$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa File: f2d111b6-824d-3b08-af7b-3f301d73f479.roa (raw, json) Hash identifier: UnQT3ZREMTciqnvNSDokmMV6k3+YKuT+ZPsfb4ITNTM= Subject key identifier: 6D:3F:3E:39:2F:9E:5B:97:28:97:C2:1A:AF:86:2B:CF:07:FF:5F:AF Certificate issuer: /CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Certificate serial: 010D0C9F43285847299B278A86E43F6ACDF51A00 Authority key identifier: 83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 30344 IP address blocks: 23.152.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:27:8a:86:e4:3f:6a:cd:f5:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=be7ebbc6-1cc4-4624-99b1-8d40af24b28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:59:c2:19:ef:ce:83:f3:f6:68:94:14:c7: bb:62:ef:d3:fb:30:2b:43:5f:b5:41:b8:a1:3f:35: 0e:05:2e:dc:8e:f7:eb:a2:32:5c:bb:3e:18:12:4f: 68:0a:51:9d:8f:bb:9e:61:68:d4:2a:e3:2c:8c:61: 02:03:af:70:42:c7:2d:29:36:a2:87:8c:e7:84:19: 9d:97:15:b5:a5:f7:d9:4a:f1:77:52:60:03:71:1a: 81:f2:d8:3b:d2:ac:77:ef:24:6a:47:6e:28:fd:aa: 01:85:34:19:23:68:fe:b0:e9:f7:65:85:e8:f4:ca: 35:9a:b7:fe:e8:2a:52:19:70:a3:a9:b4:06:53:00: de:f7:20:f1:eb:a7:66:97:af:74:3e:5c:10:a6:17: 05:e7:2b:28:2c:e2:43:6f:a7:d2:6d:4f:dc:4f:68: 48:a2:04:48:42:99:94:07:86:99:63:87:b0:53:9c: 49:19:6a:79:63:45:f9:a3:2f:f7:1e:02:6d:17:e7: 54:a1:19:07:43:08:a0:06:49:94:ad:ad:15:6a:92: d5:0c:f8:d2:82:52:d8:4c:83:91:51:ef:df:67:ca: 5d:4a:95:c0:e5:a4:d4:06:87:33:8b:b4:d3:8a:f8: 1e:28:fd:e2:14:e8:7a:b2:29:1d:2f:1c:b3:62:ea: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:3E:39:2F:9E:5B:97:28:97:C2:1A:AF:86:2B:CF:07:FF:5F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/f2d111b6-824d-3b08-af7b-3f301d73f479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl X509v3 Authority Key Identifier: keyid:83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:b6:79:f2:51:5f:b5:dc:53:7e:82:50:4f:85:0b:0e:11: bc:f0:f6:c9:ef:3f:9e:11:c0:79:17:37:bb:65:d4:c9:34:98: f1:9c:0f:c9:7a:21:4c:fa:00:f3:cb:33:55:7e:ac:ef:a5:14: 85:9e:c4:eb:f5:b3:88:85:91:26:f7:d2:14:c0:31:87:12:7c: 4f:8e:8d:57:9d:8b:08:d7:c5:e4:e9:66:58:14:e2:3b:a8:95: 55:d3:10:60:a2:42:ca:b2:af:1f:02:0d:04:d0:bc:76:c3:5a: 5e:a4:5f:84:1e:db:28:45:00:a1:3c:c6:e1:94:2b:a9:88:09: bb:3b:7e:8d:17:ab:9a:0e:1e:23:34:6c:13:ff:dc:3e:2f:03: 08:03:6a:61:56:9a:0b:c0:ab:e6:08:1b:e0:21:ed:83:9e:38: 61:33:2b:c7:6d:8b:04:fd:a1:74:67:7c:71:82:d4:89:0e:39: 80:f7:70:81:5b:0f:c8:f7:e7:df:e4:25:3a:be:8c:d0:21:5c: 26:f2:13:af:bd:56:d8:b3:70:0b:f8:79:bf:1e:8e:37:15:b8: 8b:97:81:38:82:79:03:77:e7:f3:fb:be:2c:b5:96:84:36:ab: 6f:6e:ed:8a:38:04:1a:fa:6a:fa:80:db:a3:60:8f:d0:fd:d7: 77:61:34:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyeKhuQ/as31GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA5MWM0YzctYmY0Yy00NTAyLWJjMTktMmUzZjg0YjIw ZTZkMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmU3ZWJiYzYtMWNjNC00NjI0LTk5YjEtOGQ0MGFmMjRiMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvlZwhnvzoPz9miUFMe7Yu/T+zArQ1+1Qbih PzUOBS7cjvfrojJcuz4YEk9oClGdj7ueYWjUKuMsjGECA69wQsctKTaih4znhBmd lxW1pffZSvF3UmADcRqB8tg70qx37yRqR24o/aoBhTQZI2j+sOn3ZYXo9Mo1mrf+ 6CpSGXCjqbQGUwDe9yDx66dml690PlwQphcF5ysoLOJDb6fSbU/cT2hIogRIQpmU B4aZY4ewU5xJGWp5Y0X5oy/3HgJtF+dUoRkHQwigBkmUra0VapLVDPjSglLYTIOR Ue/fZ8pdSpXA5aTUBoczi7TTivgeKP3iFOh6sikdLxyzYuqsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/PjkvnluXKJfCGq+GK88H/1+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDkx YzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNmODRiMjBlNmQvZjJkMTExYjYtODI0ZC0z YjA4LWFmN2ItM2YzMDFkNzNmNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzA5MWM0YzctYmY0Yy00NTAyLWJj MTktMmUzZjg0YjIwZTZkLzcwOTFjNGM3LWJmNGMtNDUwMi1iYzE5LTJlM2Y4NGIy MGU2ZC5jcmwwHwYDVR0jBBgwFoAUg7ionw+GRPGuMzkBA5Iz+UizmecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDkxYzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNm ODRiMjBlNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJvtnnyUV+13FN+glBPhQsOEbzw9snvP54RwHkXN7tl1Mk0mPGcD8l6 IUz6APPLM1V+rO+lFIWexOv1s4iFkSb30hTAMYcSfE+OjVediwjXxeTpZlgU4juo lVXTEGCiQsqyrx8CDQTQvHbDWl6kX4Qe2yhFAKE8xuGUK6mICbs7fo0Xq5oOHiM0 bBP/3D4vAwgDamFWmgvAq+YIG+Ah7YOeOGEzK8dtiwT9oXRnfHGC1IkOOYD3cIFb D8j359/kJTq+jNAhXCbyE6+9VtizcAv4eb8ejjcVuIuXgTiCeQN35/P7viy1loQ2 q29u7Yo4BBr6avqA26Ngj9D913dhNNI= -----END CERTIFICATE-----Generated at Sat Nov 23 03:07:52 2024 by rpki-client on console-fra.rpki-client.org