$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa File: 5c279b9f-62e5-3859-80b1-76b8ca66a008.roa (raw, json) Hash identifier: 3fWAu6a8+vkCslZ6dzsI8LQasPT7ZzcBLdUaxbQKgW4= Subject key identifier: 00:C1:B5:AB:48:FD:5E:6D:77:57:9B:EA:26:A2:F5:B0:41:1E:44:7C Certificate issuer: /CN=4182f5c3-1977-4f18-997f-c945eaea051e Certificate serial: 010D0C9F4328584742BB5663E1C1E74AC32E9D00 Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 18470 IP address blocks: 23.154.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:56:63:e1:c1:e7:4a:c3:2e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=ab63b7b2-bbdc-472d-ab8a-4c8ee156c8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:64:81:a8:b1:09:9c:6e:17:3c:ac:16:e8: 4b:0d:50:eb:24:db:5e:20:79:f1:6a:58:ab:40:32: 43:54:38:7a:ae:f6:36:6c:61:3d:fc:d4:af:b6:4d: 0a:98:d9:61:2e:70:67:95:a2:77:93:82:d1:e2:41: cc:93:b0:54:2c:1b:ac:44:9c:52:81:bc:28:b9:f4: c2:de:1a:a9:7b:f9:70:30:38:7d:ee:e3:09:70:64: 98:6e:4e:60:fd:55:75:d1:eb:ef:17:fa:16:69:97: e5:c2:49:ef:24:ad:8a:de:3f:e3:2f:3b:07:4c:db: d7:cc:5d:f6:f1:1b:40:cb:df:93:f9:dc:e3:4d:91: d9:9b:0e:f8:63:24:29:cf:17:dc:d7:3b:e5:9e:7e: 79:50:91:2b:46:09:ba:eb:6a:30:00:31:88:94:00: 3c:23:88:19:f4:ba:0a:26:ea:f2:48:c1:80:bd:6c: 90:45:d7:43:a3:86:cd:fa:90:26:36:9f:b0:02:24: 62:8e:c9:54:f2:4a:88:49:3f:be:54:33:26:9c:a1: 1b:0e:a2:a8:e1:e9:ee:0d:e1:1f:47:76:65:f0:ca: 73:c2:1b:b0:f2:76:e7:23:96:f9:87:57:87:7b:e4: 18:7c:8b:5c:22:37:d4:75:16:81:a1:d4:c1:20:11: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:B5:AB:48:FD:5E:6D:77:57:9B:EA:26:A2:F5:B0:41:1E:44:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl X509v3 Authority Key Identifier: keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer sbgp-ipAddrBlock: critical IPv4: 23.154.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:f2:cd:48:22:aa:d4:f3:df:29:15:ba:d9:9c:54:7a:50: fa:91:00:dd:c6:cf:1b:b5:21:b8:36:ab:f2:a0:27:4c:09:d0: de:83:67:ac:84:15:ad:78:d3:52:1c:59:93:dd:07:8d:cc:9d: b1:09:f3:6f:dc:18:b6:94:1b:96:76:a9:3e:93:82:86:0d:fa: ee:37:f0:39:d7:19:a9:77:20:c4:3f:0f:19:87:ec:28:b7:5f: c0:ca:8c:95:74:30:e9:a3:38:10:f6:a7:c0:b8:29:dc:c3:9f: 6b:0f:94:9a:05:dd:5c:5d:15:e7:38:b2:5b:86:50:67:b3:a7: c3:1f:6d:53:5d:73:e1:b1:db:8d:3f:c9:b8:c8:6d:3c:98:41: e8:be:19:ac:81:74:ee:05:ac:c9:2f:77:b6:e6:df:56:d4:5e: 50:bd:47:12:47:6e:89:47:ea:b4:31:a3:e9:33:e2:d5:3f:50: e4:25:4b:68:fb:1f:02:f3:23:18:a5:2d:d4:02:ef:0c:58:e4: 5b:a5:8f:c5:3e:68:df:72:66:e8:5f:9d:e9:dd:83:32:af:80: 27:3f:22:fa:05:2c:09:0a:26:e4:47:d6:76:ab:7f:3e:6d:4e: ad:6a:8e:c0:f3:ce:14:41:1c:94:aa:61:51:d5:c3:2e:b0:a4: f0:0c:22:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1Zj4cHnSsMunQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MmY1YzMtMTk3Ny00ZjE4LTk5N2YtYzk0NWVhZWEw NTFlMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk YWI2M2I3YjItYmJkYy00NzJkLWFiOGEtNGM4ZWUxNTZjOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQZkgaixCZxuFzysFuhLDVDrJNteIHnxalir QDJDVDh6rvY2bGE9/NSvtk0KmNlhLnBnlaJ3k4LR4kHMk7BULBusRJxSgbwoufTC 3hqpe/lwMDh97uMJcGSYbk5g/VV10evvF/oWaZflwknvJK2K3j/jLzsHTNvXzF32 8RtAy9+T+dzjTZHZmw74YyQpzxfc1zvlnn55UJErRgm662owADGIlAA8I4gZ9LoK JurySMGAvWyQRddDo4bN+pAmNp+wAiRijslU8kqIST++VDMmnKEbDqKo4enuDeEf R3Zl8Mpzwhuw8nbnI5b5h1eHe+QYfItcIjfUdRaBodTBIBGBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADBtatI/V5td1eb6iai9bBBHkR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MTgy ZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1ZWFlYTA1MWUvNWMyNzliOWYtNjJlNS0z ODU5LTgwYjEtNzZiOGNhNjZhMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDE4MmY1YzMtMTk3Ny00ZjE4LTk5 N2YtYzk0NWVhZWEwNTFlLzQxODJmNWMzLTE5NzctNGYxOC05OTdmLWM5NDVlYWVh MDUxZS5jcmwwHwYDVR0jBBgwFoAU3EjDkhwVbj1cGAnpc8/wKdZbfRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MTgyZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1 ZWFlYTA1MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGL8s1IIqrU898pFbrZnFR6UPqRAN3Gzxu1Ibg2q/KgJ0wJ0N6DZ6yE Fa1401IcWZPdB43MnbEJ82/cGLaUG5Z2qT6TgoYN+u438DnXGal3IMQ/DxmH7Ci3 X8DKjJV0MOmjOBD2p8C4KdzDn2sPlJoF3VxdFec4sluGUGezp8MfbVNdc+Gx240/ ybjIbTyYQei+GayBdO4FrMkvd7bm31bUXlC9RxJHbolH6rQxo+kz4tU/UOQlS2j7 HwLzIxilLdQC7wxY5Fulj8U+aN9yZuhfnendgzKvgCc/IvoFLAkKJuRH1narfz5t Tq1qjsDzzhRBHJSqYVHVwy6wpPAMIhs= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org