$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: BlFecvB6VQHHlvflduz41VPe+QH/cLwaTw3qwGNuYOs= Subject key identifier: A7:B7:1E:AC:AA:E1:EA:AD:11:30:09:C7:83:99:CD:BB:62:2E:63:1C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B65A4ED4DE054675FB940 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:a4:ed:4d:e0:54:67:5f:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=ce05799d-3afa-410c-bbd0-9acf33b084ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:1e:a5:cc:28:b3:de:41:c6:84:13:d3:c0: b0:97:65:f1:0e:15:f5:b9:83:09:6b:a7:13:f0:08: 45:8b:0b:07:fc:af:55:de:02:82:55:db:cf:97:b3: 76:79:82:1f:e5:d7:52:d5:6b:a2:a2:7d:a9:ba:6d: fe:9e:66:86:73:e6:96:6c:67:56:1e:88:9a:6c:70: a7:33:48:fd:ed:1f:7d:76:cc:e4:1e:2d:05:bf:c0: 9a:e7:59:36:a3:c5:95:54:a2:25:36:d8:12:a9:2a: 57:39:d0:30:ee:75:5e:cc:17:61:ad:e9:00:4d:9a: 8a:5d:2c:ea:b3:57:5f:b0:9e:71:4d:11:a3:19:a2: af:54:c4:57:5d:38:2b:7e:ec:39:dc:6c:0b:a3:a7: 9f:db:2e:98:9f:bc:f0:74:6c:78:d8:a0:e8:8a:e5: 08:d6:a2:c2:c0:cf:55:e9:fc:31:af:73:6b:48:06: 40:df:32:77:b9:7d:83:6a:7d:b4:d0:77:ca:e7:05: b8:ca:30:01:00:ea:d1:0f:1c:79:69:0c:73:33:39: bc:d0:57:56:44:d6:5b:53:d8:d8:82:f0:b2:20:bb: a8:18:1e:36:e1:18:d7:56:d2:bd:5d:53:8a:2d:a1: 7e:c7:79:0f:6e:13:58:3b:a9:a4:b1:39:a2:ba:7e: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B7:1E:AC:AA:E1:EA:AD:11:30:09:C7:83:99:CD:BB:62:2E:63:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d3:f6:bd:b0:de:57:01:84:eb:6f:fb:14:62:c4:2f:81:88: 34:75:1c:49:26:be:c7:87:d7:9c:e9:52:4c:e1:e9:3f:9b:2f: 9a:6a:ae:85:fe:6e:20:4b:4d:1d:06:01:84:e6:09:6b:a1:c3: c9:c8:90:12:a2:eb:f2:a0:0c:c0:b2:3d:0c:5e:79:66:eb:6b: c8:07:96:87:d9:ff:aa:c9:8e:93:b7:f6:df:b4:13:35:c1:c7: 11:e8:4e:b7:c1:80:fc:73:92:34:69:6b:33:94:29:65:76:c8: ae:02:60:b8:b2:91:fb:96:c4:60:98:ea:a0:2c:41:f0:1d:49: aa:23:d7:b8:d6:fa:08:bd:11:a2:ed:26:88:bc:cf:1a:16:f2: ce:2a:29:a5:ce:29:b1:94:5f:ab:da:d7:e9:06:8a:67:8d:59: 69:12:76:fd:9c:9c:83:17:22:44:90:b0:18:3e:19:d6:e0:07: f3:71:58:f8:36:83:62:aa:5c:40:ef:6a:9e:6f:a8:9e:17:c5: 20:65:78:2c:b9:2a:78:27:df:a2:9c:4d:55:f6:2a:0d:ef:ba: 36:91:ff:3a:9f:11:dc:5e:83:61:ec:e5:bf:23:dc:ab:6a:46: 60:e2:07:7d:69:d3:24:bc:1a:74:34:a7:c0:1c:fa:1a:07:d2: e5:83:86:65 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2Wk7U3gVGdfuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2UwNTc5OWQtM2FmYS00MTBjLWJiZDAtOWFjZjMzYjA4NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU4epcwos95BxoQT08Cwl2XxDhX1uYMJa6cT 8AhFiwsH/K9V3gKCVdvPl7N2eYIf5ddS1Wuion2pum3+nmaGc+aWbGdWHoiabHCn M0j97R99dszkHi0Fv8Ca51k2o8WVVKIlNtgSqSpXOdAw7nVezBdhrekATZqKXSzq s1dfsJ5xTRGjGaKvVMRXXTgrfuw53GwLo6ef2y6Yn7zwdGx42KDoiuUI1qLCwM9V 6fwxr3NrSAZA3zJ3uX2Dan200HfK5wW4yjABAOrRDxx5aQxzMzm80FdWRNZbU9jY gvCyILuoGB424RjXVtK9XVOKLaF+x3kPbhNYO6mksTmiun66/QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKe3Hqyq4eqtETAJx4OZzbtiLmMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArNP2vbDeVwGE62/7FGLEL4GINHUcSSa+ x4fXnOlSTOHpP5svmmquhf5uIEtNHQYBhOYJa6HDyciQEqLr8qAMwLI9DF55Zutr yAeWh9n/qsmOk7f237QTNcHHEehOt8GA/HOSNGlrM5QpZXbIrgJguLKR+5bEYJjq oCxB8B1JqiPXuNb6CL0Rou0miLzPGhbyzioppc4psZRfq9rX6QaKZ41ZaRJ2/Zyc gxciRJCwGD4Z1uAH83FY+DaDYqpcQO9qnm+onhfFIGV4LLkqeCffopxNVfYqDe+6 NpH/Op8R3F6DYezlvyPcq2pGYOIHfWnTJLwadDSnwBz6GgfS5YOGZQ== -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org