$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa File: 980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json) Hash identifier: n7AdN8K1X/F1+idQb6KJR8+dv9BQ0CX4mRUBl1sjXY8= Subject key identifier: 29:5C:2A:27:9D:BE:79:7A:AC:94:4C:3C:9F:88:29:12:B9:D6:99:8B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B6577F9053B2DC0BD1100 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 136988 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:77:f9:05:3b:2d:c0:bd:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=b4b0c42b-5747-4aca-94b0-5d48b4526099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:5a:b5:8d:72:16:1c:06:ed:d1:dd:ab:36: ab:b8:3a:06:11:3f:36:cb:51:83:ba:24:51:9f:27: f0:65:75:d6:5c:df:f0:e7:a6:dc:f5:0d:f3:f4:10: 43:f6:19:5b:81:6a:89:9d:78:b0:09:22:44:07:0a: 0e:ea:17:82:5a:1b:da:2f:0d:ab:4a:95:12:3b:24: b9:96:2c:20:f6:0b:bd:de:11:2c:bd:50:f8:e4:f7: 09:0d:4d:c9:8a:af:91:6e:3d:30:f6:9c:2a:88:a1: 54:dd:0f:b7:c0:a3:58:b1:97:cb:95:b2:43:ac:fa: 7b:8c:c2:5e:46:b4:96:e4:51:ce:22:21:c6:78:34: 97:8a:d9:0d:a2:e6:de:5e:ff:78:9e:f9:53:19:bb: 9a:80:fc:fa:77:16:3c:89:6e:18:8c:a7:1d:92:02: a4:e9:b1:81:09:72:1b:da:54:36:4b:a5:05:e7:be: 89:bc:1e:f2:94:d5:f8:f1:98:ee:21:d9:55:73:a1: 2e:80:1c:a7:ba:cd:57:8e:20:47:5c:47:da:c3:88: 92:d4:3d:57:74:d2:72:2c:0a:71:01:3b:bf:bc:8c: 41:c6:6f:85:7e:d2:51:76:a4:4b:ef:5c:c8:66:fb: 58:cf:58:9c:82:e3:4d:71:cb:f3:95:b5:8d:7a:dd: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:2A:27:9D:BE:79:7A:AC:94:4C:3C:9F:88:29:12:B9:D6:99:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5e:1f:5f:bf:5d:8d:ce:5d:3b:cb:36:b0:8d:31:d6:ec:1f: 61:3a:92:d2:f0:9c:06:93:49:36:85:43:30:1e:7b:ee:f0:3f: f1:6a:5f:a0:c5:11:b5:c5:7d:f1:cd:69:3d:a4:3a:02:e6:de: ff:ae:ff:4f:d3:92:b7:ac:56:de:c6:03:d8:12:83:11:16:8f: 2b:3f:ae:56:ec:df:65:39:9b:b4:80:2e:4f:42:fd:7f:e6:ec: 2f:78:7c:8d:f0:43:6c:bd:16:8d:ba:b3:7d:6e:71:e4:d5:c6: fa:e8:9b:a2:ec:37:1d:e2:5a:61:80:ce:c5:43:45:5b:b3:1e: ce:1d:43:e3:d2:a6:4c:6d:4b:66:6b:10:8b:03:98:4d:a5:7d: 56:65:88:cd:80:fb:98:39:58:8d:b5:82:29:43:8b:b1:b5:eb: bf:4d:1d:af:b5:35:48:1b:3d:43:7e:a1:9e:8c:5c:50:9a:f1: 9d:bf:82:e3:ac:ce:32:52:45:45:55:c5:d3:27:6f:c3:3b:b0: aa:bd:83:3e:ad:c2:07:68:78:ad:cb:59:fd:ad:e0:ef:33:2a: 23:96:ea:85:7e:5c:09:fe:ac:b6:1e:14:7e:21:f4:bc:d1:b7: 68:ef:86:b2:26:a5:41:90:db:46:cc:2b:9f:c3:c1:fe:69:56: 08:e0:ff:55 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2V3+QU7LcC9EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk YjRiMGM0MmItNTc0Ny00YWNhLTk0YjAtNWQ0OGI0NTI2MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvRatY1yFhwG7dHdqzaruDoGET82y1GDuiRR nyfwZXXWXN/w56bc9Q3z9BBD9hlbgWqJnXiwCSJEBwoO6heCWhvaLw2rSpUSOyS5 liwg9gu93hEsvVD45PcJDU3Jiq+Rbj0w9pwqiKFU3Q+3wKNYsZfLlbJDrPp7jMJe RrSW5FHOIiHGeDSXitkNoubeXv94nvlTGbuagPz6dxY8iW4YjKcdkgKk6bGBCXIb 2lQ2S6UF576JvB7ylNX48ZjuIdlVc6EugBynus1XjiBHXEfaw4iS1D1XdNJyLApx ATu/vIxBxm+FftJRdqRL71zIZvtYz1icguNNccvzlbWNet1alwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFClcKiedvnl6rJRMPJ+IKRK51pmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbV4fX79djc5dO8s2sI0x1uwfYTqS0vCc BpNJNoVDMB577vA/8WpfoMURtcV98c1pPaQ6Aube/67/T9OSt6xW3sYD2BKDERaP Kz+uVuzfZTmbtIAuT0L9f+bsL3h8jfBDbL0WjbqzfW5x5NXG+uibouw3HeJaYYDO xUNFW7Mezh1D49KmTG1LZmsQiwOYTaV9VmWIzYD7mDlYjbWCKUOLsbXrv00dr7U1 SBs9Q36hnoxcUJrxnb+C46zOMlJFRVXF0ydvwzuwqr2DPq3CB2h4rctZ/a3g7zMq I5bqhX5cCf6sth4UfiH0vNG3aO+GsialQZDbRswrn8PB/mlWCOD/VQ== -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org