$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa File: 7989b37d-2112-3094-a13a-f52f755aa5a8.roa (raw, json) Hash identifier: svS9X+7HlznRgPzmAazSTTnQlnBqk59AoDD4rir2RkE= Subject key identifier: 4D:E3:C6:D7:6D:78:1C:0D:1B:25:08:B2:CB:84:1C:AB:FD:20:E2:8C Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F43285847B101634624EBA67D00625140 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 23428 IP address blocks: 23.136.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:63:46:24:eb:a6:7d:00:62:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=183f711e-eafc-4a77-8a38-ecbefcf6f449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:81:27:cf:1f:00:1b:83:a6:2d:19:07:e3: 02:13:d7:f8:8b:c2:20:52:38:90:c1:50:c9:5b:67: 16:3c:c2:70:5a:59:2e:d5:da:34:d6:85:d1:0c:e8: b6:6b:7d:66:f5:22:59:c1:48:ba:33:df:6b:e5:a7: 64:ce:b0:cb:c4:3b:80:7b:86:9f:71:2a:ee:c2:a9: 46:f5:65:04:31:2c:d4:97:dd:c0:f0:7d:52:2b:81: 43:fe:54:91:00:75:24:84:49:79:56:12:35:6b:9e: 70:8e:07:f6:fd:43:19:75:56:7b:5a:a4:f3:3e:45: 2d:e1:a5:9e:52:60:9e:4e:f8:a8:d7:4d:a3:23:40: 6e:66:d9:43:d6:90:31:31:94:43:e3:da:29:51:f0: 8e:0c:d5:8c:e3:66:cb:3e:61:35:71:f4:9b:91:0f: 08:f9:31:23:00:f7:8a:04:59:11:45:48:63:77:c3: 85:7e:17:22:1b:e1:cb:5a:a0:48:0a:a2:74:c3:4e: d8:a7:e3:b1:c9:33:e4:b5:ff:56:11:9e:54:cf:6e: 1f:1d:1b:da:bd:aa:80:1f:42:d5:d9:06:46:f6:3b: 63:ae:6c:a1:2d:f5:c7:56:ec:52:55:3e:c3:8d:7b: 6b:6f:a1:b3:32:5d:4e:a6:8f:2c:fb:e2:82:eb:8a: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E3:C6:D7:6D:78:1C:0D:1B:25:08:B2:CB:84:1C:AB:FD:20:E2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2a:62:d9:45:6b:5b:fd:67:e1:58:18:7b:9a:6d:f8:2d:66: e9:29:90:a4:6e:aa:e1:11:c9:6b:bb:31:b8:fa:92:3c:1b:94: 63:50:d9:cf:41:23:db:e8:e6:fc:47:94:e9:ee:11:04:f4:ec: e5:56:08:ed:0d:fe:0d:c4:d5:ac:6d:ec:d9:57:76:3d:53:da: d9:e8:20:1c:d1:8b:be:78:2b:cb:5d:e5:00:5e:52:34:5c:89: 98:9a:b8:44:3c:cc:7f:4a:48:cc:fd:e2:2b:b8:ef:a4:a0:2e: a6:a8:af:e4:18:ab:99:e4:62:1e:87:04:38:d5:e4:ce:94:6d: 09:9c:75:7e:af:58:d5:dc:9d:12:de:f4:f2:4f:f3:e8:fe:5b: bf:cd:21:b4:c1:9e:37:02:b5:48:f2:ad:15:8d:9c:34:fa:f5: c8:74:57:a0:f4:f6:e9:57:4f:be:a9:08:83:35:fd:13:78:31: b2:9f:df:02:fe:81:5d:c9:dc:53:f8:ac:c4:06:bd:52:f7:b5: 55:93:e2:8f:70:fc:0c:ad:2e:1c:a8:35:54:8f:28:8c:c2:39: 58:20:05:34:04:41:27:d0:44:65:dc:ee:d7:4a:d2:06:36:91: 01:90:53:bd:60:ab:1e:ef:56:28:3d:8c:49:7f:8b:d8:b2:e9: 69:ad:c4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWNGJOumfQBiUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk MTgzZjcxMWUtZWFmYy00YTc3LThhMzgtZWNiZWZjZjZmNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8OBJ88fABuDpi0ZB+MCE9f4i8IgUjiQwVDJ W2cWPMJwWlku1do01oXRDOi2a31m9SJZwUi6M99r5adkzrDLxDuAe4afcSruwqlG 9WUEMSzUl93A8H1SK4FD/lSRAHUkhEl5VhI1a55wjgf2/UMZdVZ7WqTzPkUt4aWe UmCeTvio102jI0BuZtlD1pAxMZRD49opUfCODNWM42bLPmE1cfSbkQ8I+TEjAPeK BFkRRUhjd8OFfhciG+HLWqBICqJ0w07Yp+OxyTPktf9WEZ5Uz24fHRvavaqAH0LV 2QZG9jtjrmyhLfXHVuxSVT7DjXtrb6GzMl1Opo8s++KC64rYBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3jxtdteBwNGyUIssuEHKv9IOKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNzk4OWIzN2QtMjExMi0z MDk0LWExM2EtZjUyZjc1NWFhNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYqYtlFa1v9Z+FYGHuabfgtZukpkKRuquERyWu7Mbj6kjwblGNQ2c9B I9vo5vxHlOnuEQT07OVWCO0N/g3E1axt7NlXdj1T2tnoIBzRi754K8td5QBeUjRc iZiauEQ8zH9KSMz94iu476SgLqaor+QYq5nkYh6HBDjV5M6UbQmcdX6vWNXcnRLe 9PJP8+j+W7/NIbTBnjcCtUjyrRWNnDT69ch0V6D09ulXT76pCIM1/RN4MbKf3wL+ gV3J3FP4rMQGvVL3tVWT4o9w/AytLhyoNVSPKIzCOVggBTQEQSfQRGXc7tdK0gY2 kQGQU71gqx7vVig9jEl/i9iy6WmtxMM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org