$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa File: 1a058e05-5d24-38e1-8868-0e2b4b598073.roa (raw, json) Hash identifier: 5ZqzGTFfem/9+MZJ4hYZHiD6zsc8XRruXJX343+MoTo= Subject key identifier: C4:FA:22:20:46:46:6D:B3:05:73:80:C1:D9:E2:FF:55:F6:D8:D2:E8 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858475E478D39966A68A5F5C30780 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa Signing time: Sat 28 Sep 2024 21:50:06 +0000 ROA not before: Sat 28 Sep 2024 21:50:06 +0000 ROA not after: Fri 27 Dec 2024 22:50:06 +0000 asID: 1239 IP address blocks: 23.237.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:47:8d:39:96:6a:68:a5:f5:c3:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 28 21:50:06 2024 GMT Not After : Dec 27 22:50:06 2024 GMT Subject: CN=c33e5caf-a678-4dd9-874d-581c143fcbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:d7:ac:64:64:b8:c5:de:f3:5c:4f:87:80: 44:3b:7a:6e:9b:2c:69:9b:1c:7e:87:fb:62:08:a5: 15:65:13:e4:50:30:04:8d:c4:4c:29:17:b8:0b:d9: 69:e9:14:cd:31:90:ad:97:42:c1:0a:52:54:ce:75: 8c:4a:21:58:6b:ea:2f:86:80:eb:fc:f3:4e:8f:bc: f3:63:b3:c4:d1:8f:19:8c:6c:9e:e3:36:9b:e3:1a: d8:9c:fb:df:0e:4f:8b:8b:62:b9:8e:a2:27:fc:4e: 39:38:36:b5:76:5a:7f:aa:9c:72:df:e6:fd:81:6f: e6:24:86:91:f1:0d:2d:67:a1:84:c9:5c:fc:66:55: be:54:0e:6e:c3:2f:93:1f:4e:85:43:71:56:dd:1e: 1e:8e:9f:d1:8b:96:9e:20:45:ed:ff:7f:ca:a0:e0: ec:28:d1:8f:83:e0:97:8d:93:25:b9:ce:e1:75:e8: 61:63:36:bc:28:3e:a4:62:5e:1e:da:fb:4b:82:5e: 6d:20:d4:83:db:66:d5:ec:ce:00:02:60:e6:b8:54: ff:af:e0:8c:7a:8f:c8:59:c4:1f:15:6d:ed:33:ba: 0b:64:6d:d3:03:80:fb:4e:1b:1c:5e:20:15:3b:db: de:9f:de:5b:64:db:e6:58:2d:8f:6f:bf:cf:76:0a: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FA:22:20:46:46:6D:B3:05:73:80:C1:D9:E2:FF:55:F6:D8:D2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:33:25:6d:9d:64:46:be:92:ef:5b:3a:52:8b:5b:50:a8:89: 48:b2:4d:e9:c5:92:a0:ed:b4:39:2c:dd:62:b9:96:20:b1:92: 28:cc:37:49:41:30:a0:9f:da:99:a5:c5:b5:eb:d6:29:52:3e: 4c:2c:80:e7:5e:a8:63:54:6c:95:26:dc:c4:ac:61:d5:c3:1c: 88:0f:0b:55:59:92:af:d5:58:38:96:aa:e2:24:1e:99:ab:66: 31:cc:a0:ff:d3:48:4c:70:5f:97:44:b1:94:07:1c:38:1a:81: 06:48:f0:81:92:ef:3e:3e:16:22:3e:5f:5c:ae:7f:1c:ba:10: 36:99:10:37:44:de:77:a9:6d:0b:b8:97:5c:79:cd:9d:ce:51: de:74:68:53:9a:82:c8:27:f5:b2:2a:e1:90:cb:69:39:92:2b: 7f:fc:33:9e:59:06:de:90:a1:4b:37:22:4e:ab:36:19:78:42: a7:9f:90:1f:2c:4b:cf:68:03:db:23:91:c4:a9:5c:2e:df:57: a2:1e:43:28:30:46:38:37:fc:4d:02:26:af:0e:d9:b8:bc:bf: 6b:4f:0f:b3:13:c7:2d:55:e1:8a:79:bd:11:4f:03:4a:1e:77: eb:a9:73:62:d0:26:82:1e:a7:5d:8e:cc:d4:82:b7:e0:44:43: 37:1a:33:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdeR405lmpopfXDB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MDkyODIxNTAwNloXDTI0MTIyNzIyNTAwNlowLzEtMCsGA1UEAxMk YzMzZTVjYWYtYTY3OC00ZGQ5LTg3NGQtNTgxYzE0M2ZjYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqXXrGRkuMXe81xPh4BEO3pumyxpmxx+h/ti CKUVZRPkUDAEjcRMKRe4C9lp6RTNMZCtl0LBClJUznWMSiFYa+ovhoDr/PNOj7zz Y7PE0Y8ZjGye4zab4xrYnPvfDk+Li2K5jqIn/E45ODa1dlp/qpxy3+b9gW/mJIaR 8Q0tZ6GEyVz8ZlW+VA5uwy+TH06FQ3FW3R4ejp/Ri5aeIEXt/3/KoODsKNGPg+CX jZMluc7hdehhYza8KD6kYl4e2vtLgl5tINSD22bV7M4AAmDmuFT/r+CMeo/IWcQf FW3tM7oLZG3TA4D7ThscXiAVO9ven95bZNvmWC2Pb7/Pdgr+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT6IiBGRm2zBXOAwdni/1X22NLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWEwNThlMDUtNWQyNC0z OGUxLTg4NjgtMGUyYjRiNTk4MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8zJW2dZEa+ku9bOlKLW1CoiUiyTenFkqDttDks3WK5liCxkijMN0lB MKCf2pmlxbXr1ilSPkwsgOdeqGNUbJUm3MSsYdXDHIgPC1VZkq/VWDiWquIkHpmr ZjHMoP/TSExwX5dEsZQHHDgagQZI8IGS7z4+FiI+X1yufxy6EDaZEDdE3nepbQu4 l1x5zZ3OUd50aFOagsgn9bIq4ZDLaTmSK3/8M55ZBt6QoUs3Ik6rNhl4QqefkB8s S89oA9sjkcSpXC7fV6IeQygwRjg3/E0CJq8O2bi8v2tPD7MTxy1V4Yp5vRFPA0oe d+upc2LQJoIep12OzNSCt+BEQzcaM9k= -----END CERTIFICATE-----Generated at Tue Oct 22 18:55:13 2024 by rpki-client on console-ams.rpki-client.org