$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa File: 0b9192f9-061b-30a2-83f7-063c62014f7a.roa (raw, json) Hash identifier: Zj+I2U93bebKBT/AXYe87w4XrFMEnvtlFwGo5X0cX0w= Subject key identifier: A6:E1:84:24:B9:29:58:BC:64:52:1E:33:0A:53:69:EA:63:33:4B:F5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B63B45E123C20B99C5CA0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 395954 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:63:b4:5e:12:3c:20:b9:9c:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=abfa2f8a-2b20-4bc1-88bc-7238bfb888ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:38:1a:1f:9a:d8:9b:5c:8a:6a:72:6e:20: bf:57:e3:9e:b3:28:0d:3b:e2:1f:88:67:39:79:b7: 36:a1:10:20:35:f0:1d:57:44:e6:df:8b:c5:3b:3e: 20:4d:f6:d7:c2:57:39:21:32:91:fa:99:ee:a8:1c: 8a:c2:76:5d:8d:71:e3:6e:87:a9:3a:fe:dc:1f:01: d1:b7:0e:a1:82:65:b3:44:ca:83:ed:26:67:76:98: b1:66:4d:61:9a:37:bf:b4:e3:42:ca:47:b0:84:d2: e7:b9:59:80:66:c1:95:46:df:fb:e0:8c:24:c1:74: d7:3e:13:fc:88:ab:4f:d7:9d:53:52:44:9b:cc:e3: 86:67:77:aa:4a:71:91:bf:72:88:99:36:14:bc:a7: b7:17:33:d4:e9:fd:c0:5c:33:2f:38:53:8f:24:ef: 4f:5c:06:92:60:0f:04:8f:d5:0e:2b:5a:8c:79:10: fe:fd:6c:f7:5a:65:d9:40:a9:ac:a4:a7:3c:22:f1: a7:88:16:ff:a2:ae:f5:66:4e:68:1a:ad:07:08:ba: b8:18:bd:b0:8e:bb:5f:6b:83:b3:28:1a:2e:00:1a: c4:e8:4f:21:0d:43:29:2e:bc:d7:4f:96:a1:25:12: e1:4a:27:5b:63:77:1f:17:85:95:86:bc:2f:c8:92: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:84:24:B9:29:58:BC:64:52:1E:33:0A:53:69:EA:63:33:4B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:46:b7:83:3a:08:f3:22:73:2c:ce:b9:0c:f1:5c:13:ba:58: f4:d0:33:1c:2a:bf:6e:e5:0f:67:1e:9e:56:bb:b7:77:1a:f6: 82:5e:65:f3:40:9e:7c:ad:68:cf:9b:b1:4a:70:5f:24:5d:07: c8:3a:13:cd:ea:37:47:54:35:30:1a:a3:22:ab:ea:00:e5:f4: ad:be:3e:f1:eb:4e:33:18:82:65:3b:90:ce:8e:78:f0:5d:47: 11:f5:1d:66:d5:3d:eb:03:88:f3:71:80:1e:da:b1:15:71:6c: a7:75:d1:ea:be:4d:39:95:c4:9d:d0:90:7a:80:9c:3e:f1:67: ef:2e:87:f5:c4:32:f1:39:bc:49:95:cc:d3:15:50:ad:78:27: 03:46:ca:f4:19:17:74:f3:00:07:93:a5:70:37:f5:ae:5f:b1: 00:4d:cc:d1:b4:bb:1f:4f:10:e2:40:0a:2a:08:91:47:6c:c8: b5:79:4f:96:44:c6:6a:3c:38:1b:74:44:2b:77:43:28:f1:87: 64:06:da:ab:bf:42:f9:1f:dd:17:96:25:08:7b:d8:09:d2:ce: a1:b9:c6:4d:b0:18:d6:7e:67:e1:47:55:e9:ab:af:19:cf:c7: 2c:6f:12:ad:eb:7d:ac:1f:68:d8:9c:ff:9b:e4:52:52:60:ff: 61:72:a7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2O0XhI8ILmcXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk YWJmYTJmOGEtMmIyMC00YmMxLTg4YmMtNzIzOGJmYjg4OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGk4Gh+a2JtcimpybiC/V+OesygNO+IfiGc5 ebc2oRAgNfAdV0Tm34vFOz4gTfbXwlc5ITKR+pnuqByKwnZdjXHjboepOv7cHwHR tw6hgmWzRMqD7SZndpixZk1hmje/tONCykewhNLnuVmAZsGVRt/74IwkwXTXPhP8 iKtP151TUkSbzOOGZ3eqSnGRv3KImTYUvKe3FzPU6f3AXDMvOFOPJO9PXAaSYA8E j9UOK1qMeRD+/Wz3WmXZQKmspKc8IvGniBb/oq71Zk5oGq0HCLq4GL2wjrtfa4Oz KBouABrE6E8hDUMpLrzXT5ahJRLhSidbY3cfF4WVhrwvyJJNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbhhCS5KVi8ZFIeMwpTaepjM0v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMGI5MTkyZjktMDYxYi0z MGEyLTgzZjctMDYzYzYyMDE0ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNGt4M6CPMicyzOuQzxXBO6WPTQMxwqv27lD2cenla7t3ca9oJeZfNA nnytaM+bsUpwXyRdB8g6E83qN0dUNTAaoyKr6gDl9K2+PvHrTjMYgmU7kM6OePBd RxH1HWbVPesDiPNxgB7asRVxbKd10eq+TTmVxJ3QkHqAnD7xZ+8uh/XEMvE5vEmV zNMVUK14JwNGyvQZF3TzAAeTpXA39a5fsQBNzNG0ux9PEOJACioIkUdsyLV5T5ZE xmo8OBt0RCt3Qyjxh2QG2qu/Qvkf3ReWJQh72AnSzqG5xk2wGNZ+Z+FHVemrrxnP xyxvEq3rfawfaNic/5vkUlJg/2Fyp9o= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org