$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa File: d90d31b8-8155-3610-8198-5dd6d5876243.roa (raw, json) Hash identifier: d0dz3/BKlD5wixLQhQ7KR0rgN4ZPXw/VXFXtGvPtnsc= Subject key identifier: F8:E8:A8:79:4F:FE:DE:D0:8B:54:5F:CF:ED:BF:AF:47:EB:F3:4A:25 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858476070E5AB0FC98DF29808D160 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa Signing time: Sun 29 Sep 2024 16:25:01 +0000 ROA not before: Sun 29 Sep 2024 16:25:01 +0000 ROA not after: Sat 28 Dec 2024 17:25:01 +0000 asID: 1239 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:70:e5:ab:0f:c9:8d:f2:98:08:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Sep 29 16:25:01 2024 GMT Not After : Dec 28 17:25:01 2024 GMT Subject: CN=8bfa3c3f-caa6-4e90-9640-4faab2a07de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:ed:f5:93:fe:65:53:dd:2b:cb:f3:5d:47: 3a:57:7a:c8:15:b2:79:38:bd:a6:2f:29:32:0f:04: 2b:22:a9:b9:8f:ec:e6:81:36:db:ec:4d:5b:76:7e: ad:1f:1b:fe:b0:00:ae:a1:e8:ab:bc:38:5d:d3:2f: 05:14:2d:b2:be:96:20:29:82:1d:c0:5d:b7:30:7e: bd:66:d3:0d:b5:28:f0:49:a6:09:43:c5:17:bf:bb: c8:f9:22:f3:51:e5:6c:04:d0:1f:8b:1b:09:e9:a4: 25:6d:f0:7d:ca:f6:7b:bc:2b:d4:ed:d1:43:dd:58: 47:7a:11:cb:8c:4b:02:90:cf:92:8d:4f:c0:48:4b: 89:6a:1d:f1:09:60:9c:a1:9c:56:06:32:dc:cc:4e: 95:30:5c:80:95:12:38:67:bf:38:46:c1:28:13:60: db:71:6e:61:7c:f0:b9:8f:a9:52:eb:3b:4c:ec:ec: 30:49:37:4b:14:2e:e0:e2:b6:01:65:24:3a:7e:b2: 6f:b1:f5:ab:f2:6a:cc:fe:cb:ec:6a:5b:dc:61:09: f9:df:7a:21:e5:ff:1e:dc:39:2f:28:ce:64:3f:68: b8:1b:32:8f:0f:dd:d3:c5:0a:f5:ca:ac:8f:c8:fa: fa:56:a3:ca:9a:13:13:89:dd:db:31:34:9f:ba:78: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E8:A8:79:4F:FE:DE:D0:8B:54:5F:CF:ED:BF:AF:47:EB:F3:4A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:3a:83:fa:b8:b9:1d:a5:f5:91:3d:43:f6:ae:bc:54:de:b5: ec:c1:bf:b4:47:ad:a5:49:58:58:b6:ed:6b:24:bf:02:65:e9: 6d:81:03:bc:6e:1b:63:9f:5c:19:71:c2:6c:37:51:bb:6e:8d: 82:98:c4:7a:63:d9:59:b4:27:f2:81:c5:b2:71:3b:22:de:f5: 27:21:43:4d:a1:71:8a:b2:25:5f:cb:08:b2:79:12:9d:a1:5d: 7b:bb:af:43:b8:0c:e4:c0:90:2f:63:00:8d:cd:8c:da:88:4d: 50:df:3b:69:fc:bc:8c:2a:19:ee:ed:59:0c:09:e3:84:4b:72: 1e:71:84:31:13:c2:62:72:ae:8e:22:f0:b8:9e:e0:e5:af:6a: e7:c7:8c:5f:ed:00:a0:aa:df:5f:47:70:af:ef:34:a2:1b:5a: 8b:78:ac:74:d6:17:f1:eb:5e:d8:4c:38:bc:27:60:9d:5d:8e: 0a:28:a9:bc:98:0f:a2:fc:e4:b7:fd:fd:04:e0:7f:d4:a5:ab: 30:04:d7:fa:df:fd:81:2b:12:c4:9d:e0:8e:16:e2:89:1b:cc: 07:14:3e:68:3c:55:23:ef:e4:38:2a:88:e3:6d:cb:d5:ff:86: 58:28:b3:d7:48:06:89:9c:4f:8c:eb:82:62:73:09:6d:d2:27: 4b:64:d5:bb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEdgcOWrD8mN8pgI0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MDkyOTE2MjUwMVoXDTI0MTIyODE3MjUwMVowLzEtMCsGA1UEAxMk OGJmYTNjM2YtY2FhNi00ZTkwLTk2NDAtNGZhYWIyYTA3ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOft9ZP+ZVPdK8vzXUc6V3rIFbJ5OL2mLyky DwQrIqm5j+zmgTbb7E1bdn6tHxv+sACuoeirvDhd0y8FFC2yvpYgKYIdwF23MH69 ZtMNtSjwSaYJQ8UXv7vI+SLzUeVsBNAfixsJ6aQlbfB9yvZ7vCvU7dFD3VhHehHL jEsCkM+SjU/ASEuJah3xCWCcoZxWBjLczE6VMFyAlRI4Z784RsEoE2DbcW5hfPC5 j6lS6ztM7OwwSTdLFC7g4rYBZSQ6frJvsfWr8mrM/svsalvcYQn533oh5f8e3Dkv KM5kP2i4GzKPD93TxQr1yqyPyPr6VqPKmhMTid3bMTSfungwZwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPjoqHlP/t7Qi1Rfz+2/r0fr80olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDkwZDMxYjgtODE1NS0z NjEwLTgxOTgtNWRkNmQ1ODc2MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA3DqD+ri5HaX1kT1D9q68VN617MG/tEet pUlYWLbtayS/AmXpbYEDvG4bY59cGXHCbDdRu26NgpjEemPZWbQn8oHFsnE7It71 JyFDTaFxirIlX8sIsnkSnaFde7uvQ7gM5MCQL2MAjc2M2ohNUN87afy8jCoZ7u1Z DAnjhEtyHnGEMRPCYnKujiLwuJ7g5a9q58eMX+0AoKrfX0dwr+80ohtai3isdNYX 8ete2Ew4vCdgnV2OCiipvJgPovzkt/39BOB/1KWrMATX+t/9gSsSxJ3gjhbiiRvM BxQ+aDxVI+/kOCqI423L1f+GWCiz10gGiZxPjOuCYnMJbdInS2TVuw== -----END CERTIFICATE-----Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org