2ZiNDAzOTJjZGM1LzhkNjE5Y2QzLWY5NjktNDlhZC1hYzA5LTNmYjQwMzky Y2RjNS5jcmwwHwYDVR0jBBgwFoAUj3lBQpaZ4ZColVZ3VzDV06kJgAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYxOWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0 MDM5MmNkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUD8pFBLE4yjA3T8USXmRXiUSP9n5Xq+x4R3Noae3lMcPIIl5XaMdBe Dg61zcf7OCUgVN7/9Ap90esea4Jbw1/xe/od8uUNNh0g02wD5F8nMo4/Qetjxr7L FQnJKUEcUDQk0gJHihKd5c7n1R/f4mztewYNgAJsEBGrvmjBKD51VJrxkgRiAIjH 3cX2MMzXa5iPo1LkG355Jezw5w0Hz/aW9lcXaGejOD9YWRRPs2eMk7gsh0eOGluq 52tjCSEbN9OLKxCDJC8pydX8KR1Zbn0Pi/Ra7lDGhf3EjuqT0vJa5AgJwd2B/P/t OF3Z/ru+5znvEM+opleCYKf/1qWanLE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org