$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa File: 70e37e41-10ad-3645-89a6-8e56f0894b2d.roa (raw, json) Hash identifier: rUTMfWP7cdocNqde3USeoSWUebdKoL8i2vaiFlrJmko= Subject key identifier: E4:6D:38:97:8C:57:89:9A:63:B2:B0:56:91:61:83:AE:1D:BD:4D:9A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847E62A222806676EB992881960 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 31898 IP address blocks: 23.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:22:28:06:67:6e:b9:92:88:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=045d24a2-e697-452d-9802-dcf202f3d3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:1c:e6:7c:93:c3:c4:4b:57:78:e2:48:fa: 36:8d:cb:31:9b:6f:e7:5e:8e:6c:ae:3b:04:f4:7d: a4:77:f9:89:c3:f8:ff:5e:f3:df:00:0a:97:07:36: 0c:4e:cc:6f:c2:19:40:4f:02:ab:cc:68:ed:2c:07: 09:72:48:ee:26:12:8f:66:42:19:65:20:68:72:a3: 08:c3:6c:bb:d4:7b:aa:90:28:55:96:b5:c4:12:59: 5e:28:33:30:ad:a6:3e:26:c8:b3:8f:4c:1a:67:7c: ce:e4:07:6b:6d:23:3b:d9:d2:c3:06:9a:f7:29:13: 3c:f1:87:1e:6d:b6:43:58:ec:04:b5:35:0d:bf:6f: cb:90:2c:e6:5f:c8:2b:92:45:86:80:46:b6:77:53: b3:22:e1:45:ba:d1:6d:e0:7c:d3:68:7e:88:fb:6f: 3c:f1:0e:eb:2b:ed:a8:db:bb:2b:5d:3e:65:a9:6f: 8e:c3:4b:82:b9:a5:78:1c:78:b2:9c:65:0a:67:0e: 54:6c:8e:97:b4:83:91:e2:63:e6:f1:2d:0d:a4:74: bb:28:46:32:d8:92:f0:a8:d0:32:cf:e4:e2:ed:bb: 7b:ee:5a:ad:e0:e0:96:a5:f6:ee:f1:1c:e0:32:8d: 05:ec:86:5e:57:c0:08:7e:e2:79:a9:ef:4f:b5:31: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:38:97:8C:57:89:9A:63:B2:B0:56:91:61:83:AE:1D:BD:4D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f4:87:ba:09:04:3a:5c:81:06:72:05:77:42:5b:d5:c9:28: 3f:c8:cb:34:f0:d6:49:f5:8f:d6:5b:63:64:d4:e2:a7:fe:16: 8c:d4:73:fa:2a:bd:13:05:d7:23:6b:44:79:8e:b5:fb:a0:2d: c8:73:a6:0b:20:0b:56:c5:5f:9e:f9:49:c6:40:17:57:7b:d7: 9d:71:a9:d8:35:0e:ee:1f:72:63:5d:bc:21:5a:22:ce:f5:5e: 13:cc:38:dd:33:29:8d:cc:29:c9:60:bd:0d:a2:c1:29:d3:66: 4e:cb:d0:3f:4d:e7:62:b1:07:17:34:c6:7c:4d:8d:48:ce:b1: 89:cc:79:8e:c1:f9:19:2b:e3:6d:9a:5d:5e:9f:bf:bd:c7:fa: b4:f9:73:bc:af:47:4f:c5:3e:ef:8e:63:c1:e6:f3:32:02:30: a9:80:02:af:7b:75:47:8d:e8:3b:f5:ea:7a:06:9e:11:9d:79: b5:a5:a9:bc:30:87:87:81:f4:e9:2d:69:f0:44:4c:d3:09:e7: eb:5f:a9:30:dd:70:8a:7a:fc:9d:41:bc:e3:8a:4a:25:b3:35: 72:2c:23:92:f9:f1:82:28:b2:31:ef:26:ec:75:7e:4b:95:55: 42:c3:07:2a:2a:0a:09:14:41:c3:7c:4c:44:28:9c:f6:1c:70: 70:4d:2b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKiIoBmduuZKIGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MDQ1ZDI0YTItZTY5Ny00NTJkLTk4MDItZGNmMjAyZjNkM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovwc5nyTw8RLV3jiSPo2jcsxm2/nXo5srjsE 9H2kd/mJw/j/XvPfAAqXBzYMTsxvwhlATwKrzGjtLAcJckjuJhKPZkIZZSBocqMI w2y71HuqkChVlrXEElleKDMwraY+Jsizj0waZ3zO5AdrbSM72dLDBpr3KRM88Yce bbZDWOwEtTUNv2/LkCzmX8grkkWGgEa2d1OzIuFFutFt4HzTaH6I+2888Q7rK+2o 27srXT5lqW+Ow0uCuaV4HHiynGUKZw5UbI6XtIOR4mPm8S0NpHS7KEYy2JLwqNAy z+Ti7bt77lqt4OCWpfbu8RzgMo0F7IZeV8AIfuJ5qe9PtTFfUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORtOJeMV4maY7KwVpFhg64dvU2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzBlMzdlNDEtMTBhZC0z NjQ1LTg5YTYtOGU1NmYwODk0YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj0h7oJBDpcgQZyBXdCW9XJKD/IyzTw1kn1j9ZbY2TU4qf+FozUc/oq vRMF1yNrRHmOtfugLchzpgsgC1bFX575ScZAF1d7151xqdg1Du4fcmNdvCFaIs71 XhPMON0zKY3MKclgvQ2iwSnTZk7L0D9N52KxBxc0xnxNjUjOsYnMeY7B+Rkr422a XV6fv73H+rT5c7yvR0/FPu+OY8Hm8zICMKmAAq97dUeN6Dv16noGnhGdebWlqbww h4eB9OktafBETNMJ5+tfqTDdcIp6/J1BvOOKSiWzNXIsI5L58YIosjHvJux1fkuV VULDByoqCgkUQcN8TEQonPYccHBNKxY= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org