$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json) Hash identifier: FWcK7rWrJoWS2a2x8xt87ut999FzpmaNgfWVeK8QqkE= Subject key identifier: 56:9A:79:E6:2E:61:8E:FB:31:63:66:54:9F:17:F0:FB:8E:75:0D:96 Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Certificate serial: 010D0C9F43285847EFEF8E71372B5DE9E2B09700 Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 32673 IP address blocks: 23.170.104.0/24 maxlen: 24 2607:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:8e:71:37:2b:5d:e9:e2:b0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=f770f798-776e-4425-966a-50ee6f5c8ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:fc:e9:58:4a:7e:d6:f1:c4:3c:00:2f:0a: 0a:72:3a:1e:d7:52:40:f1:0e:7e:a5:19:17:98:9e: ef:a3:5e:24:19:1b:2f:d3:e2:07:d2:e0:28:d3:09: 3b:4e:b0:9d:81:9d:91:ee:86:e5:18:59:a9:06:e0: 0a:02:da:1b:aa:d6:ea:81:b8:1d:ce:c6:f0:56:7e: dc:8f:b4:57:9a:18:20:d6:47:e3:95:a7:d6:5c:fb: 9c:7c:f5:4a:86:c2:cc:b1:61:7c:19:9c:e1:7a:d1: 9e:50:26:10:87:f4:ef:9a:d9:df:d7:47:0d:ee:25: 8a:7b:91:a4:29:57:23:e5:36:6a:c7:45:07:88:ee: ef:54:f0:8a:c3:ae:4e:a6:4b:3a:1d:c7:12:21:ff: 91:35:5c:9a:5c:39:01:25:9c:23:4b:ba:79:b6:39: 45:09:5d:db:f5:1a:76:96:84:47:c0:aa:cb:15:71: 2a:20:54:59:f8:f5:d9:8c:cc:40:14:11:a0:59:da: 54:51:22:8f:21:fd:16:ed:49:0f:cd:d4:ce:65:5b: c2:9c:00:d5:0c:8d:40:42:6c:ae:ae:e3:b8:a7:da: ad:58:44:7f:f1:ef:ed:5d:d9:66:72:64:9d:64:d2: f5:9e:6f:53:6e:fd:ae:bd:7e:3d:37:aa:c7:70:aa: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9A:79:E6:2E:61:8E:FB:31:63:66:54:9F:17:F0:FB:8E:75:0D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl X509v3 Authority Key Identifier: keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:52:61:a1:b9:28:05:74:83:66:ca:d1:be:7c:15:31:32:2a: e6:c3:70:bc:10:bd:e3:92:9c:82:f8:53:f8:b2:2a:84:ea:20: b6:08:03:a6:24:a4:c4:c7:b3:34:77:c0:31:65:1e:f3:d2:8e: 8e:9d:88:06:ec:c4:6e:cf:de:6e:bc:b2:e3:f1:a1:dc:d9:b2: 13:51:a7:4c:d8:76:8f:03:36:22:f1:cc:7f:9e:dd:4b:d8:90: 5f:e3:5c:86:f7:b7:a0:50:7e:ea:f2:3f:cb:8b:10:de:f8:68: c2:f5:d2:6a:23:38:5e:4a:9d:e0:fc:c1:c8:9d:5b:bc:e9:ed: b2:45:0d:e1:2f:a6:22:0e:b9:37:a7:5c:78:80:ee:fd:ee:07: 42:8a:e9:10:8e:0d:36:e1:47:bf:e3:7b:98:42:1a:da:75:4f: ee:3c:e2:0c:69:bd:6a:4c:fa:79:47:c8:2c:15:e3:ac:8e:e0: 22:7a:75:ad:df:9e:1a:b0:f6:92:4d:4e:49:72:04:de:c8:80: 85:74:50:4d:7c:6e:36:d4:71:26:0b:df:50:ae:11:8b:0d:0d: aa:0c:9b:bd:d1:7e:e8:b4:9b:f3:06:6b:e4:6c:05:67:e9:92: 85:88:14:b1:3a:d5:ee:77:be:14:83:38:5f:ad:b8:42:33:d7: 08:35:35:73 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEfv745xNytd6eKwlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh YTcyMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk Zjc3MGY3OTgtNzc2ZS00NDI1LTk2NmEtNTBlZTZmNWM4ZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsD86VhKftbxxDwALwoKcjoe11JA8Q5+pRkX mJ7vo14kGRsv0+IH0uAo0wk7TrCdgZ2R7oblGFmpBuAKAtobqtbqgbgdzsbwVn7c j7RXmhgg1kfjlafWXPucfPVKhsLMsWF8GZzhetGeUCYQh/Tvmtnf10cN7iWKe5Gk KVcj5TZqx0UHiO7vVPCKw65Opks6HccSIf+RNVyaXDkBJZwjS7p5tjlFCV3b9Rp2 loRHwKrLFXEqIFRZ+PXZjMxAFBGgWdpUUSKPIf0W7UkPzdTOZVvCnADVDI1AQmyu ruO4p9qtWER/8e/tXdlmcmSdZNL1nm9Tbv2uvX49N6rHcKrtyQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFFaaeeYuYY77MWNmVJ8X8PuOdQ2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3 YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4 MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFNSYaG5KAV0g2bK0b58FTEyKubDcLwQveOS nIL4U/iyKoTqILYIA6YkpMTHszR3wDFlHvPSjo6diAbsxG7P3m68suPxodzZshNR p0zYdo8DNiLxzH+e3UvYkF/jXIb3t6BQfuryP8uLEN74aML10mojOF5KneD8wcid W7zp7bJFDeEvpiIOuTenXHiA7v3uB0KK6RCODTbhR7/je5hCGtp1T+484gxpvWpM +nlHyCwV46yO4CJ6da3fnhqw9pJNTklyBN7IgIV0UE18bjbUcSYL31CuEYsNDaoM m73Rfui0m/MGa+RsBWfpkoWIFLE61e53vhSDOF+tuEIz1wg1NXM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org