$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: e/AvoNFhrWK9M3WVb/jpNb9vxqs8fZeeza3P6HuDCfA= Subject key identifier: 9B:6A:DF:7D:17:14:D1:5C:AC:E4:26:AE:93:7D:17:B2:62:01:54:FD Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F43285847643B74E2B88DE54E6E7FCB80 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:74:e2:b8:8d:e5:4e:6e:7f:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=6f5648d3-7e94-40d5-b6d4-db6c831ad06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:35:c8:35:2d:eb:92:bb:30:64:d9:ae:c2: 09:76:bd:c4:93:01:e0:bf:d5:0b:c6:91:59:38:d9: f6:42:38:53:3d:4c:b1:4f:88:ed:21:fb:28:98:e1: a1:52:98:c1:0e:57:b5:41:2a:16:a7:03:22:0c:48: f4:92:b3:50:8d:24:7f:5a:2e:b6:22:68:42:61:2b: f4:80:2a:a4:bb:e8:46:05:96:ac:0b:0c:6e:e0:dd: 42:7a:e1:93:b5:17:3b:ed:75:07:63:9c:5a:e6:6d: 7d:d2:20:94:c7:d2:4b:c0:9c:d0:ee:0d:de:0f:87: 2d:2a:80:9f:ce:1d:20:36:ed:9a:32:00:3b:fd:43: 24:0e:fa:3e:72:ff:58:5e:bc:88:12:a0:87:ce:e1: 54:03:61:e4:54:1b:ec:ff:2e:5a:ba:c2:01:97:ce: d5:b2:24:83:4a:fb:db:5e:a5:2c:3f:5f:26:f4:e6: 7e:93:99:50:05:b6:70:19:19:8b:00:f3:5a:0b:7b: c2:af:80:6f:b8:1a:c1:20:9a:b2:7e:9c:f0:74:c8: 6d:0b:1d:db:44:72:19:93:e6:cb:59:83:59:4a:ad: b3:ff:09:0d:4f:68:20:da:0b:5c:4d:c1:e5:3e:de: 1c:e1:82:86:18:aa:39:66:97:32:61:36:8f:42:ec: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:DF:7D:17:14:D1:5C:AC:E4:26:AE:93:7D:17:B2:62:01:54:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:6a:cc:44:2d:32:3f:54:07:78:4e:c4:44:c1:6e:4c:79:a0: 23:52:b3:ce:83:a6:59:11:dc:53:49:5a:4b:79:61:d6:2f:a2: fb:70:3b:7a:70:bd:a7:ed:43:d1:39:60:4a:09:e5:b6:ce:4c: cc:1d:f6:e0:89:a8:77:3b:26:3c:bf:81:4d:82:c9:01:02:4c: a6:b5:c4:cf:e3:63:73:32:7c:ab:cd:d9:c1:ca:7f:b8:77:ca: 4a:97:94:f4:1d:91:68:69:6c:57:15:f2:e1:be:7e:09:ef:7f: 39:c0:93:1f:03:6c:3c:b5:2b:f6:0d:34:9a:59:2d:60:43:b3: a8:d4:dd:bc:02:d7:53:27:57:c1:3f:02:fd:9c:a5:5e:b4:9b: 2b:38:ac:d4:c1:d3:94:bd:47:8c:e3:31:3c:d8:ac:e0:3c:7a: 72:e5:35:8d:5c:4d:f3:ca:e2:17:8a:7c:11:99:4c:7d:3f:7a: d3:61:99:89:0e:01:7c:19:73:6f:41:a0:2d:b6:e4:a4:55:55: 86:47:41:5d:cf:a8:51:6a:e2:48:0d:d3:c4:b6:9b:16:65:08: 84:54:2e:bd:b6:2f:c4:32:74:97:b5:3c:75:39:73:d5:94:5c: 77:9c:84:5c:3f:ed:04:ad:de:5e:f5:91:62:81:16:ec:87:6a: fa:11:b7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3TiuI3lTm5/y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk NmY1NjQ4ZDMtN2U5NC00MGQ1LWI2ZDQtZGI2YzgzMWFkMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Y1yDUt65K7MGTZrsIJdr3EkwHgv9ULxpFZ ONn2QjhTPUyxT4jtIfsomOGhUpjBDle1QSoWpwMiDEj0krNQjSR/Wi62ImhCYSv0 gCqku+hGBZasCwxu4N1CeuGTtRc77XUHY5xa5m190iCUx9JLwJzQ7g3eD4ctKoCf zh0gNu2aMgA7/UMkDvo+cv9YXryIEqCHzuFUA2HkVBvs/y5ausIBl87VsiSDSvvb XqUsP18m9OZ+k5lQBbZwGRmLAPNaC3vCr4BvuBrBIJqyfpzwdMhtCx3bRHIZk+bL WYNZSq2z/wkNT2gg2gtcTcHlPt4c4YKGGKo5ZpcyYTaPQuzvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtq330XFNFcrOQmrpN9F7JiAVT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxqzEQtMj9UB3hOxETBbkx5oCNSs86DplkR3FNJWkt5YdYvovtwO3pw vaftQ9E5YEoJ5bbOTMwd9uCJqHc7Jjy/gU2CyQECTKa1xM/jY3MyfKvN2cHKf7h3 ykqXlPQdkWhpbFcV8uG+fgnvfznAkx8DbDy1K/YNNJpZLWBDs6jU3bwC11MnV8E/ Av2cpV60mys4rNTB05S9R4zjMTzYrOA8enLlNY1cTfPK4heKfBGZTH0/etNhmYkO AXwZc29BoC225KRVVYZHQV3PqFFq4kgN08S2mxZlCIRULr22L8QydJe1PHU5c9WU XHechFw/7QSt3l71kWKBFuyHavoRt44= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:36 2024 by rpki-client on console-fra.rpki-client.org