$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa File: 1674c815-a319-33a0-90ef-e2ce8a54a99a.roa (raw, json) Hash identifier: AEOrcGAPu41Yh8/9EoGovQwfwdwVyQJNzBEyis7NXgA= Subject key identifier: F7:30:87:0D:C4:EB:F1:A0:F7:E6:B3:14:5C:18:BA:AD:97:B2:03:AE Certificate issuer: /CN=e04d8190-ec33-4551-9197-d06746d399d0 Certificate serial: 010D0C9F43285846DC12F9530482AB7EFEEECF2E Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa Signing time: Tue 13 Aug 2024 06:29:05 +0000 ROA not before: Tue 13 Aug 2024 06:29:05 +0000 ROA not after: Mon 11 Nov 2024 07:29:05 +0000 asID: 26658 IP address blocks: 23.249.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:dc:12:f9:53:04:82:ab:7e:fe:ee:cf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0 Validity Not Before: Aug 13 06:29:05 2024 GMT Not After : Nov 11 07:29:05 2024 GMT Subject: CN=49aa0f08-5c2f-4b6b-913b-98ca15212b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:1b:ea:d7:3c:d7:8c:63:41:ae:89:39:b8: 59:a7:6e:c3:4e:10:87:e0:b2:91:83:25:3c:5a:5c: 31:b0:20:9a:80:58:53:69:d9:e9:23:97:aa:43:0e: 73:1d:f5:d0:1d:28:d4:23:41:77:ae:33:07:6d:15: 93:25:78:f0:27:31:71:9e:9a:b9:e9:78:82:d8:44: 08:8e:56:89:b3:04:a1:d4:33:31:41:9b:fa:a4:92: c2:b9:f3:e8:10:e0:37:14:68:53:0e:78:c5:01:7e: b7:89:95:02:33:c2:a8:8b:10:70:4e:51:db:e9:14: 78:f3:1e:1b:ec:65:7d:9d:ea:50:01:56:8e:b9:ba: 40:50:c8:e5:33:11:bd:38:61:42:9c:fd:11:d6:b1: 01:c4:0d:b9:99:79:9e:3f:87:e7:b6:3a:b8:77:0e: 66:32:15:bb:e3:98:be:a5:5d:d6:ac:7b:ef:8f:b9: 5c:c6:f9:61:2d:8e:c7:e1:f3:51:ac:5e:b8:c3:e7: 35:51:ff:f7:ef:13:42:62:18:9a:d4:43:30:30:b4: 84:e6:e7:6b:e7:33:a9:17:9f:ee:c3:2a:f9:2f:a7: ef:ff:73:55:43:b0:41:22:29:7d:cc:86:80:24:a3: fe:fd:ab:74:e1:60:ca:60:56:76:3e:45:59:14:9d: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:87:0D:C4:EB:F1:A0:F7:E6:B3:14:5C:18:BA:AD:97:B2:03:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl X509v3 Authority Key Identifier: keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer sbgp-ipAddrBlock: critical IPv4: 23.249.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6a:4e:46:c3:15:67:a6:fc:dc:88:45:01:03:ff:54:46:9d: d3:11:70:1c:bb:4f:fe:f5:b0:82:97:80:71:41:43:54:31:e9: e4:0c:21:ed:3d:07:9d:cd:65:c9:95:52:ff:b7:96:eb:c4:79: 25:c7:13:2c:25:67:fb:25:d7:10:3d:3d:21:13:7f:92:50:33: e6:9c:9a:d2:be:cc:52:c3:04:8e:93:24:3f:6b:81:92:58:72: 76:2c:55:6a:9e:f7:83:0a:2a:2e:f6:6b:2c:a0:ca:1e:24:88: ab:8a:9c:e7:98:f7:16:17:4e:90:82:c8:f5:b3:d5:fe:ed:a0: fa:31:de:a8:8e:d9:01:f7:5a:34:ee:4c:8f:ff:b6:c5:27:3e: da:62:75:97:66:59:eb:67:3c:99:bc:c3:4e:c8:07:f1:59:51: 0f:96:e8:c4:5f:72:64:59:e4:ad:a6:98:69:c4:76:65:c1:6a: 9b:76:31:fc:d9:df:fa:4d:9c:bb:b3:0f:2e:46:ab:85:fc:30: 28:cf:2e:1a:e8:70:34:53:fd:39:d5:da:e4:84:b3:a4:86:22: f4:22:c3:2c:23:0c:8e:d5:b6:07:4a:31:53:34:69:17:88:59: bb:22:37:8b:85:88:fa:e7:7f:6b:5b:6a:6a:d2:3c:25:cc:93: 91:20:35:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbcEvlTBIKrfv7uzy4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0ZDgxOTAtZWMzMy00NTUxLTkxOTctZDA2NzQ2ZDM5 OWQwMB4XDTI0MDgxMzA2MjkwNVoXDTI0MTExMTA3MjkwNVowLzEtMCsGA1UEAxMk NDlhYTBmMDgtNWMyZi00YjZiLTkxM2ItOThjYTE1MjEyYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgScb6tc814xjQa6JObhZp27DThCH4LKRgyU8 WlwxsCCagFhTadnpI5eqQw5zHfXQHSjUI0F3rjMHbRWTJXjwJzFxnpq56XiC2EQI jlaJswSh1DMxQZv6pJLCufPoEOA3FGhTDnjFAX63iZUCM8KoixBwTlHb6RR48x4b 7GV9nepQAVaOubpAUMjlMxG9OGFCnP0R1rEBxA25mXmeP4fntjq4dw5mMhW745i+ pV3WrHvvj7lcxvlhLY7H4fNRrF64w+c1Uf/37xNCYhia1EMwMLSE5udr5zOpF5/u wyr5L6fv/3NVQ7BBIil9zIaAJKP+/at04WDKYFZ2PkVZFJ2nlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcwhw3E6/Gg9+azFFwYuq2XsgOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRk ODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3NDZkMzk5ZDAvMTY3NGM4MTUtYTMxOS0z M2EwLTkwZWYtZTJjZThhNTRhOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTA0ZDgxOTAtZWMzMy00NTUxLTkx OTctZDA2NzQ2ZDM5OWQwL2UwNGQ4MTkwLWVjMzMtNDU1MS05MTk3LWQwNjc0NmQz OTlkMC5jcmwwHwYDVR0jBBgwFoAUAqiuDisRyRiLX4iDa2scgwg7eOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRkODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3 NDZkMzk5ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF/mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVqTkbDFWem/NyIRQED/1RGndMRcBy7T/71sIKXgHFBQ1Qx6eQMIe09 B53NZcmVUv+3luvEeSXHEywlZ/sl1xA9PSETf5JQM+acmtK+zFLDBI6TJD9rgZJY cnYsVWqe94MKKi72ayygyh4kiKuKnOeY9xYXTpCCyPWz1f7toPox3qiO2QH3WjTu TI//tsUnPtpidZdmWetnPJm8w07IB/FZUQ+W6MRfcmRZ5K2mmGnEdmXBapt2MfzZ 3/pNnLuzDy5Gq4X8MCjPLhrocDRT/TnV2uSEs6SGIvQiwywjDI7VtgdKMVM0aReI WbsiN4uFiPrnf2tbamrSPCXMk5EgNXg= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:04 2024 by rpki-client on console-fra.rpki-client.org