$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: RafoziqJ0YSp7he5mTaMBOZHAdezbfFAZJ147MwcDHc= Subject key identifier: CC:FF:BA:B4:DD:A3:48:0B:43:6B:BC:66:E7:AD:10:CB:18:FD:A5:46 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285847362B6510635D6EF3A45029C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:65:10:63:5d:6e:f3:a4:50:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=b6b84955-dade-4169-93bc-345178292e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:40:de:89:56:5f:f2:fc:25:14:35:5d:ef: fe:76:7e:56:b6:f9:40:e0:a0:0f:22:2e:cc:dc:7d: fb:08:9f:9d:81:7a:91:76:c8:fc:40:c7:71:d4:82: 27:e8:65:9b:03:8b:f1:33:21:e8:5c:40:75:e4:67: 7c:40:8e:78:47:0b:97:c5:1b:22:4e:a5:e2:05:81: ae:26:ce:f0:fb:d6:26:b2:12:26:a9:ff:16:3c:4c: b6:50:94:e1:24:5e:34:2c:25:b7:16:2c:86:1a:e7: bd:7a:f8:46:44:64:13:56:84:db:4e:4b:b3:9f:df: 14:26:e0:05:52:0e:8b:24:40:d0:39:2b:6b:0c:a1: 18:e6:55:33:22:4f:ea:53:c4:03:1b:d5:fe:3b:00: c7:4c:3e:ac:05:30:98:e7:6c:ea:c3:20:75:14:6e: a8:87:17:ad:60:4a:5c:99:1d:e6:14:ae:7f:50:87: cf:09:30:c7:7b:44:e9:0a:e3:ae:26:bc:61:01:13: 1b:ea:0e:31:d4:e7:89:b4:4e:51:71:33:fd:4d:c1: 65:cd:e3:41:0c:a1:11:55:3f:33:64:82:c5:7c:18: fc:0e:99:0d:2c:e6:46:40:c4:13:fd:7f:79:77:6b: 2d:c5:cc:32:9a:8b:78:84:df:f0:5f:53:8d:25:aa: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FF:BA:B4:DD:A3:48:0B:43:6B:BC:66:E7:AD:10:CB:18:FD:A5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1d:4e:d9:57:82:58:a2:d2:67:5f:25:dc:68:bd:b1:8c:2a: 6c:20:71:f3:2b:fd:24:74:6a:7a:97:66:f4:d1:1f:0d:88:af: 77:c5:21:05:9c:c4:49:a3:08:1b:d0:4c:90:58:32:8d:d0:a7: 5e:1b:55:7c:7d:de:51:87:e0:82:7a:f1:e2:08:ff:05:34:b9: 14:79:bd:30:a0:b2:74:8f:8e:18:31:77:48:ed:9a:0d:8d:6e: 90:89:a8:63:2c:86:34:40:a0:ac:d3:99:64:b3:96:be:40:f1: 1a:b8:f0:b5:d6:dc:21:8d:e6:36:7e:ac:ad:1f:59:3c:e7:23: f7:41:f0:26:32:a7:29:59:26:9c:24:d1:06:20:e0:fe:7d:ba: 46:ee:62:1f:c3:62:32:c5:86:d5:92:1f:59:b6:c8:60:af:dd: 61:4a:5c:1b:39:a0:e7:99:54:81:32:79:15:c2:02:ac:f2:1a: 17:40:d3:62:36:c9:ad:88:e7:66:05:b3:53:48:68:5a:76:fe: 31:89:8a:d1:93:e4:27:f8:5e:bd:2d:4a:fb:2e:cd:c5:93:19: 25:a9:a0:3c:1a:a9:34:24:13:e2:90:7e:21:af:64:83:e8:ae: 05:af:e4:16:9d:04:ac:79:e2:14:12:7c:6f:e1:19:7e:1d:df: c4:28:62:f9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc2K2UQY11u86RQKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk YjZiODQ5NTUtZGFkZS00MTY5LTkzYmMtMzQ1MTc4MjkyZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXJA3olWX/L8JRQ1Xe/+dn5WtvlA4KAPIi7M 3H37CJ+dgXqRdsj8QMdx1IIn6GWbA4vxMyHoXEB15Gd8QI54RwuXxRsiTqXiBYGu Js7w+9YmshImqf8WPEy2UJThJF40LCW3FiyGGue9evhGRGQTVoTbTkuzn98UJuAF Ug6LJEDQOStrDKEY5lUzIk/qU8QDG9X+OwDHTD6sBTCY52zqwyB1FG6ohxetYEpc mR3mFK5/UIfPCTDHe0TpCuOuJrxhARMb6g4x1OeJtE5RcTP9TcFlzeNBDKERVT8z ZILFfBj8DpkNLOZGQMQT/X95d2stxcwymot4hN/wX1ONJaoC7wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMz/urTdo0gLQ2u8ZuetEMsY/aVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADh1O2VeCWKLSZ18l3Gi9sYwqbCBx8yv9 JHRqepdm9NEfDYivd8UhBZzESaMIG9BMkFgyjdCnXhtVfH3eUYfggnrx4gj/BTS5 FHm9MKCydI+OGDF3SO2aDY1ukImoYyyGNECgrNOZZLOWvkDxGrjwtdbcIY3mNn6s rR9ZPOcj90HwJjKnKVkmnCTRBiDg/n26Ru5iH8NiMsWG1ZIfWbbIYK/dYUpcGzmg 55lUgTJ5FcICrPIaF0DTYjbJrYjnZgWzU0hoWnb+MYmK0ZPkJ/hevS1K+y7NxZMZ JamgPBqpNCQT4pB+Ia9kg+iuBa/kFp0ErHniFBJ8b+EZfh3fxChi+Q== -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org