$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa File: 148471f6-afa7-3f62-ac8d-1a7a880a2409.roa (raw, json) Hash identifier: fMozL+BJSPKNvDiy20FUT8rWvknPJxNz4PTVshqDQqs= Subject key identifier: A7:1A:61:82:2F:DA:C8:28:9E:60:B4:22:4B:F8:51:48:B8:05:32:A9 Certificate issuer: /CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Certificate serial: 010D0C9F43285847ACD13BE047A9195D01354480 Authority key identifier: F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa Signing time: Sun 27 Oct 2024 01:00:31 +0000 ROA not before: Sun 27 Oct 2024 01:00:31 +0000 ROA not after: Sat 25 Jan 2025 02:00:31 +0000 asID: 396189 IP address blocks: 163.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ac:d1:3b:e0:47:a9:19:5d:01:35:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cafc1ae-8aed-47d8-a718-169a271736a5 Validity Not Before: Oct 27 01:00:31 2024 GMT Not After : Jan 25 02:00:31 2025 GMT Subject: CN=e57790d3-af93-46a1-aa38-9c36c78be857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:00:bf:3b:94:8d:0e:dd:4c:2b:29:24:cb: a3:ef:5b:31:e9:85:10:de:93:f1:94:fc:08:56:37: 95:df:c8:13:9a:03:d9:65:b6:53:ae:3c:7d:59:74: 6e:61:8d:83:e7:59:ac:f8:bc:00:74:9d:d0:9f:65: b1:2e:4a:47:3b:ff:c6:05:25:d2:0d:11:b2:e6:26: b9:dc:dc:67:df:7f:b4:bc:ee:5c:8d:c8:14:0c:e9: 28:bb:5b:ac:d2:5b:d6:bc:93:5d:f0:b0:7a:eb:2f: f7:dc:46:17:1f:02:d4:e0:24:db:41:45:d6:2a:29: 31:4c:20:92:40:2d:54:1e:a7:ff:86:82:11:f9:c1: f0:41:1e:a1:7a:ca:e8:43:a8:46:4c:43:bc:cc:54: d1:8b:70:ee:41:b1:5d:77:e6:70:e0:3b:c2:82:70: 92:f6:7a:df:7d:1d:8c:26:98:b2:f5:e7:e6:9d:a9: ed:dc:4a:22:e7:47:6d:2c:58:a2:20:b1:69:37:2c: 37:bf:20:5e:f0:93:3c:75:d0:09:5e:46:d5:55:c1: 68:5c:a5:57:f1:34:16:5f:08:87:a2:33:dc:e7:9f: a4:72:25:97:82:43:dc:6c:12:c3:34:98:04:bd:97: c9:1d:09:50:a6:68:49:cc:4a:55:54:df:2e:ed:2f: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:61:82:2F:DA:C8:28:9E:60:B4:22:4B:F8:51:48:B8:05:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl X509v3 Authority Key Identifier: keyid:F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:32:97:34:2a:9a:92:ad:51:1a:0b:8e:5a:22:90:31:0f:bc: 09:fa:b4:25:a8:a7:40:26:2c:47:cd:84:90:39:26:96:48:ea: 17:60:c2:a8:ec:99:c5:41:83:66:5c:71:53:8a:10:7f:61:96: 51:a0:c5:3e:39:ee:95:5d:06:25:90:40:2d:ba:9b:0f:55:fe: 59:27:00:83:67:01:56:c9:67:2c:fc:2b:21:32:8d:89:49:5b: 1c:02:81:e9:50:da:0f:30:9c:b0:eb:dd:96:b3:02:4f:54:c9: 16:a3:45:28:62:9b:e0:ad:35:10:85:e9:77:3e:4f:6e:47:f4: bb:26:f4:1a:ca:7c:90:95:02:5d:74:d8:3e:bb:f0:c6:94:b3: 21:75:8c:de:d8:b9:5e:71:7c:b9:d5:34:65:5c:f2:20:96:dc: f5:a8:f7:37:8a:53:fd:3c:17:ae:11:15:d7:de:e9:90:23:df: 99:a8:56:cd:c9:58:ee:80:5b:2f:3d:a0:61:5d:f3:d4:c2:e4: 2f:ca:e6:f3:5b:06:74:95:ff:29:2c:13:ca:8d:36:e9:e6:7c: a8:10:dd:e6:22:5d:eb:09:19:f2:fa:32:63:7e:eb:1c:b9:34: e6:e6:57:58:8a:6f:ef:39:73:de:0f:b6:81:31:5e:ea:2a:1c: aa:ed:b6:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEes0TvgR6kZXQE1RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NhZmMxYWUtOGFlZC00N2Q4LWE3MTgtMTY5YTI3MTcz NmE1MB4XDTI0MTAyNzAxMDAzMVoXDTI1MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTU3NzkwZDMtYWY5My00NmExLWFhMzgtOWMzNmM3OGJlODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRIAvzuUjQ7dTCspJMuj71sx6YUQ3pPxlPwI VjeV38gTmgPZZbZTrjx9WXRuYY2D51ms+LwAdJ3Qn2WxLkpHO//GBSXSDRGy5ia5 3Nxn33+0vO5cjcgUDOkou1us0lvWvJNd8LB66y/33EYXHwLU4CTbQUXWKikxTCCS QC1UHqf/hoIR+cHwQR6hesroQ6hGTEO8zFTRi3DuQbFdd+Zw4DvCgnCS9nrffR2M Jpiy9efmnant3Eoi50dtLFiiILFpNyw3vyBe8JM8ddAJXkbVVcFoXKVX8TQWXwiH ojPc55+kciWXgkPcbBLDNJgEvZfJHQlQpmhJzEpVVN8u7S8ZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcaYYIv2sgonmC0Ikv4UUi4BTKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83Y2Fm YzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlhMjcxNzM2YTUvMTQ4NDcxZjYtYWZhNy0z ZjYyLWFjOGQtMWE3YTg4MGEyNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2NhZmMxYWUtOGFlZC00N2Q4LWE3 MTgtMTY5YTI3MTczNmE1LzdjYWZjMWFlLThhZWQtNDdkOC1hNzE4LTE2OWEyNzE3 MzZhNS5jcmwwHwYDVR0jBBgwFoAU8o4Aj4i63ZhrstmGzY4NYKQ8PDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83Y2FmYzFhZS04YWVkLTQ3ZDgtYTcxOC0xNjlh MjcxNzM2YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEylzQqmpKtURoLjloikDEPvAn6tCWop0AmLEfNhJA5JpZI6hdgwqjs mcVBg2ZccVOKEH9hllGgxT457pVdBiWQQC26mw9V/lknAINnAVbJZyz8KyEyjYlJ WxwCgelQ2g8wnLDr3ZazAk9UyRajRShim+CtNRCF6Xc+T25H9Lsm9BrKfJCVAl10 2D678MaUsyF1jN7YuV5xfLnVNGVc8iCW3PWo9zeKU/08F64RFdfe6ZAj35moVs3J WO6AWy89oGFd89TC5C/K5vNbBnSV/yksE8qNNunmfKgQ3eYiXesJGfL6MmN+6xy5 NObmV1iKb+85c94PtoExXuoqHKrttsU= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:14 2024 by rpki-client on console-ams.rpki-client.org