$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa File: 2517d6e9-9680-3eb3-a47b-2325fa06189c.roa (raw, json) Hash identifier: 55T0N720oFuFMIuW0pAhoj6Yl+5VlEX2OWrxoT5Uy90= Subject key identifier: E2:E2:3D:04:1D:A5:57:D4:01:32:4C:A7:52:62:5F:C5:9C:EE:2D:E3 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F432858478F81278FF25B50B6D7735280 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 394625 IP address blocks: 23.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:27:8f:f2:5b:50:b6:d7:73:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=ec9ae2e1-60f5-40b0-ba53-d3cb9b410f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:e4:67:34:be:d0:f3:8d:af:aa:76:58:24: b6:94:da:bd:3f:7c:89:44:c3:19:77:bc:a1:3e:4a: 1b:50:e8:2e:f5:48:58:9d:eb:a2:14:39:1a:35:6c: 83:54:19:f3:d2:6c:7b:08:d2:a8:5a:d5:02:33:58: 89:b7:44:87:8f:eb:ea:5c:07:9d:09:fa:5c:d3:01: d6:82:cb:82:87:f7:31:b7:b6:d3:07:14:0d:a9:56: 03:f3:09:2c:9c:ff:7c:d6:74:60:96:a1:e4:94:64: 77:b0:69:78:f2:c6:e3:eb:22:66:f1:e1:f9:8f:a7: 6e:dd:f8:66:8d:4d:5a:27:33:38:36:99:93:22:26: 3d:ab:e9:42:8e:55:65:50:1e:09:83:ce:08:52:b2: bd:b7:e8:73:db:58:2f:3d:bc:b8:f2:06:c8:8d:8b: 12:bf:89:2f:65:27:5f:a7:46:1c:da:a0:2b:e9:44: fa:cc:94:3e:33:09:17:fa:5a:f0:5e:d3:87:bc:44: 73:d0:a1:c0:68:6c:e0:88:14:4c:9c:78:10:ad:1f: f0:f6:f0:76:d3:22:63:eb:92:ca:9e:50:1f:02:6f: af:a7:9f:18:ac:6a:01:a2:06:71:03:7b:fb:85:79: f4:10:0c:ec:12:fd:77:ff:5b:8c:01:52:d7:41:e7: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:3D:04:1D:A5:57:D4:01:32:4C:A7:52:62:5F:C5:9C:EE:2D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 23.154.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a3:e5:fb:c4:32:d8:08:58:a2:db:fe:ed:a8:95:d1:8e:f5: f9:7d:3f:0b:64:31:78:d7:56:3d:ee:31:3e:86:0e:62:4c:74: 77:a3:9f:29:2f:0f:52:30:7b:98:5a:f9:f9:5e:12:83:b8:ef: c0:07:bf:d1:fd:0e:de:00:09:64:f1:4c:2d:66:d9:c0:75:f8: 99:ea:bc:cd:b3:14:e3:5f:b0:bc:3b:7f:3d:8d:c2:1f:14:0f: 12:28:8c:b3:a5:71:2f:09:d5:d6:fe:7d:e1:14:fc:78:97:ce: ea:a6:92:27:fc:ef:a4:9c:00:2e:91:74:0e:8d:82:82:24:c3: 54:1e:b3:ad:dd:a5:ac:32:2e:17:85:4e:43:6c:ab:0d:48:df: 7d:46:f0:74:39:52:a1:1d:5e:f4:60:06:b0:99:21:33:4b:51: c7:14:e9:07:ac:2b:30:e6:1d:a9:71:5a:dc:45:3c:a4:ca:9e: 20:06:2c:6f:0c:00:91:0e:b5:ee:52:91:38:3d:19:83:05:d6: 33:fc:66:e3:b4:b4:ba:ec:14:63:8d:65:4f:6b:dc:c3:91:8f: 89:2a:18:87:9d:e9:21:1b:27:a7:f2:35:2e:e6:a1:7d:41:8a: d5:f5:29:d6:36:5e:03:73:6e:09:a8:4e:5c:7e:77:4d:12:cd: 80:0a:57:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgSeP8ltQttdzUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk ZWM5YWUyZTEtNjBmNS00MGIwLWJhNTMtZDNjYjliNDEwZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPkZzS+0PONr6p2WCS2lNq9P3yJRMMZd7yh PkobUOgu9UhYneuiFDkaNWyDVBnz0mx7CNKoWtUCM1iJt0SHj+vqXAedCfpc0wHW gsuCh/cxt7bTBxQNqVYD8wksnP981nRglqHklGR3sGl48sbj6yJm8eH5j6du3fhm jU1aJzM4NpmTIiY9q+lCjlVlUB4Jg84IUrK9t+hz21gvPby48gbIjYsSv4kvZSdf p0Yc2qAr6UT6zJQ+MwkX+lrwXtOHvERz0KHAaGzgiBRMnHgQrR/w9vB20yJj65LK nlAfAm+vp58YrGoBogZxA3v7hXn0EAzsEv13/1uMAVLXQef8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLiPQQdpVfUATJMp1JiX8Wc7i3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvMjUxN2Q2ZTktOTY4MC0z ZWIzLWE0N2ItMjMyNWZhMDYxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5oRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqj5fvEMtgIWKLb/u2oldGO9fl9PwtkMXjXVj3uMT6GDmJMdHejnykv D1Iwe5ha+fleEoO478AHv9H9Dt4ACWTxTC1m2cB1+JnqvM2zFONfsLw7fz2Nwh8U DxIojLOlcS8J1db+feEU/HiXzuqmkif876ScAC6RdA6NgoIkw1Qes63dpawyLheF TkNsqw1I331G8HQ5UqEdXvRgBrCZITNLUccU6QesKzDmHalxWtxFPKTKniAGLG8M AJEOte5SkTg9GYMF1jP8ZuO0tLrsFGONZU9r3MORj4kqGIed6SEbJ6fyNS7moX1B itX1KdY2XgNzbgmoTlx+d00SzYAKV2M= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org