$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: F+HWtuZq8TDIC7rOPr416178yShnP3AtQBeaqnc/ujs= Subject key identifier: 9E:D1:C1:BE:FE:D9:85:5C:D5:E0:ED:5E:99:12:53:A1:FF:B3:6F:57 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F43285847C8D9CF4978CC337BE94D2CC0 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:cf:49:78:cc:33:7b:e9:4d:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=1ab6acaf-46bc-4146-932a-4e4ed4f457e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:85:46:42:30:5a:24:61:7a:a3:03:29:66: bb:80:f4:b8:ba:aa:67:90:52:38:c5:ca:23:a5:8e: 92:4e:c4:78:cb:c4:b7:72:2d:af:e5:8e:e7:bc:e7: 46:72:de:92:3c:ba:02:14:0c:8b:11:4c:4c:59:3a: af:63:db:88:60:6d:6a:de:91:79:73:c2:98:8e:c9: 0e:6e:ef:de:7c:16:46:f6:ad:8f:c6:91:da:bd:18: ab:f5:b4:ed:8c:31:90:92:2b:c3:4d:8d:cc:87:e9: 44:31:b4:12:ea:57:54:79:03:a3:05:b2:61:6e:5f: 36:d8:20:c6:04:e4:83:32:dc:af:10:8b:f5:98:5b: 95:62:5c:26:a6:77:11:59:42:1e:f6:c6:d5:21:26: bc:33:5a:c0:42:d3:d4:d1:7c:5d:bd:11:a1:08:ef: 1e:c9:f1:18:a1:c5:c8:db:7f:02:fe:1a:d2:fb:5b: 3c:d1:a1:46:54:2b:37:cd:0e:a3:59:44:b9:c6:87: 4b:08:28:b2:ea:c6:1b:4b:11:aa:c1:8f:f5:24:8f: fc:9f:3a:d8:dc:9f:a6:07:37:bc:52:19:c4:a5:09: 21:f0:21:3d:25:15:a8:09:54:a5:dc:2a:a4:84:4f: 7b:00:31:53:c2:46:2c:cd:4f:4f:19:0a:da:cd:e6: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:C1:BE:FE:D9:85:5C:D5:E0:ED:5E:99:12:53:A1:FF:B3:6F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:da:7c:1c:61:7d:e0:5a:46:e9:6e:22:35:79:2a:dc:5e:67: 87:c3:06:1d:68:e7:8a:6a:de:a7:be:76:3a:bd:7c:aa:0f:3a: 60:b0:bb:3e:91:dc:2d:86:fb:ed:20:ca:58:14:0b:fc:9e:a5: 12:7e:e1:24:aa:e7:a6:62:2a:7a:d6:48:bc:ad:0c:12:1e:fb: e9:ce:1b:25:d3:05:79:3d:7b:a5:7d:73:3a:82:6d:8e:70:c6: e5:0c:dc:19:46:90:53:77:e4:9b:1c:51:9b:0c:70:10:9f:78: ba:30:3d:9f:a8:36:df:60:e0:72:5f:5b:ee:35:e5:3c:ec:c9: 01:b6:9e:56:68:8f:ad:50:b7:35:51:a9:b9:b1:d9:bf:d6:51: 7a:de:ff:c0:1b:97:56:1e:3b:52:0a:ac:71:e1:54:1d:60:47: ed:4a:fb:2a:b0:0a:84:0e:77:29:02:70:30:a2:d6:c8:81:53: c0:ac:03:9f:7f:c1:7d:34:eb:0a:6d:f9:cc:f5:5d:f6:20:e5: d7:f3:d1:71:8d:b9:05:fa:e5:57:58:5b:7a:9e:ec:a7:87:b5: d0:77:76:a2:f1:10:1e:03:0d:5f:f4:12:2c:03:08:99:e3:bf: 52:20:58:45:a5:8d:84:ff:24:d6:55:56:00:da:04:f9:3d:44: 2c:8f:22:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2c9JeMwze+lNLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk MWFiNmFjYWYtNDZiYy00MTQ2LTkzMmEtNGU0ZWQ0ZjQ1N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuWFRkIwWiRheqMDKWa7gPS4uqpnkFI4xcoj pY6STsR4y8S3ci2v5Y7nvOdGct6SPLoCFAyLEUxMWTqvY9uIYG1q3pF5c8KYjskO bu/efBZG9q2PxpHavRir9bTtjDGQkivDTY3Mh+lEMbQS6ldUeQOjBbJhbl822CDG BOSDMtyvEIv1mFuVYlwmpncRWUIe9sbVISa8M1rAQtPU0XxdvRGhCO8eyfEYocXI 238C/hrS+1s80aFGVCs3zQ6jWUS5xodLCCiy6sYbSxGqwY/1JI/8nzrY3J+mBze8 UhnEpQkh8CE9JRWoCVSl3CqkhE97ADFTwkYszU9PGQrazeYWywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7Rwb7+2YVc1eDtXpkSU6H/s29XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzafBxhfeBaRuluIjV5KtxeZ4fDBh1o54pq3qe+djq9fKoPOmCwuz6R 3C2G++0gylgUC/yepRJ+4SSq56ZiKnrWSLytDBIe++nOGyXTBXk9e6V9czqCbY5w xuUM3BlGkFN35JscUZsMcBCfeLowPZ+oNt9g4HJfW+415TzsyQG2nlZoj61QtzVR qbmx2b/WUXre/8Abl1YeO1IKrHHhVB1gR+1K+yqwCoQOdykCcDCi1siBU8CsA59/ wX006wpt+cz1XfYg5dfz0XGNuQX65VdYW3qe7KeHtdB3dqLxEB4DDV/0EiwDCJnj v1IgWEWljYT/JNZVVgDaBPk9RCyPIsI= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:25 2024 by rpki-client on console-fra.rpki-client.org