$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa File: 502505e1-d06b-3b30-bd54-58420c555658.roa (raw, json) Hash identifier: EifbsuK3Buj+nK33T4297BoCSItZ/ap1e6zFW8qk6tE= Subject key identifier: 49:27:D7:BC:21:01:A6:2C:BB:91:6A:29:8A:C6:4C:8B:64:C6:38:81 Certificate issuer: /CN=068fe099-ec29-42a6-8cc8-92597523d41f Certificate serial: 010D0C9F43285847A30BFBC8C3D6CF6CA1F75900 Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 33263 IP address blocks: 23.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:fb:c8:c3:d6:cf:6c:a1:f7:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=3e7363c4-af47-4e67-b6a9-15a452a4570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:6b:24:68:af:0a:5a:f3:3d:82:cf:46:58: 68:df:f7:f6:88:44:ec:e4:dc:7f:56:fe:a1:0d:c0: 51:9d:51:88:9b:8c:55:3a:39:12:ad:d0:ab:68:a6: ab:28:9d:66:11:fd:54:a8:70:57:b7:05:c6:d4:88: 0f:c8:ba:92:27:24:65:4b:15:42:18:85:7b:00:0f: 1c:36:76:4d:4d:52:a8:f3:2c:62:6a:ed:dc:fe:78: 40:2e:36:b6:c7:84:0f:1f:ed:f9:30:84:59:64:b4: 31:d2:d9:56:9a:bc:60:00:05:91:42:04:89:21:c6: c1:96:e4:66:e2:5b:2f:7d:62:f2:a3:09:75:3d:3c: 5f:24:14:da:f9:3e:e4:15:ae:c9:ef:44:e9:cd:00: b5:c5:a8:fa:96:8c:78:c1:01:1e:38:34:75:aa:75: a8:09:a4:7f:7e:90:bd:6a:4e:2e:8b:25:c9:25:58: 0a:3a:14:ff:23:e7:14:21:ca:b6:6e:1a:d8:c4:f1: 42:cb:1c:7c:5e:02:44:7a:74:e6:ea:7d:8e:d1:84: 42:bd:01:a8:4f:d0:68:6d:5f:5a:13:03:ee:f8:fb: e6:b9:d9:b9:10:f8:3e:98:b2:d5:50:77:29:6c:10: d1:3f:f2:da:93:ac:fe:3f:f2:13:27:dd:d3:51:1a: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:D7:BC:21:01:A6:2C:BB:91:6A:29:8A:C6:4C:8B:64:C6:38:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl X509v3 Authority Key Identifier: keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer sbgp-ipAddrBlock: critical IPv4: 23.167.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:10:e5:f0:bb:9b:63:45:13:1f:c2:43:af:d8:68:4c:c1:db: 84:e2:57:f3:14:29:b8:9d:6f:a4:a6:39:c2:8a:7a:4b:e4:f2: bc:53:40:52:f9:fe:ec:8f:cf:90:80:f8:56:2f:51:1a:d1:78: 85:37:67:75:0d:9f:4e:40:ab:47:aa:4f:42:71:d6:92:20:3b: 81:79:46:7e:a5:96:b8:1d:a2:56:f0:0b:81:42:96:50:e9:00: 33:1c:04:ee:99:7c:b1:8b:f8:37:74:5e:e6:80:78:1d:5e:90: ad:88:6d:8f:a0:dd:68:aa:a2:80:78:36:8d:e9:5f:dd:98:b9: 8a:5b:19:1d:b5:c6:83:25:3f:95:22:99:57:95:25:30:c6:a2: 0e:e2:6a:c9:1d:f0:1f:36:06:f6:2e:e9:3c:13:5c:3d:9a:bc: 66:6f:a4:8a:c2:ac:f0:29:73:97:26:40:49:75:eb:af:59:ec: 08:f2:ab:1e:b7:8a:5d:03:ac:87:7d:38:7e:9d:04:b1:92:07: 32:9f:9b:ef:3e:b2:35:71:aa:c0:e8:a9:17:0b:ec:12:80:ce: 78:c0:bd:04:e9:db:dc:b5:fd:55:1c:38:10:8f:36:18:96:3d: 85:61:3c:2a:8b:fd:9b:bd:1b:57:77:54:eb:c1:3e:f2:43:78: c4:19:06:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/vIw9bPbKH3WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY4ZmUwOTktZWMyOS00MmE2LThjYzgtOTI1OTc1MjNk NDFmMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk M2U3MzYzYzQtYWY0Ny00ZTY3LWI2YTktMTVhNDUyYTQ1NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIZrJGivClrzPYLPRlho3/f2iETs5Nx/Vv6h DcBRnVGIm4xVOjkSrdCraKarKJ1mEf1UqHBXtwXG1IgPyLqSJyRlSxVCGIV7AA8c NnZNTVKo8yxiau3c/nhALja2x4QPH+35MIRZZLQx0tlWmrxgAAWRQgSJIcbBluRm 4lsvfWLyowl1PTxfJBTa+T7kFa7J70TpzQC1xaj6lox4wQEeODR1qnWoCaR/fpC9 ak4uiyXJJVgKOhT/I+cUIcq2bhrYxPFCyxx8XgJEenTm6n2O0YRCvQGoT9BobV9a EwPu+Pvmudm5EPg+mLLVUHcpbBDRP/Lak6z+P/ITJ93TURqS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkn17whAaYsu5FqKYrGTItkxjiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhm ZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5NzUyM2Q0MWYvNTAyNTA1ZTEtZDA2Yi0z YjMwLWJkNTQtNTg0MjBjNTU1NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY4ZmUwOTktZWMyOS00MmE2LThj YzgtOTI1OTc1MjNkNDFmLzA2OGZlMDk5LWVjMjktNDJhNi04Y2M4LTkyNTk3NTIz ZDQxZi5jcmwwHwYDVR0jBBgwFoAUnfzcYZk6aSe9RDWFcnIIBGiUojEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhmZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5 NzUyM2Q0MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6doMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsQ5fC7m2NFEx/CQ6/YaEzB24TiV/MUKbidb6SmOcKKekvk8rxTQFL5 /uyPz5CA+FYvURrReIU3Z3UNn05Aq0eqT0Jx1pIgO4F5Rn6llrgdolbwC4FCllDp ADMcBO6ZfLGL+Dd0XuaAeB1ekK2IbY+g3WiqooB4No3pX92YuYpbGR21xoMlP5Ui mVeVJTDGog7iaskd8B82BvYu6TwTXD2avGZvpIrCrPApc5cmQEl1669Z7Ajyqx63 il0DrId9OH6dBLGSBzKfm+8+sjVxqsDoqRcL7BKAznjAvQTp29y1/VUcOBCPNhiW PYVhPCqL/Zu9G1d3VOvBPvJDeMQZBoQ= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:12 2024 by rpki-client on console-fra.rpki-client.org