$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa File: 7b07ff38-005d-377c-95d7-6ce9da3de600.roa (raw, json) Hash identifier: 86r8IfUF9Ap9Gi6DDdcrcW7TzHd6nokDDUsbKMpaZR8= Subject key identifier: 03:25:38:85:C5:5C:7F:6A:C9:AA:C0:EF:44:DC:E7:6F:F7:12:D9:01 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584795A2E6460398E536AABAB9C0 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa Signing time: Fri 18 Oct 2024 17:43:37 +0000 ROA not before: Fri 18 Oct 2024 17:43:37 +0000 ROA not after: Thu 16 Jan 2025 18:43:37 +0000 asID: 11776 IP address blocks: 23.152.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:a2:e6:46:03:98:e5:36:aa:ba:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Oct 18 17:43:37 2024 GMT Not After : Jan 16 18:43:37 2025 GMT Subject: CN=fd7fc160-61cb-4ce7-bd2f-b5693c6b5414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:47:62:88:92:de:f9:b2:2c:55:9d:e5:10: 91:1a:c6:0a:29:9c:7d:c1:f8:89:fb:d6:8e:c4:74: ed:1e:c1:17:c3:f1:fd:dc:52:99:19:c1:25:59:4f: 48:5c:a9:98:7a:1c:4b:8b:72:29:fd:22:22:c7:3d: 5e:db:37:c9:b6:73:7c:4c:dd:12:9a:2d:ad:f1:c4: 03:b1:33:04:f8:d6:07:10:af:a4:48:89:a2:1e:76: 1a:d3:8f:92:80:1b:d7:80:4e:c6:85:2e:1e:ee:a3: 56:e8:c6:9a:bc:d1:76:1d:5b:90:26:f6:23:ae:88: 66:15:ca:9d:84:a1:2e:f8:78:a9:55:55:2f:42:29: 8e:39:18:4a:f3:6d:af:7f:13:5d:68:65:b7:cc:4f: 8c:63:43:df:24:f6:e3:2c:ac:8f:49:b3:1e:68:a0: 72:d2:e0:58:5f:e7:3f:74:a2:49:07:ff:39:4e:63: 98:56:a2:8c:7f:45:3d:26:8a:04:8d:57:21:42:41: 1b:cb:7d:08:e0:1d:e4:68:57:66:7b:4f:03:66:23: 12:53:14:fb:c2:dd:f8:85:cf:90:60:d4:b9:5f:c8: 14:a4:24:0b:e4:67:d5:9a:5a:43:4c:bd:1f:51:55: 42:89:e6:da:e2:99:80:e7:92:40:dd:73:e4:64:3e: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:38:85:C5:5C:7F:6A:C9:AA:C0:EF:44:DC:E7:6F:F7:12:D9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ab:6e:31:8e:fd:1b:e4:e6:49:d9:3d:9e:d6:7c:84:7e:7e: fb:7f:c0:d2:61:dd:3d:00:35:a5:ca:30:0c:f2:49:a7:1b:91: 3b:11:b7:fe:7f:14:82:87:8c:df:06:58:cc:20:a1:5b:6b:34: 32:4e:a9:fe:b9:97:a9:e5:b0:09:0e:57:c1:de:92:6b:ef:22: af:af:92:2a:6c:14:96:88:69:96:b1:bc:e5:f8:75:03:1d:b3: cf:1f:b2:c9:29:fb:37:2a:67:fb:44:ca:0c:c5:77:a3:8f:40: 39:a3:98:05:5d:dd:3a:fd:ef:8e:d6:bf:0c:e2:58:f6:d7:c3: 0a:1a:3c:e5:a7:c8:39:36:b5:76:01:8a:06:91:af:91:f5:3c: 4e:04:3d:89:88:1d:54:98:b3:f3:4f:b2:09:ec:47:ca:e4:74: c5:13:6c:65:58:c0:ba:e1:8c:e8:d3:95:4a:db:34:ba:df:ea: 28:66:14:8a:16:7e:ce:65:f4:a4:08:47:02:07:6e:31:54:c6: 6b:5a:87:74:c9:07:a8:e9:65:a9:f2:ef:32:7b:b1:ca:eb:18: b5:e3:3e:42:74:b2:ae:a2:99:b8:33:1d:09:14:66:25:61:0c: 7f:69:84:91:ad:cd:d2:73:e9:03:8d:bd:4f:05:f2:c6:62:dc: 2b:4b:b2:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVouZGA5jlNqq6ucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI0MTAxODE3NDMzN1oXDTI1MDExNjE4NDMzN1owLzEtMCsGA1UEAxMk ZmQ3ZmMxNjAtNjFjYi00Y2U3LWJkMmYtYjU2OTNjNmI1NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06JHYoiS3vmyLFWd5RCRGsYKKZx9wfiJ+9aO xHTtHsEXw/H93FKZGcElWU9IXKmYehxLi3Ip/SIixz1e2zfJtnN8TN0Smi2t8cQD sTME+NYHEK+kSImiHnYa04+SgBvXgE7GhS4e7qNW6MaavNF2HVuQJvYjrohmFcqd hKEu+HipVVUvQimOORhK822vfxNdaGW3zE+MY0PfJPbjLKyPSbMeaKBy0uBYX+c/ dKJJB/85TmOYVqKMf0U9JooEjVchQkEby30I4B3kaFdme08DZiMSUxT7wt34hc+Q YNS5X8gUpCQL5GfVmlpDTL0fUVVCieba4pmA55JA3XPkZD5IDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMlOIXFXH9qyarA70Tc52/3EtkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvN2IwN2ZmMzgtMDA1ZC0z NzdjLTk1ZDctNmNlOWRhM2RlNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOrbjGO/Rvk5knZPZ7WfIR+fvt/wNJh3T0ANaXKMAzySacbkTsRt/5/ FIKHjN8GWMwgoVtrNDJOqf65l6nlsAkOV8HekmvvIq+vkipsFJaIaZaxvOX4dQMd s88fsskp+zcqZ/tEygzFd6OPQDmjmAVd3Tr9747WvwziWPbXwwoaPOWnyDk2tXYB igaRr5H1PE4EPYmIHVSYs/NPsgnsR8rkdMUTbGVYwLrhjOjTlUrbNLrf6ihmFIoW fs5l9KQIRwIHbjFUxmtah3TJB6jpZany7zJ7scrrGLXjPkJ0sq6imbgzHQkUZiVh DH9phJGtzdJz6QONvU8F8sZi3CtLsnY= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:22 2024 by rpki-client on console-ams.rpki-client.org