$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa File: 31f29860-b9a8-3368-b909-343d11150b76.roa (raw, json) Hash identifier: XUoXWituMjE73PxMAsy3Zvur4KkGeWV2hBJgu1F/HVA= Subject key identifier: D8:0D:FE:81:F2:AC:C9:AB:64:81:07:85:17:60:7C:30:7D:3C:1B:CC Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F43285847A8DBED4A9F651A4413B3BE68 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa Signing time: Fri 25 Oct 2024 14:58:53 +0000 ROA not before: Fri 25 Oct 2024 14:58:53 +0000 ROA not after: Thu 23 Jan 2025 15:58:53 +0000 asID: 401446 IP address blocks: 142.202.82.0/23 maxlen: 23 2602:fd9a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:db:ed:4a:9f:65:1a:44:13:b3:be:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Oct 25 14:58:53 2024 GMT Not After : Jan 23 15:58:53 2025 GMT Subject: CN=e3235e18-661e-42c1-bc4a-fcad220a09d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:32:74:32:5a:f9:59:5d:be:f7:46:c1:ba: d2:00:f0:37:18:34:7c:3d:b2:45:bd:35:ab:55:8c: 48:e8:01:a7:0c:08:9d:95:6e:2b:95:2c:ff:0b:67: a4:a1:90:d6:87:e5:52:0f:2f:17:bf:e9:7a:f2:55: 7e:17:bc:aa:9d:17:bc:80:07:89:8c:c2:e5:51:d6: 21:9b:bc:2c:54:c1:93:a1:b6:93:e8:16:98:47:d9: 9a:5a:75:23:6a:78:ef:a0:e1:bd:94:d5:4f:42:dc: 95:5b:e3:f7:3c:d1:68:3f:ab:97:69:8e:9a:87:e9: 32:4c:35:d0:02:cf:be:b5:ea:20:a9:d0:b7:a6:02: 85:c0:64:79:65:bf:cf:11:bc:9a:24:c3:92:db:ad: 56:75:7e:32:dc:71:7e:85:05:57:e6:d0:c9:99:39: 95:6b:04:be:3e:0e:13:6d:48:36:70:a8:49:5a:18: ef:c8:09:b3:81:db:9b:f2:15:32:51:b4:e1:ad:6b: f2:db:cc:b7:7c:58:ab:64:43:0d:73:4e:52:9d:77: 06:ed:bd:38:dc:12:a2:cb:a4:f5:3c:7b:66:e7:2d: 6e:e8:ea:59:76:46:dd:ee:4a:b8:f3:9e:b0:4f:c0: ac:dd:1e:dd:db:3f:3f:d5:2a:77:a9:0b:d8:6d:3e: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:FE:81:F2:AC:C9:AB:64:81:07:85:17:60:7C:30:7D:3C:1B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 IPv6: 2602:fd9a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9b:f0:c5:76:98:3d:21:9a:37:d9:8b:f4:34:cb:28:ec:43: f3:e4:2a:56:ca:57:8a:97:7e:84:bf:92:a2:df:7d:9f:a2:8d: d1:9f:a9:c9:c4:88:7a:28:ce:63:f6:3e:c3:73:cf:80:74:d5: 13:bf:4f:12:a1:83:28:3f:54:7a:a2:14:8a:0a:e1:d8:0c:fb: b0:34:b6:55:91:5e:c6:94:99:9d:1c:6f:e3:65:74:d3:3f:7d: cd:aa:57:54:ac:58:f5:f0:cb:92:c6:62:61:4e:2f:4f:c6:ad: 0a:ce:b3:ca:35:da:05:c4:5b:fc:b0:a8:b6:8b:96:6d:87:3e: 1c:04:9e:8f:89:4b:25:d0:77:ef:a3:f6:1b:a4:2e:b4:b1:88: 4c:74:4f:7f:42:01:b2:73:9b:8f:68:90:00:b4:ee:00:80:e7: 4f:6b:11:e6:66:8c:61:97:a0:b2:50:a6:36:f1:20:bf:57:85: c0:96:69:a5:64:a5:ae:d9:ea:b5:1a:4d:6d:48:5d:f0:b4:01: a5:95:a7:1e:5f:92:7d:16:d6:8e:09:d0:3a:e9:34:1c:5f:f6: ff:9c:00:98:27:0b:4c:1f:ae:c1:6b:9c:44:9f:9a:c1:5e:89: c5:3b:21:c9:3f:b6:58:78:ff:e3:33:2a:08:d4:d3:6e:97:c5: 91:ec:97:c7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeo2+1Kn2UaRBOzvmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI0MTAyNTE0NTg1M1oXDTI1MDEyMzE1NTg1M1owLzEtMCsGA1UEAxMk ZTMyMzVlMTgtNjYxZS00MmMxLWJjNGEtZmNhZDIyMGEwOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPsydDJa+VldvvdGwbrSAPA3GDR8PbJFvTWr VYxI6AGnDAidlW4rlSz/C2ekoZDWh+VSDy8Xv+l68lV+F7yqnRe8gAeJjMLlUdYh m7wsVMGTobaT6BaYR9maWnUjanjvoOG9lNVPQtyVW+P3PNFoP6uXaY6ah+kyTDXQ As++teogqdC3pgKFwGR5Zb/PEbyaJMOS261WdX4y3HF+hQVX5tDJmTmVawS+Pg4T bUg2cKhJWhjvyAmzgdub8hUyUbThrWvy28y3fFirZEMNc05SnXcG7b043BKiy6T1 PHtm5y1u6OpZdkbd7kq4856wT8Cs3R7d2z8/1Sp3qQvYbT4HVwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNgN/oHyrMmrZIEHhRdgfDB9PBvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvMzFmMjk4NjAtYjlhOC0z MzY4LWI5MDktMzQzZDExMTUwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjspSMA4E AgACMAgDBgQmAv2aADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPm/DFdpg9IZo32Yv0NMso7EPz5CpWyleK l36Ev5Ki332foo3Rn6nJxIh6KM5j9j7Dc8+AdNUTv08SoYMoP1R6ohSKCuHYDPuw NLZVkV7GlJmdHG/jZXTTP33NqldUrFj18MuSxmJhTi9Pxq0KzrPKNdoFxFv8sKi2 i5Zthz4cBJ6PiUsl0Hfvo/YbpC60sYhMdE9/QgGyc5uPaJAAtO4AgOdPaxHmZoxh l6CyUKY28SC/V4XAlmmlZKWu2eq1Gk1tSF3wtAGllaceX5J9FtaOCdA66TQcX/b/ nACYJwtMH67Ba5xEn5rBXonFOyHJP7ZYeP/jMyoI1NNul8WR7JfH -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org