$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa File: f3006f6e-eb09-31d8-8265-4a9386256f5f.roa (raw, json) Hash identifier: vgsE6uMZPqqZVS3Qv/XlKzfU1l5eoE3DZStv5o3Xlqo= Subject key identifier: DA:C3:C2:52:74:F4:B5:53:48:45:BA:5C:6E:0E:31:21:78:62:E4:80 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847BBB4882EFE1D478B5AE7B680 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa Signing time: Fri 01 Nov 2024 08:59:52 +0000 ROA not before: Fri 01 Nov 2024 08:59:52 +0000 ROA not after: Thu 30 Jan 2025 09:59:52 +0000 asID: 30058 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bb:b4:88:2e:fe:1d:47:8b:5a:e7:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 1 08:59:52 2024 GMT Not After : Jan 30 09:59:52 2025 GMT Subject: CN=3e41ff14-7dd8-4384-a125-af3fb3efe879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:85:e0:0e:ad:70:a3:3e:2c:75:75:8f:45: a8:0c:e4:11:51:22:fb:81:77:58:eb:a2:b2:97:56: 70:47:9c:fa:e8:e5:14:97:09:85:45:aa:a0:a4:63: 99:2a:47:86:40:05:44:93:be:da:08:de:f8:1a:4c: d1:ee:6a:28:56:69:05:2e:e1:53:cc:6d:2b:47:30: 21:b1:2a:88:a5:18:1b:d1:47:dd:06:c6:cb:6b:cc: e7:60:14:d5:e2:76:21:63:da:6c:5e:1d:7c:04:e1: 96:4b:91:c1:52:42:e4:2a:fa:b2:90:06:94:81:94: 7a:8a:a8:f5:48:5f:df:fb:ee:5c:64:7d:42:07:4e: 2b:95:8a:e3:9f:a2:cd:d6:ec:8c:b1:f5:b8:dc:93: 97:cc:9a:95:a7:a5:40:63:14:20:24:be:d7:8c:61: cc:0d:76:f7:a7:e9:98:a2:c4:90:87:e5:af:15:19: 31:18:0d:b1:36:89:45:d1:73:40:0e:a2:d9:08:a5: 67:3a:5c:04:02:b4:3e:68:e9:4c:fa:2e:45:86:01: 70:8e:5e:db:9a:98:1d:9f:f7:b2:9e:4e:29:62:17: 16:e0:55:06:3d:9d:48:d1:df:3b:32:ae:79:33:4e: f8:fd:ae:8c:25:5d:95:bd:e3:07:8e:c4:49:f8:0a: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C3:C2:52:74:F4:B5:53:48:45:BA:5C:6E:0E:31:21:78:62:E4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5d:8d:7a:d4:7d:05:34:15:a0:db:1a:bb:0c:2d:05:0b:ec: 23:93:97:47:10:3c:bc:03:9e:28:58:31:1f:04:58:83:23:dd: ae:b7:85:15:f9:99:fc:6c:97:5f:46:2a:c6:3b:07:9d:f4:2c: 14:09:09:8d:7e:35:5a:5f:66:30:68:40:81:b3:9a:e5:90:cb: 4f:ca:a7:0c:7c:16:3e:36:a3:20:31:9d:5c:60:3c:83:57:57: f0:52:0d:63:b9:7d:6f:fd:b1:38:c5:40:52:05:12:9c:93:05: fb:1b:de:df:1c:5d:58:a2:43:58:5c:07:66:70:8b:dc:ba:d0: ac:81:4f:47:ae:e4:2a:58:e4:1a:1b:37:28:81:77:86:e0:21: 43:e1:2c:d2:99:67:3c:ac:90:9f:cf:97:9c:5e:d0:60:7f:40: 0e:9c:bd:52:94:20:f6:aa:ba:9c:f2:81:07:70:8b:ac:25:74: b2:2e:99:02:cb:84:9a:75:05:81:06:f8:c3:8f:17:6a:79:9e: 41:4c:27:5c:88:85:a4:c6:61:55:81:a6:ed:f6:04:3a:2c:bb: 59:67:ac:1d:2b:c5:d8:d3:1c:6e:89:aa:3a:4b:72:e3:a2:55: 9d:3c:0e:39:e0:7e:4d:d4:93:1e:b8:a1:2f:c2:02:50:89:d7: 72:36:a4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe7tIgu/h1Hi1rntoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEwMTA4NTk1MloXDTI1MDEzMDA5NTk1MlowLzEtMCsGA1UEAxMk M2U0MWZmMTQtN2RkOC00Mzg0LWExMjUtYWYzZmIzZWZlODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOmF4A6tcKM+LHV1j0WoDOQRUSL7gXdY66Ky l1ZwR5z66OUUlwmFRaqgpGOZKkeGQAVEk77aCN74GkzR7mooVmkFLuFTzG0rRzAh sSqIpRgb0UfdBsbLa8znYBTV4nYhY9psXh18BOGWS5HBUkLkKvqykAaUgZR6iqj1 SF/f++5cZH1CB04rlYrjn6LN1uyMsfW43JOXzJqVp6VAYxQgJL7XjGHMDXb3p+mY osSQh+WvFRkxGA2xNolF0XNADqLZCKVnOlwEArQ+aOlM+i5FhgFwjl7bmpgdn/ey nk4pYhcW4FUGPZ1I0d87Mq55M074/a6MJV2VveMHjsRJ+Ar0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrDwlJ09LVTSEW6XG4OMSF4YuSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjMwMDZmNmUtZWIwOS0z MWQ4LTgyNjUtNGE5Mzg2MjU2ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVdjXrUfQU0FaDbGrsMLQUL7COTl0cQPLwDnihYMR8EWIMj3a63hRX5 mfxsl19GKsY7B530LBQJCY1+NVpfZjBoQIGzmuWQy0/Kpwx8Fj42oyAxnVxgPINX V/BSDWO5fW/9sTjFQFIFEpyTBfsb3t8cXViiQ1hcB2Zwi9y60KyBT0eu5CpY5Bob NyiBd4bgIUPhLNKZZzyskJ/Pl5xe0GB/QA6cvVKUIPaqupzygQdwi6wldLIumQLL hJp1BYEG+MOPF2p5nkFMJ1yIhaTGYVWBpu32BDosu1lnrB0rxdjTHG6JqjpLcuOi VZ08Djngfk3Ukx64oS/CAlCJ13I2pCM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:30 2024 by rpki-client on console-fra.rpki-client.org