$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json) Hash identifier: qb426sB7+vYLeP3u4SgzsbJi14nKXxDAefg4gernQ1I= Subject key identifier: CA:50:E2:AD:E9:EF:5F:9C:6B:58:94:0D:2B:90:96:18:AF:24:F0:06 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F43285847A73BE1FAD0788A2DE8ADB680 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 23428 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e1:fa:d0:78:8a:2d:e8:ad:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=32b29708-d78d-4928-8ee4-da8804f3be7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:f9:c3:b4:3c:4d:09:4b:e5:ba:1a:b9:aa: 68:80:e5:c3:9b:13:3d:8f:43:80:fa:df:41:d2:62: a7:74:fa:4d:5f:e3:2f:4b:ce:e1:10:16:58:a5:a9: 95:d6:56:34:9b:79:5b:0e:f3:b4:6f:99:23:df:7e: 01:73:c0:2e:b1:37:f4:fd:a4:02:46:63:5a:f7:e1: 37:56:73:14:d0:1b:07:a3:32:7e:5f:01:bf:51:43: 75:6d:17:09:2a:ac:77:dd:83:69:fd:70:43:09:af: c0:4e:24:27:82:d1:b0:ca:38:b1:61:67:f7:73:b6: 6e:11:11:a7:df:11:9d:35:a9:db:fb:98:8d:03:54: b7:10:e0:e6:d4:d2:85:22:09:aa:d6:6e:47:ec:af: 81:7b:f9:bc:a5:a4:e0:ca:a8:12:0c:f9:a4:6a:1b: ed:5d:8e:2c:98:07:ea:2a:20:4e:d4:8e:2b:3a:0a: fb:43:89:00:b7:a8:3d:66:31:38:bd:7e:37:22:2b: 64:62:86:3b:7d:34:f5:94:d2:02:9b:18:e3:4e:58: 7f:c8:d8:0b:b6:e1:69:dd:41:17:13:e1:94:05:f1: 5d:41:de:66:07:98:74:af:47:20:2f:8f:f5:c0:0c: 4a:cc:12:6c:63:66:de:dd:f0:00:fe:a5:42:31:dd: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:50:E2:AD:E9:EF:5F:9C:6B:58:94:0D:2B:90:96:18:AF:24:F0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:17:6f:e6:62:da:89:0f:fd:c1:21:40:1d:4e:97:cf:50:7f: a8:4d:35:3d:12:40:53:ab:75:df:7e:96:cb:ca:da:c0:8a:7d: d5:92:57:51:cc:a0:70:25:8a:1b:41:b5:58:b4:d1:db:d8:18: 66:c8:d2:8f:3a:fe:45:36:23:e4:19:a1:93:7d:3a:8e:92:2f: ee:fb:13:01:ac:cb:4f:6f:39:5f:ca:ca:1e:b0:90:4f:9c:30: f6:49:94:2e:3c:60:75:6e:32:e1:a9:75:6a:7c:c7:9d:47:13: 76:ca:4d:1c:d2:cf:e3:4b:9e:91:05:86:c2:68:a6:78:ac:95: f1:74:0c:b4:3e:dc:cd:cf:1e:6c:c6:1b:0f:f0:76:f5:10:8b: f0:49:47:4e:5b:51:61:f6:c4:ec:40:92:65:0d:0d:61:62:dd: ed:4c:3b:58:27:6c:49:ad:8a:e0:2f:bb:58:b9:84:13:ca:68: c3:04:d1:07:91:72:a9:5b:bc:f5:19:18:0c:8a:99:6d:3e:19: e1:6d:4b:49:32:54:45:07:2b:48:83:36:dd:b6:9c:3d:17:aa: c7:1e:88:00:ea:3f:33:be:2b:d0:56:41:25:a2:df:1f:66:5e: 22:0f:8d:87:31:bc:c0:0f:98:2f:0f:04:75:05:b6:59:7c:a6: b5:b7:34:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+H60HiKLeittoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MzJiMjk3MDgtZDc4ZC00OTI4LThlZTQtZGE4ODA0ZjNiZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh775w7Q8TQlL5boauapogOXDmxM9j0OA+t9B 0mKndPpNX+MvS87hEBZYpamV1lY0m3lbDvO0b5kj334Bc8AusTf0/aQCRmNa9+E3 VnMU0BsHozJ+XwG/UUN1bRcJKqx33YNp/XBDCa/ATiQngtGwyjixYWf3c7ZuERGn 3xGdNanb+5iNA1S3EODm1NKFIgmq1m5H7K+Be/m8paTgyqgSDPmkahvtXY4smAfq KiBO1I4rOgr7Q4kAt6g9ZjE4vX43IitkYoY7fTT1lNICmxjjTlh/yNgLtuFp3UEX E+GUBfFdQd5mB5h0r0cgL4/1wAxKzBJsY2be3fAA/qVCMd353QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpQ4q3p71+ca1iUDSuQlhivJPAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0Xb+Zi2okP/cEhQB1Ol89Qf6hNNT0SQFOrdd9+lsvK2sCKfdWSV1HM oHAlihtBtVi00dvYGGbI0o86/kU2I+QZoZN9Oo6SL+77EwGsy09vOV/Kyh6wkE+c MPZJlC48YHVuMuGpdWp8x51HE3bKTRzSz+NLnpEFhsJopnislfF0DLQ+3M3PHmzG Gw/wdvUQi/BJR05bUWH2xOxAkmUNDWFi3e1MO1gnbEmtiuAvu1i5hBPKaMME0QeR cqlbvPUZGAyKmW0+GeFtS0kyVEUHK0iDNt22nD0XqsceiADqPzO+K9BWQSWi3x9m XiIPjYcxvMAPmC8PBHUFtll8prW3NBw= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org