$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/3c44aef2-edd8-32a5-9f86-edd71f6c21b9.roa File: 3c44aef2-edd8-32a5-9f86-edd71f6c21b9.roa (raw, json) Hash identifier: qJW1Ym6ukgatkvLHt8EURJARNcDrvANxv7AM11ib1tg= Subject key identifier: 1E:06:77:9E:83:29:54:67:EA:E4:A5:D8:E1:2C:AE:99:B2:B1:82:EB Certificate issuer: /CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Certificate serial: 010D0C9F432858475EA626E1215D3D086FE0C720 Authority key identifier: DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/3c44aef2-edd8-32a5-9f86-edd71f6c21b9.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 8075 IP address blocks: 23.148.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:26:e1:21:5d:3d:08:6f:e0:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=de2685f6-20d0-4991-9d66-72b9c977ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:0a:17:5f:ec:a7:41:02:db:6e:a1:48:0c: dc:da:89:28:b1:ef:66:f8:e4:10:18:ba:67:fa:11: 04:e2:02:b3:32:07:1b:20:1e:ac:b4:a5:c6:91:9f: 30:13:39:23:2f:12:f4:16:df:7d:94:54:b9:0d:15: e3:5e:c9:5b:43:98:42:59:ae:fc:98:ef:cd:0e:ff: c8:a9:b4:e3:d9:8c:da:38:ff:67:e3:66:8d:e6:7e: ff:8c:8f:b3:f3:5d:13:be:79:d0:e1:6a:8c:cb:42: 62:52:83:e1:3b:38:1e:ee:bb:d9:35:28:70:43:0f: 00:5f:2c:28:05:58:dc:86:dd:0e:2d:c4:0b:9a:84: d3:92:06:97:86:cb:07:de:1e:90:69:61:a6:90:a6: b5:1e:a2:e6:66:52:72:88:2f:b2:8e:b8:9c:e5:21: 57:60:26:90:db:ec:8a:92:60:44:65:a9:8b:89:d7: df:21:48:54:38:84:76:5b:d9:fc:cb:4a:1b:85:f0: c9:fc:fe:da:a7:bb:6e:45:cd:60:42:b1:f3:f7:f8: 9b:e9:b7:eb:cb:3a:36:e9:6e:97:17:9b:40:3f:1a: c8:c1:25:e0:11:13:1d:8e:d3:ec:66:d4:01:38:7f: e6:19:e6:8b:23:27:d6:cb:09:60:3a:d7:5d:09:01: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:77:9E:83:29:54:67:EA:E4:A5:D8:E1:2C:AE:99:B2:B1:82:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/3c44aef2-edd8-32a5-9f86-edd71f6c21b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl X509v3 Authority Key Identifier: keyid:DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer sbgp-ipAddrBlock: critical IPv4: 23.148.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f1:2e:50:fa:47:89:17:a9:18:f8:0b:32:d4:72:b3:40:16: da:32:18:39:58:4d:cb:dc:10:48:c1:aa:e0:f0:e3:be:a7:c7: 19:14:7e:d4:45:c1:1a:81:d2:90:af:fc:43:ca:c2:23:4f:86: 9f:18:88:24:25:80:4d:0d:d9:be:43:b1:59:cc:44:be:50:48: 01:5a:12:03:77:04:83:c3:86:0c:d2:0a:a7:1b:48:24:1d:58: 72:4b:e0:20:3c:01:3d:8a:8f:64:64:0a:3b:ec:d6:29:f8:1e: b5:cd:0f:7a:77:d9:71:b7:1a:a3:f4:e8:89:7f:b5:01:55:b7: 63:26:37:32:3c:d2:aa:87:99:b2:fa:13:9c:4b:78:3d:1c:bf: e6:62:10:2e:71:f7:b3:40:d5:f9:d3:bf:1e:e4:58:46:8e:85: 0e:aa:e7:c0:f5:27:a7:51:2c:86:3c:d9:f1:5c:b7:ad:88:41: 1e:84:3b:90:0c:dc:c2:72:68:cc:6f:79:52:14:7b:86:50:e5: 27:4d:a4:b8:be:e6:5d:d2:44:7f:51:8e:5b:af:04:88:a1:20: 53:e9:a7:b9:64:e9:eb:a3:b4:4b:ee:a2:c6:53:d2:42:ed:ce: 47:e8:dc:8d:7e:47:22:88:02:a9:9c:a1:40:ac:12:61:85:72: d5:21:f4:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepibhIV09CG/gxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlZmE2YmYtNmU3NC00NzgwLWE4MGQtY2Y4NWQ4MGM5 N2NhMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk ZGUyNjg1ZjYtMjBkMC00OTkxLTlkNjYtNzJiOWM5NzdlZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs84KF1/sp0EC226hSAzc2okose9m+OQQGLpn +hEE4gKzMgcbIB6stKXGkZ8wEzkjLxL0Ft99lFS5DRXjXslbQ5hCWa78mO/NDv/I qbTj2YzaOP9n42aN5n7/jI+z810TvnnQ4WqMy0JiUoPhOzge7rvZNShwQw8AXywo BVjcht0OLcQLmoTTkgaXhssH3h6QaWGmkKa1HqLmZlJyiC+yjric5SFXYCaQ2+yK kmBEZamLidffIUhUOIR2W9n8y0obhfDJ/P7ap7tuRc1gQrHz9/ib6bfryzo26W6X F5tAPxrIwSXgERMdjtPsZtQBOH/mGeaLIyfWywlgOtddCQGgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4Gd56DKVRn6uSl2OEsrpmysYLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kOGVm YTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1ZDgwYzk3Y2EvM2M0NGFlZjItZWRkOC0z MmE1LTlmODYtZWRkNzFmNmMyMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDhlZmE2YmYtNmU3NC00NzgwLWE4 MGQtY2Y4NWQ4MGM5N2NhL2Q4ZWZhNmJmLTZlNzQtNDc4MC1hODBkLWNmODVkODBj OTdjYS5jcmwwHwYDVR0jBBgwFoAU3/hkpy0c6hVjy6cynKwAM7VxOmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kOGVmYTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1 ZDgwYzk3Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3xLlD6R4kXqRj4CzLUcrNAFtoyGDlYTcvcEEjBquDw476nxxkUftRF wRqB0pCv/EPKwiNPhp8YiCQlgE0N2b5DsVnMRL5QSAFaEgN3BIPDhgzSCqcbSCQd WHJL4CA8AT2Kj2RkCjvs1in4HrXND3p32XG3GqP06Il/tQFVt2MmNzI80qqHmbL6 E5xLeD0cv+ZiEC5x97NA1fnTvx7kWEaOhQ6q58D1J6dRLIY82fFct62IQR6EO5AM 3MJyaMxveVIUe4ZQ5SdNpLi+5l3SRH9RjluvBIihIFPpp7lk6eujtEvuosZT0kLt zkfo3I1+RyKIAqmcoUCsEmGFctUh9Jo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:28:53 2024 by rpki-client on console-fra.rpki-client.org