$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json) Hash identifier: C42BX4IM8ObAiFArgJqXK2T3Dyv9ZMGXxalKGWadIFA= Subject key identifier: 31:FA:28:F9:95:28:6D:58:FC:1F:F0:B1:0E:E8:C9:F5:66:B3:34:61 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F43285847AB6C18C04B7310D3A119BEA0 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 23470 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:18:c0:4b:73:10:d3:a1:19:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=2aa46b10-a630-4f89-b159-c943209181c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:69:05:8a:10:ac:42:9b:01:a6:91:70:ce: bb:a8:90:7d:cd:02:7b:f7:d7:02:b2:9b:b7:c7:9d: bd:34:f0:ae:b1:c9:53:c2:c4:f4:9d:d1:c6:10:e5: 90:0c:14:26:17:74:ca:4e:73:3f:d0:4c:1e:9f:4e: 0a:c6:e5:dd:2b:df:2b:b7:19:9b:65:75:ec:40:c5: 76:75:68:be:10:08:b9:e3:94:98:08:30:ac:72:15: 5b:6b:1c:5f:38:1e:c3:0c:3a:6c:8c:8c:8e:ef:d5: 44:95:75:9a:b2:48:c3:51:34:d0:12:c4:a8:d2:96: 93:d1:8e:c3:c4:95:42:7e:3a:02:5f:ed:06:84:ca: 65:2d:37:45:1a:5f:65:0f:c8:04:1d:95:79:d1:3d: cd:4b:2a:a7:b4:4f:30:54:b0:27:8a:83:40:16:ff: 24:f4:e1:f4:05:df:a1:13:74:fe:2c:fd:93:36:96: c6:e4:78:b1:fc:90:dd:6e:8b:b8:28:aa:d0:9d:c7: 2c:27:0b:c2:29:e5:76:9f:de:0c:ec:4e:a5:d0:94: 2d:9a:32:3d:15:86:39:04:66:37:c3:1e:ee:57:7d: 09:dd:56:f0:e7:35:38:84:f6:be:3e:a6:6a:5d:20: 58:f3:bd:31:75:d5:b5:71:eb:6d:67:1d:40:1c:05: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:28:F9:95:28:6D:58:FC:1F:F0:B1:0E:E8:C9:F5:66:B3:34:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7d:df:53:49:e6:5b:79:f5:57:8b:80:00:70:34:d4:a8:af: d3:6f:f1:52:58:59:08:55:11:06:42:4a:8c:f6:95:51:44:0c: d0:71:66:69:9e:99:67:5b:21:44:76:b0:d8:14:c1:c3:7e:30: d6:43:f9:ec:99:1f:cb:a1:51:3c:e4:c5:19:5c:66:cd:31:2f: 44:c4:17:f8:06:e0:f7:2b:62:af:b7:15:40:bc:77:2a:7e:9c: d0:57:ff:36:fa:49:f3:42:9f:8f:07:22:cb:8f:09:a9:27:d1: 9a:5d:69:5e:88:63:74:12:d0:fa:f1:28:1d:56:ed:28:3c:54: 4b:b0:24:60:39:ab:80:78:ea:a4:a0:1c:53:e5:26:30:af:a3: 27:ba:fc:9f:88:74:ba:ef:08:da:ec:60:2c:cd:b4:96:ae:01: e2:12:e5:84:90:c5:ae:1e:8d:36:f9:80:53:ca:26:8a:d8:d5: 28:fa:d6:51:f3:7a:0c:f7:5d:5a:80:75:be:59:b8:b5:70:7f: 41:4c:5a:62:3b:b9:7b:99:d1:aa:04:20:0c:61:66:df:a6:32: 1a:3a:f4:52:32:59:a5:dd:27:03:d8:c3:96:8d:e3:b1:13:8d: ef:7d:d0:09:20:04:94:fb:b9:cc:cd:c6:66:b6:12:a5:6c:54: 49:4c:a3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbBjAS3MQ06EZvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MmFhNDZiMTAtYTYzMC00Zjg5LWIxNTktYzk0MzIwOTE4MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8xpBYoQrEKbAaaRcM67qJB9zQJ799cCspu3 x529NPCusclTwsT0ndHGEOWQDBQmF3TKTnM/0Ewen04KxuXdK98rtxmbZXXsQMV2 dWi+EAi545SYCDCschVbaxxfOB7DDDpsjIyO79VElXWaskjDUTTQEsSo0paT0Y7D xJVCfjoCX+0GhMplLTdFGl9lD8gEHZV50T3NSyqntE8wVLAnioNAFv8k9OH0Bd+h E3T+LP2TNpbG5Hix/JDdbou4KKrQnccsJwvCKeV2n94M7E6l0JQtmjI9FYY5BGY3 wx7uV30J3Vbw5zU4hPa+PqZqXSBY870xddW1cettZx1AHAV6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH6KPmVKG1Y/B/wsQ7oyfVmszRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvOGM3ZDNlNGItMGU4Ni0z NDhhLWI0ZmQtZjM5MGM2ZDU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx931NJ5lt59VeLgABwNNSor9Nv8VJYWQhVEQZCSoz2lVFEDNBxZmme mWdbIUR2sNgUwcN+MNZD+eyZH8uhUTzkxRlcZs0xL0TEF/gG4PcrYq+3FUC8dyp+ nNBX/zb6SfNCn48HIsuPCakn0ZpdaV6IY3QS0PrxKB1W7Sg8VEuwJGA5q4B46qSg HFPlJjCvoye6/J+IdLrvCNrsYCzNtJauAeIS5YSQxa4ejTb5gFPKJorY1Sj61lHz egz3XVqAdb5ZuLVwf0FMWmI7uXuZ0aoEIAxhZt+mMho69FIyWaXdJwPYw5aN47ET je990AkgBJT7uczNxma2EqVsVElMo2s= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:36 2024 by rpki-client on console-fra.rpki-client.org