$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: yzQC17XQw0KiIb1889d1FJXslZ+fv8Bz/xX7tUUV9Vc= Subject key identifier: A3:5B:F0:51:61:0F:BB:D0:78:91:BD:A2:CC:49:7B:1C:75:C7:EB:36 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B653AB79D7443A6EEA200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:3a:b7:9d:74:43:a6:ee:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=e752d496-bbca-488c-95dd-487e714d85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:b1:43:38:7c:54:66:c4:57:c5:a5:5d:d5: 4b:cc:2b:85:1b:41:a6:70:13:68:34:d7:c1:5e:04: a2:d4:d8:08:21:0c:6b:fe:db:39:3c:33:ca:e6:82: f0:1b:d5:fd:cd:76:35:4e:3a:d5:85:dd:61:26:bc: 81:02:93:69:8d:53:bc:19:9e:12:2e:72:11:da:89: 44:db:d0:e9:e8:97:fd:9d:21:4e:ec:bb:5c:c4:24: 54:1b:f6:3f:8d:c6:d1:58:59:4f:5d:7a:73:0b:b8: b1:af:40:06:82:01:1e:ca:72:6f:f4:c0:41:2a:89: ea:41:f3:72:96:cf:14:fd:57:13:40:a8:9f:20:d8: e0:78:78:56:1e:19:d1:b7:00:0f:ea:29:bf:64:ba: 2c:f1:30:e0:6b:5f:df:93:45:81:6c:0b:a2:7c:a3: 3c:b7:4e:28:71:86:b8:5e:b8:73:97:bf:7a:94:25: 7c:65:d6:f7:aa:63:f3:6d:a4:4e:4b:c7:da:a8:cf: 82:b1:fd:fc:8f:2d:a9:8b:90:18:ed:bd:35:9c:fc: 42:d5:b1:eb:db:64:4d:5f:e1:a3:cc:a6:11:1e:54: d5:a5:f5:9c:b4:1d:ce:12:60:87:ec:17:24:96:90: a9:a8:bb:69:06:a9:4e:f7:e3:25:62:26:91:9f:99: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5B:F0:51:61:0F:BB:D0:78:91:BD:A2:CC:49:7B:1C:75:C7:EB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ad:58:aa:c1:86:1d:f8:a6:8c:34:be:a9:03:10:40:9f:43: b4:36:d1:64:04:a6:c0:2d:fe:1e:9d:5a:c3:82:13:7d:84:74: 58:cd:aa:d5:13:e4:15:09:39:bc:a4:0c:c0:9f:27:77:5e:1e: b6:56:49:20:b8:0b:5b:66:31:01:41:5a:90:bd:a3:8b:6f:6f: 49:13:dd:04:f2:d1:86:5f:58:27:1a:59:f1:91:da:47:95:00: e4:51:90:a9:82:33:6e:02:c4:43:5f:82:25:9b:e8:60:fe:25: d4:61:36:cf:bf:ec:6e:ac:d8:33:36:b0:b4:f4:5b:6d:38:4d: 93:13:c2:44:69:e2:62:ae:9b:fb:3c:9d:1d:84:c0:84:e8:99: 70:c9:ca:77:17:c8:81:61:57:aa:d8:5b:aa:00:e7:b6:35:c6: b6:f6:d0:fb:36:56:63:84:5c:f7:e4:f2:0f:18:00:d6:91:15: 3c:e4:06:12:24:fc:c8:8c:3a:d8:f0:e0:57:05:12:bd:86:76: 3d:c7:f2:d0:27:c3:6e:12:8f:07:59:fc:d6:36:14:03:eb:39: 4a:84:17:f3:3b:d0:f7:b0:ca:05:4a:26:7c:4d:a9:ce:17:5e: df:d6:a4:62:d9:2a:fd:29:4a:ce:85:f0:50:80:2e:0a:28:6b: 8d:ff:38:b8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2U6t510Q6buogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTc1MmQ0OTYtYmJjYS00ODhjLTk1ZGQtNDg3ZTcxNGQ4NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCixQzh8VGbEV8WlXdVLzCuFG0GmcBNoNNfB XgSi1NgIIQxr/ts5PDPK5oLwG9X9zXY1TjrVhd1hJryBApNpjVO8GZ4SLnIR2olE 29Dp6Jf9nSFO7LtcxCRUG/Y/jcbRWFlPXXpzC7ixr0AGggEeynJv9MBBKonqQfNy ls8U/VcTQKifINjgeHhWHhnRtwAP6im/ZLos8TDga1/fk0WBbAuifKM8t04ocYa4 Xrhzl796lCV8Zdb3qmPzbaROS8faqM+Csf38jy2pi5AY7b01nPxC1bHr22RNX+Gj zKYRHlTVpfWctB3OEmCH7BcklpCpqLtpBqlO9+MlYiaRn5kXHQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKNb8FFhD7vQeJG9osxJexx1x+s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsK1YqsGGHfimjDS+qQMQQJ9DtDbRZASm wC3+Hp1aw4ITfYR0WM2q1RPkFQk5vKQMwJ8nd14etlZJILgLW2YxAUFakL2ji29v SRPdBPLRhl9YJxpZ8ZHaR5UA5FGQqYIzbgLEQ1+CJZvoYP4l1GE2z7/sbqzYMzaw tPRbbThNkxPCRGniYq6b+zydHYTAhOiZcMnKdxfIgWFXqthbqgDntjXGtvbQ+zZW Y4Rc9+TyDxgA1pEVPOQGEiT8yIw62PDgVwUSvYZ2Pcfy0CfDbhKPB1n81jYUA+s5 SoQX8zvQ97DKBUomfE2pzhde39akYtkq/SlKzoXwUIAuCihrjf84uA== -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org