$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa File: 04873bbe-f9c7-3d10-aba1-7b80bca15222.roa (raw, json) Hash identifier: xUG5bPajkTWSjons1teRcuBImGKKMJp5db/pOYvrQsk= Subject key identifier: 49:E0:A3:78:89:29:AD:1A:4E:DD:A9:F5:94:9A:B7:CF:F4:E8:AE:A9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B650022C1230154683FC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 205544 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:00:22:c1:23:01:54:68:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=283234dc-3d59-4e18-bfdb-3b0f058eba73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:2f:75:20:cf:76:ed:61:2f:36:01:de:c2: f5:49:7d:08:f4:c5:46:6b:ea:3d:69:8c:16:1e:db: a3:96:a4:50:8f:80:9b:08:48:38:61:86:e3:6b:ca: 56:3e:dd:28:a8:b3:c1:1e:7b:fd:03:f5:22:0b:40: c3:96:be:10:e9:45:17:85:0c:8b:ec:5a:b3:65:b0: 42:56:bc:f6:89:57:6d:d6:74:20:15:b0:c3:df:ee: e8:df:ee:0d:d4:19:84:e1:4c:99:ed:86:a2:24:e9: bb:f3:f3:b1:17:b5:43:ae:e6:60:4d:ae:86:05:eb: ab:6c:14:d1:82:0d:43:ba:5d:0d:c1:08:fc:d1:08: 09:8b:8b:0d:31:0a:f6:cc:f8:c7:ac:ee:86:1e:1a: 90:0f:4e:73:00:3b:d0:64:92:8f:02:ec:9b:fa:d8: 1d:05:9b:ab:e1:ea:ce:af:fe:37:4e:48:3b:c3:3f: b5:fc:ba:b1:9f:b2:92:57:e5:e5:f1:9a:2c:42:c4: 68:3a:d6:a7:4e:07:1a:65:c8:78:86:49:2b:0a:bf: 47:f8:60:e7:0c:33:a8:6e:9d:41:d1:ed:fe:dc:e2: 56:8b:75:68:f5:3d:71:55:7e:73:81:83:fd:e6:16: bf:b1:94:dc:a4:2b:03:5e:81:03:fc:60:83:c3:f4: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E0:A3:78:89:29:AD:1A:4E:DD:A9:F5:94:9A:B7:CF:F4:E8:AE:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1c:a9:7a:9e:eb:a8:98:71:b2:1c:f0:b7:37:10:65:45:36: 10:c4:b3:50:b6:bd:b3:fa:93:4b:88:16:a9:c8:08:92:f1:02: 24:6b:8d:4d:ae:24:60:89:3f:57:a5:c1:3d:c1:13:54:73:22: 06:f0:bf:24:bb:b0:18:13:6f:7e:bf:5e:d1:a6:b9:e2:fc:8a: cb:0d:7b:f7:82:84:b9:65:3a:aa:5a:3a:cd:9a:00:c9:9b:80: 34:3b:ba:c1:63:b4:d6:f9:c7:60:37:66:b0:2d:68:eb:c4:79: 9f:37:23:f5:84:f5:40:25:5f:aa:c6:2d:22:f5:2a:c6:fd:84: 30:77:10:14:49:94:47:c7:53:7c:09:a3:8a:af:78:d2:90:de: 7d:08:21:27:77:34:e9:d1:9b:55:9b:df:13:c6:92:ef:3a:bb: 99:86:92:36:c9:a8:66:6b:4d:e9:05:c9:9d:f3:f9:bc:31:c1: 09:5a:b3:cf:e3:cd:7b:81:ec:53:d0:5d:18:80:77:bc:50:48: 72:b2:71:53:00:61:6d:ef:3d:0b:d0:07:7a:a4:11:73:3e:19: a9:84:47:cc:9c:01:ed:62:14:51:34:c2:7e:1d:02:02:a6:53: e8:94:06:79:21:39:7c:cc:4a:23:22:02:e1:a2:3d:45:67:a4: de:9b:6e:54 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2UAIsEjAVRoP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk MjgzMjM0ZGMtM2Q1OS00ZTE4LWJmZGItM2IwZjA1OGViYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvovdSDPdu1hLzYB3sL1SX0I9MVGa+o9aYwW HtujlqRQj4CbCEg4YYbja8pWPt0oqLPBHnv9A/UiC0DDlr4Q6UUXhQyL7FqzZbBC Vrz2iVdt1nQgFbDD3+7o3+4N1BmE4UyZ7YaiJOm78/OxF7VDruZgTa6GBeurbBTR gg1Dul0NwQj80QgJi4sNMQr2zPjHrO6GHhqQD05zADvQZJKPAuyb+tgdBZur4erO r/43Tkg7wz+1/Lqxn7KSV+Xl8ZosQsRoOtanTgcaZch4hkkrCr9H+GDnDDOobp1B 0e3+3OJWi3Vo9T1xVX5zgYP95ha/sZTcpCsDXoED/GCDw/SJhwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEngo3iJKa0aTt2p9ZSat8/06K6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ4NzNiYmUtZjljNy0z ZDEwLWFiYTEtN2I4MGJjYTE1MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArRypep7rqJhxshzwtzcQZUU2EMSzULa9 s/qTS4gWqcgIkvECJGuNTa4kYIk/V6XBPcETVHMiBvC/JLuwGBNvfr9e0aa54vyK yw1794KEuWU6qlo6zZoAyZuANDu6wWO01vnHYDdmsC1o68R5nzcj9YT1QCVfqsYt IvUqxv2EMHcQFEmUR8dTfAmjiq940pDefQghJ3c06dGbVZvfE8aS7zq7mYaSNsmo ZmtN6QXJnfP5vDHBCVqzz+PNe4HsU9BdGIB3vFBIcrJxUwBhbe89C9AHeqQRcz4Z qYRHzJwB7WIUUTTCfh0CAqZT6JQGeSE5fMxKIyIC4aI9RWek3ptuVA== -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org