$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/3b82d0b0-da84-3aef-b0ee-621362bcb78c.roa File: 3b82d0b0-da84-3aef-b0ee-621362bcb78c.roa (raw, json) Hash identifier: U8QAEXPEhmhzYVL2Nml/7Qz8fBPSj1bMJDQg7bhZ2O0= Subject key identifier: BD:F1:A9:2D:C6:8C:4B:0E:0E:2A:26:11:73:BC:7C:FF:E3:C2:51:49 Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Certificate serial: 010D0C9F4328584856CD6B5D19A2F950B98D9F80 Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/3b82d0b0-da84-3aef-b0ee-621362bcb78c.roa Signing time: Thu 26 Dec 2024 22:20:18 +0000 ROA not before: Thu 26 Dec 2024 22:20:18 +0000 ROA not after: Wed 26 Mar 2025 21:20:18 +0000 asID: 63232 IP address blocks: 23.131.60.0/24 maxlen: 24 2602:f763::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:56:cd:6b:5d:19:a2:f9:50:b9:8d:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Validity Not Before: Dec 26 22:20:18 2024 GMT Not After : Mar 26 21:20:18 2025 GMT Subject: CN=172ac89b-8b0c-4d06-aaf9-830a16cfb1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:60:cf:4e:b0:29:c4:94:63:92:dd:6e:24: e2:b4:ca:0d:54:25:50:a9:e4:ca:29:b7:74:05:ae: 74:7c:ce:c7:c8:2f:11:a6:d7:b9:fe:33:97:5b:26: 44:04:86:a3:78:58:22:aa:46:27:7a:01:b0:64:00: d6:aa:61:4e:ae:ed:50:97:81:8b:37:51:dc:f5:79: 15:b4:2f:8e:c3:75:b0:59:ce:dd:d5:0d:5f:3c:dc: c0:4b:95:16:6c:27:31:be:8e:08:11:dc:53:6c:9c: 49:f7:14:df:84:a4:2d:0d:d2:a9:91:0f:b8:3a:77: fb:3b:66:b1:5f:74:cc:df:7d:d1:96:b6:65:f5:3e: e5:75:f0:52:c5:ee:45:a5:bf:b1:d1:13:f6:1e:50: a0:2c:52:28:61:ae:c6:28:fd:fc:cc:3e:55:07:87: 8b:53:29:4d:b0:07:94:12:85:a2:f5:1d:ac:f7:40: ae:23:90:c9:81:fb:ed:ee:70:6e:78:31:d3:1f:c5: 63:6d:e0:e2:9d:e0:16:78:9c:f2:18:01:c7:66:10: 9e:1f:0d:d3:8c:36:e1:5f:0d:2e:e2:1b:3a:ee:86: b4:40:39:27:9f:41:05:1e:ee:d2:c8:bf:75:d8:7b: 9b:55:ec:8b:1f:ff:7d:6f:79:f3:18:96:41:4c:98: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F1:A9:2D:C6:8C:4B:0E:0E:2A:26:11:73:BC:7C:FF:E3:C2:51:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/3b82d0b0-da84-3aef-b0ee-621362bcb78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl X509v3 Authority Key Identifier: keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer sbgp-ipAddrBlock: critical IPv4: 23.131.60.0/24 IPv6: 2602:f763::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fd:6d:fc:52:92:f1:29:30:23:66:4b:06:56:1c:42:fc:75: f5:05:6a:2a:dc:71:92:a0:3b:bd:6f:05:54:68:49:5b:5f:f2: 28:f8:56:93:73:46:8f:4c:54:28:f4:49:14:92:ab:d8:f0:67: 99:00:57:87:ee:f9:23:71:1c:0e:a9:72:ea:e5:aa:4b:6f:d3: e0:ec:82:be:f4:d6:fa:df:4e:60:6e:9d:0e:2f:bb:3e:16:59: 78:49:18:d1:a3:c6:8c:ee:e7:ce:a3:f9:c3:6e:8a:90:e2:ad: 7c:3c:19:2d:24:77:8d:66:20:5c:4d:df:31:50:3b:b0:2d:69: 11:40:66:de:b9:dc:d7:ed:9d:d3:1a:ea:75:67:85:b0:19:1c: 24:b7:0b:b5:99:43:bd:85:87:15:3b:2b:28:ed:00:91:63:0f: ab:5c:c1:5c:ec:71:2a:34:3a:55:f0:4f:81:1c:52:40:52:a4: ac:d4:99:71:63:42:d3:dd:45:cd:b0:2d:f4:6b:6a:16:8c:7a: 75:81:80:1c:f9:bc:df:7b:25:40:a6:99:48:ee:f0:f5:0f:c3: 08:08:89:47:16:89:6f:b3:97:25:9f:9a:fc:ab:62:ee:91:a4: 3c:b1:74:c6:c8:10:06:f7:5b:40:b1:48:83:a8:d2:7b:e4:0e: 56:73:f5:7e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhWzWtdGaL5ULmNn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3 OWM5MB4XDTI0MTIyNjIyMjAxOFoXDTI1MDMyNjIxMjAxOFowLzEtMCsGA1UEAxMk MTcyYWM4OWItOGIwYy00ZDA2LWFhZjktODMwYTE2Y2ZiMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEhgz06wKcSUY5LdbiTitMoNVCVQqeTKKbd0 Ba50fM7HyC8Rpte5/jOXWyZEBIajeFgiqkYnegGwZADWqmFOru1Ql4GLN1Hc9XkV tC+Ow3WwWc7d1Q1fPNzAS5UWbCcxvo4IEdxTbJxJ9xTfhKQtDdKpkQ+4Onf7O2ax X3TM333RlrZl9T7ldfBSxe5Fpb+x0RP2HlCgLFIoYa7GKP38zD5VB4eLUylNsAeU EoWi9R2s90CuI5DJgfvt7nBueDHTH8VjbeDineAWeJzyGAHHZhCeHw3TjDbhXw0u 4hs67oa0QDknn0EFHu7SyL912HubVeyLH/99b3nzGJZBTJhBOQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL3xqS3GjEsODiomEXO8fP/jwlFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3 ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvM2I4MmQwYjAtZGE4NC0z YWVmLWIwZWUtNjIxMzYyYmNiNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5 MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh M2YwMjc5YzkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4M8MA4E AgACMAgDBgAmAvdjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0/W38UpLxKTAjZksGVhxC/HX1BWoq3HGS oDu9bwVUaElbX/Io+FaTc0aPTFQo9EkUkqvY8GeZAFeH7vkjcRwOqXLq5apLb9Pg 7IK+9Nb6305gbp0OL7s+Fll4SRjRo8aM7ufOo/nDboqQ4q18PBktJHeNZiBcTd8x UDuwLWkRQGbeudzX7Z3TGup1Z4WwGRwktwu1mUO9hYcVOyso7QCRYw+rXMFc7HEq NDpV8E+BHFJAUqSs1JlxY0LT3UXNsC30a2oWjHp1gYAc+bzfeyVApplI7vD1D8MI CIlHFolvs5cln5r8q2LukaQ8sXTGyBAG91tAsUiDqNJ75A5Wc/V+ -----END CERTIFICATE-----Generated at Sun Dec 29 00:43:48 2024 by rpki-client on console-ams.rpki-client.org