$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: X6Fl7z54O81WVtC7g8BCeuK2NTOQT2sWJhBB6ejQ4XA= Subject key identifier: 52:9B:F6:B1:A4:E4:4B:92:99:30:50:04:B2:04:55:51:65:F3:F0:0D Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584815D6129B3AA39389B28BED90 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Tue 03 Dec 2024 15:50:12 +0000 ROA not before: Tue 03 Dec 2024 15:50:12 +0000 ROA not after: Mon 03 Mar 2025 15:50:12 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:15:d6:12:9b:3a:a3:93:89:b2:8b:ed:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Dec 3 15:50:12 2024 GMT Not After : Mar 3 15:50:12 2025 GMT Subject: CN=3aabb7ab-c432-4203-954b-54daeb595a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:84:f1:59:d9:ac:dc:1c:71:e7:4d:e0:f2: ba:b6:22:49:3b:f3:aa:4a:1d:fd:0b:43:85:55:63: 30:10:33:bf:20:f7:8a:90:7e:27:a2:3c:d2:1f:3e: a3:05:44:a7:f8:1b:1b:c0:17:31:c3:aa:f4:cd:1b: e7:3a:ca:1d:78:20:7c:84:4a:e7:cb:d2:6c:43:5b: 26:b4:a2:2f:6c:e7:26:0c:a0:dd:f7:ac:c9:0a:01: 71:da:5a:36:07:a1:d2:85:36:37:62:39:4d:60:77: 98:5e:9d:75:0d:e8:cb:5f:1e:6e:f8:99:d6:31:63: 73:ae:bb:00:94:44:f9:e0:ca:44:36:8b:6f:ca:33: a0:27:f7:dd:58:1f:7d:55:b5:8c:6f:8d:1f:4a:3d: 9c:da:c5:bd:cd:1e:23:66:99:09:93:b6:58:13:ed: 69:dd:e1:21:8e:b2:c0:7d:ed:76:11:79:45:cc:26: dc:8b:81:51:8a:6f:86:65:43:73:7d:ac:c6:ad:b8: d7:87:f2:44:7a:de:af:e8:22:50:9e:c9:ab:86:01: 9c:c5:fa:0c:34:89:f9:c7:45:bf:d7:9b:5d:65:e9: 8e:44:1a:fe:50:71:eb:f9:0e:9d:92:8c:02:07:ba: af:00:1a:f0:6d:32:62:a3:a7:01:aa:a4:01:c9:b2: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:F6:B1:A4:E4:4B:92:99:30:50:04:B2:04:55:51:65:F3:F0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:06:51:39:c0:54:80:67:a2:87:2a:f8:3f:7a:d2:f2:ae:61: 20:d8:5a:97:bc:96:dd:27:0b:79:87:a8:f5:a6:ed:c8:b6:3f: 34:02:6d:00:f5:8d:f5:49:dd:d0:f9:e1:71:2d:ca:28:79:5e: 78:8b:86:2e:7f:a0:7e:87:ec:dc:40:99:6c:ba:6f:67:ad:8e: c9:57:60:7e:a6:2a:60:03:85:bd:f6:fc:fd:07:1f:23:72:37: f4:a6:e4:a8:24:70:29:83:c5:ef:e8:21:1b:6b:03:27:43:0e: a1:3d:b1:6f:b2:29:95:2d:53:49:25:71:50:ef:bb:d9:da:65: de:d6:f6:85:7c:dc:fa:c8:54:ca:a8:8b:e8:d9:16:52:93:3a: 89:bd:9a:d0:8f:aa:17:18:bc:79:2a:f0:a0:85:3b:83:fd:41: 5b:18:46:76:a0:51:7e:be:68:da:35:85:8e:a0:94:f6:99:8e: 22:cf:df:8f:45:6c:e1:9d:c8:ed:d5:c7:7a:c3:17:bc:65:30: 3b:29:32:00:20:a2:33:1b:7d:ce:c3:cc:6f:15:d7:ec:57:26: 92:9f:a8:e4:1e:c3:16:29:4e:61:aa:b4:ae:93:ea:2e:03:64: f3:18:eb:66:02:b7:0f:b0:09:77:49:72:15:28:17:4c:1a:d6: 70:1e:5b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgV1hKbOqOTibKL7ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI0MTIwMzE1NTAxMloXDTI1MDMwMzE1NTAxMlowLzEtMCsGA1UEAxMk M2FhYmI3YWItYzQzMi00MjAzLTk1NGItNTRkYWViNTk1YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw+E8VnZrNwccedN4PK6tiJJO/OqSh39C0OF VWMwEDO/IPeKkH4nojzSHz6jBUSn+BsbwBcxw6r0zRvnOsodeCB8hErny9JsQ1sm tKIvbOcmDKDd96zJCgFx2lo2B6HShTY3YjlNYHeYXp11DejLXx5u+JnWMWNzrrsA lET54MpENotvyjOgJ/fdWB99VbWMb40fSj2c2sW9zR4jZpkJk7ZYE+1p3eEhjrLA fe12EXlFzCbci4FRim+GZUNzfazGrbjXh/JEet6v6CJQnsmrhgGcxfoMNIn5x0W/ 15tdZemORBr+UHHr+Q6dkowCB7qvABrwbTJio6cBqqQBybIeNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKb9rGk5EuSmTBQBLIEVVFl8/ANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4GUTnAVIBnoocq+D960vKuYSDYWpe8lt0nC3mHqPWm7ci2PzQCbQD1 jfVJ3dD54XEtyih5XniLhi5/oH6H7NxAmWy6b2etjslXYH6mKmADhb32/P0HHyNy N/Sm5KgkcCmDxe/oIRtrAydDDqE9sW+yKZUtU0klcVDvu9naZd7W9oV83PrIVMqo i+jZFlKTOom9mtCPqhcYvHkq8KCFO4P9QVsYRnagUX6+aNo1hY6glPaZjiLP349F bOGdyO3Vx3rDF7xlMDspMgAgojMbfc7DzG8V1+xXJpKfqOQewxYpTmGqtK6T6i4D ZPMY62YCtw+wCXdJchUoF0wa1nAeWxc= -----END CERTIFICATE-----Generated at Sat Dec 28 18:45:09 2024 by rpki-client on console-ams.rpki-client.org