$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: BexLDY9I15KNlwK4i8lwhzqzkllabo7D24YCSuG1uog= Subject key identifier: 79:70:BD:47:E9:67:0B:51:9D:7E:0B:B2:A1:05:9C:63:F8:38:1C:98 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B65964C76A4CE65E57F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:96:4c:76:a4:ce:65:e5:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=c9637a59-642b-4e5a-a6ca-422aa5e394a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e0:c0:60:74:bf:ac:b8:90:fa:e9:18:ce:f7: cc:3b:82:31:90:a8:35:bf:c3:b0:df:9a:6b:e2:94: 67:41:76:b6:84:55:44:22:57:bc:d2:35:69:e5:c1: 04:31:01:f6:e7:f8:ab:50:46:e4:ac:41:a3:fd:0f: e1:79:49:57:5c:b3:a4:42:ee:c1:af:d4:de:60:a4: 72:a4:76:eb:09:b3:4e:91:ee:76:eb:5e:6a:8d:1f: 6a:7d:24:fb:bd:05:ce:81:22:b4:57:dd:bb:fd:df: 43:dd:c2:b6:d5:64:6c:a4:8a:b1:33:2d:9d:20:a6: fe:98:34:8d:e8:28:b4:49:07:f2:16:67:2f:88:33: ab:0d:0f:33:7f:60:bc:c4:68:a8:18:1a:4f:b8:66: b0:6f:a9:a2:20:61:37:46:9f:c5:5c:50:99:8d:21: 71:60:7d:60:a4:5c:5a:a8:02:ff:26:a5:72:ae:4f: e1:de:39:47:75:5d:9c:a8:f8:0f:13:f1:f1:4d:cb: 9d:20:b6:27:f1:43:b2:c4:a0:9b:c0:eb:48:af:40: 5f:0f:00:8d:6b:c1:dc:7e:22:1f:1e:91:01:2c:17: 8e:00:db:a7:b4:28:2f:7d:58:09:87:7a:55:0c:b7: e9:7d:2d:ce:f3:31:20:4b:35:b3:73:20:10:23:98: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:70:BD:47:E9:67:0B:51:9D:7E:0B:B2:A1:05:9C:63:F8:38:1C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:89:45:1e:d6:03:cf:6a:3d:e3:4f:5a:c6:d3:4d:2e:92: 15:26:29:0c:20:b3:f5:24:f0:8e:04:e2:8a:04:30:47:b1:e1: 63:6a:56:d5:f9:59:e0:50:f2:09:f9:ea:9d:f0:e2:ca:b4:66: ba:34:63:76:61:db:ae:e8:01:e7:b0:f2:00:15:53:74:33:fd: e8:fc:c7:ac:d6:be:35:7d:d4:15:f0:05:ad:20:84:1b:d6:7a: d4:74:b2:af:fb:79:68:1b:8b:52:8f:cf:9d:14:b7:1d:2d:56: a4:77:50:39:9e:c4:8c:ca:ac:01:f6:7d:7e:0c:91:d9:cf:15: f3:f6:65:9f:17:47:2d:31:52:60:46:13:76:67:2c:58:8e:34: 00:0b:a6:a5:b2:21:8f:93:49:44:39:ec:1e:23:fd:8c:da:da: 05:10:bd:bd:d2:12:79:03:51:55:d6:db:d6:ce:6e:07:20:13: 38:20:19:66:a5:c9:e1:3a:2b:9f:a4:7f:bd:bd:17:ff:e4:7f: b3:28:4c:4d:bf:76:2d:af:03:ff:35:20:44:2d:72:07:0a:53: 16:9f:e8:cc:ac:3e:ca:e9:31:ca:b0:87:cc:d1:16:72:c1:99: 4f:dc:2b:56:03:85:ff:cb:7e:ee:60:66:71:46:55:1d:85:57: ac:cc:91:64 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2WWTHakzmXlf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk Yzk2MzdhNTktNjQyYi00ZTVhLWE2Y2EtNDIyYWE1ZTM5NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmODAYHS/rLiQ+ukYzvfMO4IxkKg1v8Ow35pr 4pRnQXa2hFVEIle80jVp5cEEMQH25/irUEbkrEGj/Q/heUlXXLOkQu7Br9TeYKRy pHbrCbNOke52615qjR9qfST7vQXOgSK0V927/d9D3cK21WRspIqxMy2dIKb+mDSN 6Ci0SQfyFmcviDOrDQ8zf2C8xGioGBpPuGawb6miIGE3Rp/FXFCZjSFxYH1gpFxa qAL/JqVyrk/h3jlHdV2cqPgPE/HxTcudILYn8UOyxKCbwOtIr0BfDwCNa8HcfiIf HpEBLBeOANuntCgvfVgJh3pVDLfpfS3O8zEgSzWzcyAQI5jBMQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHlwvUfpZwtRnX4LsqEFnGP4OByYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJb+JRR7WA89qPeNPWsbTTS6SFSYpDCCz 9STwjgTiigQwR7HhY2pW1flZ4FDyCfnqnfDiyrRmujRjdmHbrugB57DyABVTdDP9 6PzHrNa+NX3UFfAFrSCEG9Z61HSyr/t5aBuLUo/PnRS3HS1WpHdQOZ7EjMqsAfZ9 fgyR2c8V8/ZlnxdHLTFSYEYTdmcsWI40AAumpbIhj5NJRDnsHiP9jNraBRC9vdIS eQNRVdbb1s5uByATOCAZZqXJ4Torn6R/vb0X/+R/syhMTb92La8D/zUgRC1yBwpT Fp/ozKw+yukxyrCHzNEWcsGZT9wrVgOF/8t+7mBmcUZVHYVXrMyRZA== -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org