$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa File: ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json) Hash identifier: hgLYHyFhrO2o30cPOxrD1/4SqXXgiUTshtyAPnhzCXg= Subject key identifier: 09:18:13:40:DE:E3:26:C9:75:A7:FD:B2:20:C5:13:2A:94:90:B5:D0 Certificate issuer: /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Certificate serial: 010D0C9F43285847EE8A2C7C899D77AC5DF3E480 Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 35870 IP address blocks: 23.144.200.0/24 maxlen: 24 2602:fac0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:2c:7c:89:9d:77:ac:5d:f3:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=8ee545fb-eb20-486f-964e-25d519a62208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:d8:64:ea:33:a0:a8:14:e9:ad:23:29:6f: 3f:d9:79:e1:b9:24:2e:86:fd:c5:1c:62:eb:a8:1e: 59:79:6b:f2:cc:60:2d:e5:48:d2:96:9b:af:0c:99: 2b:29:7c:a7:5c:f6:57:b4:72:8f:bc:6f:23:cd:ba: 4e:cc:93:67:0a:67:15:2f:10:ab:bd:d5:28:61:22: c5:b4:31:6e:4a:a5:d6:b9:0a:c4:e9:f0:86:47:27: f8:4d:fa:dc:04:83:3b:2b:47:54:d5:59:d9:8c:3e: 93:54:e3:a6:9b:58:10:f0:a0:7b:3d:4b:97:87:58: 4c:b7:ec:ca:c9:b7:f1:a1:17:33:ed:5b:66:b0:60: 30:6d:18:51:2a:83:e6:89:97:be:b4:94:7b:68:fd: 9a:cb:79:3d:81:07:dc:f6:c4:22:06:9d:61:e8:72: 98:a0:6c:52:10:13:c4:bf:ae:fe:53:d0:d7:4d:fe: 13:13:7d:fa:49:d4:4e:0d:63:17:7c:45:eb:d4:74: 57:4b:91:f8:1e:ba:36:cc:be:8b:d6:53:a5:4d:e7: 45:01:ac:23:7a:6a:2e:b2:37:38:76:89:b2:1c:6c: e6:be:34:be:37:a6:d7:60:d6:08:24:71:dd:82:6a: 44:f0:7d:81:fb:ec:83:c7:88:11:fe:2f:7b:51:e4: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:13:40:DE:E3:26:C9:75:A7:FD:B2:20:C5:13:2A:94:90:B5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl X509v3 Authority Key Identifier: keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.200.0/24 IPv6: 2602:fac0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:24:19:21:27:77:c5:91:6f:56:7e:0e:bf:10:9a:99:75:e8: 97:05:a2:9e:f4:c4:39:8d:25:fb:63:5b:43:e3:68:d9:df:0d: 39:b8:f6:75:53:24:5b:3c:68:e5:da:72:05:24:90:ba:29:e9: 25:af:d5:ff:6b:df:5f:16:14:7c:0d:a6:88:4c:0f:d3:90:b5: 06:fd:b8:38:66:4a:fa:f8:80:7b:f4:c1:0e:61:30:b4:67:3d: 8f:2d:42:f2:23:3e:33:dc:7c:47:3c:37:ae:c4:cd:4e:d1:5e: c4:77:7c:74:f0:c6:82:22:7c:44:b5:56:84:cf:37:6f:5b:d9: e6:56:6c:47:75:5e:45:20:a6:d8:73:b1:d4:57:bf:91:7a:03: fa:29:04:c7:2a:75:b8:24:2b:9f:d0:e9:d2:72:a1:bb:83:56: 95:93:99:fd:db:f1:c3:90:8f:f1:ff:98:ab:8b:d2:35:39:6b: a0:e8:fd:df:90:95:ea:71:ed:48:dc:c1:61:c2:09:63:1a:8c: 99:3c:19:64:11:3c:e1:eb:bc:89:84:d9:f2:23:bb:7e:35:75: f1:aa:2d:e2:d6:81:e3:7b:5e:a0:77:b8:db:27:5d:8c:45:37: cb:55:b9:6b:0d:3b:2f:e4:e7:9b:f7:09:c3:2f:2a:b4:a7:98: 3f:f8:bc:71 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEfuiix8iZ13rF3z5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVh MzhlMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk OGVlNTQ1ZmItZWIyMC00ODZmLTk2NGUtMjVkNTE5YTYyMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfYZOozoKgU6a0jKW8/2XnhuSQuhv3FHGLr qB5ZeWvyzGAt5UjSlpuvDJkrKXynXPZXtHKPvG8jzbpOzJNnCmcVLxCrvdUoYSLF tDFuSqXWuQrE6fCGRyf4TfrcBIM7K0dU1VnZjD6TVOOmm1gQ8KB7PUuXh1hMt+zK ybfxoRcz7VtmsGAwbRhRKoPmiZe+tJR7aP2ay3k9gQfc9sQiBp1h6HKYoGxSEBPE v67+U9DXTf4TE336SdRODWMXfEXr1HRXS5H4Hro2zL6L1lOlTedFAawjemousjc4 domyHGzmvjS+N6bXYNYIJHHdgmpE8H2B++yDx4gR/i97UeTITQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAkYE0De4ybJdaf9siDFEyqUkLXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlj YTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvZWM0MmU1ZGItMTI5ZC0z ZTIxLWE2NzgtODViNGI1ZjNiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5Y2EwMmMtNzIxZS00Y2E4LTk2 ZDQtNmViMTBkOGVhMzhlLzlmOWNhMDJjLTcyMWUtNGNhOC05NmQ0LTZlYjEwZDhl YTM4ZS5jcmwwHwYDVR0jBBgwFoAUpjsZbkwxCGd0VwVqrR0o478DyvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIx MGQ4ZWEzOGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5DIMA4E AgACMAgDBgAmAvrAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALJBkhJ3fFkW9Wfg6/EJqZdeiXBaKe9MQ5 jSX7Y1tD42jZ3w05uPZ1UyRbPGjl2nIFJJC6Keklr9X/a99fFhR8DaaITA/TkLUG /bg4Zkr6+IB79MEOYTC0Zz2PLULyIz4z3HxHPDeuxM1O0V7Ed3x08MaCInxEtVaE zzdvW9nmVmxHdV5FIKbYc7HUV7+RegP6KQTHKnW4JCuf0OnScqG7g1aVk5n92/HD kI/x/5iri9I1OWug6P3fkJXqce1I3MFhwgljGoyZPBlkETzh67yJhNnyI7t+NXXx qi3i1oHje16gd7jbJ12MRTfLVblrDTsv5Oeb9wnDLyq0p5g/+Lxx -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org