$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa File: 65c13d7b-acee-30f4-a5da-46152c1b5e65.roa (raw, json) Hash identifier: be/V52tfwV2b5iE+cJnGc9e+1E8iluGPASVS8bdN6r4= Subject key identifier: 0F:15:DF:98:B7:B3:69:FA:65:FC:65:F9:6D:31:CF:9E:32:34:FB:62 Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Certificate serial: 010D0C9F43285847B3CC05BE02367C2EC48A5440 Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 21527 IP address blocks: 23.157.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:05:be:02:36:7c:2e:c4:8a:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=de6a8ab3-62d8-477c-aa7a-92ca914fcbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:89:86:ef:20:b9:4f:d4:3a:ca:ca:30:f0: 13:13:dd:1e:06:b7:3d:2b:52:34:84:05:8e:bc:de: 54:c5:a4:89:78:41:90:39:0f:02:9e:22:43:2e:6d: b9:09:6c:f4:cf:8f:fd:c4:ee:45:51:6c:10:d6:5d: ff:7b:fd:34:12:a7:3c:06:b9:21:d8:ef:f8:2f:17: 45:63:91:ea:82:1d:9d:ba:d5:69:e9:d6:25:6a:6c: 76:09:cb:d3:26:88:79:d4:69:73:21:1d:6a:b1:59: f2:6b:56:40:86:fb:2c:3b:c5:07:cf:b9:37:6a:9a: c5:a0:88:0b:86:02:36:79:57:68:91:b0:2e:12:fd: 2e:6c:de:56:0e:8a:11:3b:f6:6a:49:1e:9c:52:54: d5:2c:ef:8e:32:c2:2f:6e:41:46:b6:3e:70:34:95: 39:80:dd:cb:38:18:a3:36:0c:db:02:18:1a:7f:a2: 1b:a1:77:36:82:b5:9f:e4:8c:5a:14:fe:70:5a:12: 30:bb:97:85:9d:3e:cf:7f:6e:b6:78:4d:f9:21:78: 8f:dc:e3:08:21:cd:de:77:c1:e0:f0:e9:fa:e3:0f: 2c:6e:aa:52:82:5d:5a:60:91:98:5e:1b:e9:a5:5e: 74:07:5e:54:89:82:4b:46:ad:0a:4f:6a:83:1d:58: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:15:DF:98:B7:B3:69:FA:65:FC:65:F9:6D:31:CF:9E:32:34:FB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl X509v3 Authority Key Identifier: keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:70:0e:4f:fb:e7:84:bb:bc:8b:ee:cf:34:d8:65:fa:eb:e9: 35:24:21:bc:c9:2c:70:75:dc:ef:c1:8f:68:24:03:fa:e8:64: 9b:60:ec:c0:e2:cc:fa:fe:a5:d0:80:22:67:f6:09:69:4a:4c: 09:51:4b:c2:b1:40:66:64:d1:ec:b6:26:5c:f3:b3:1a:ab:43: 0e:df:3b:a9:93:b8:3a:bc:af:a2:fd:24:14:c3:e8:e5:cb:fe: 80:4d:ac:5c:b7:7e:cf:ef:af:84:e3:98:03:0a:6c:2f:c3:17: 32:13:ed:6c:68:3d:1a:4e:c3:be:14:25:d1:48:f3:4d:06:1d: 06:8a:15:43:37:c1:42:65:81:b6:3b:48:e8:d5:25:fd:b6:4a: c7:0a:71:93:0f:08:e1:ae:a5:4e:06:94:44:7a:30:a1:52:12: 92:47:c1:e4:44:d7:1b:23:8e:d2:a4:06:9a:0c:86:7b:29:9d: 89:cc:f6:1d:6a:d6:5e:eb:97:84:15:3b:e8:8d:73:f2:d4:e4: a1:fd:c4:d9:38:55:fe:cf:b3:4d:5d:fc:58:6a:e2:23:55:db: 1b:2b:e4:4e:35:98:27:4c:2d:94:f6:b7:e8:7e:cf:ce:22:c2: 13:4d:cd:87:41:af:7d:7d:8d:ea:1d:41:56:81:20:83:5e:e9: 24:c0:6e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzAW+AjZ8LsSKVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4 YTNlMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZGU2YThhYjMtNjJkOC00NzdjLWFhN2EtOTJjYTkxNGZjYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGJhu8guU/UOsrKMPATE90eBrc9K1I0hAWO vN5UxaSJeEGQOQ8CniJDLm25CWz0z4/9xO5FUWwQ1l3/e/00Eqc8Brkh2O/4LxdF Y5Hqgh2dutVp6dYlamx2CcvTJoh51GlzIR1qsVnya1ZAhvssO8UHz7k3aprFoIgL hgI2eVdokbAuEv0ubN5WDooRO/ZqSR6cUlTVLO+OMsIvbkFGtj5wNJU5gN3LOBij NgzbAhgaf6IboXc2grWf5IxaFP5wWhIwu5eFnT7Pf262eE35IXiP3OMIIc3ed8Hg 8On64w8sbqpSgl1aYJGYXhvppV50B15UiYJLRq0KT2qDHVgOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8V35i3s2n6Zfxl+W0xz54yNPtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvNjVjMTNkN2ItYWNlZS0z MGY0LWE1ZGEtNDYxNTJjMWI1ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1 NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4 OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxwDk/754S7vIvuzzTYZfrr6TUkIbzJLHB13O/Bj2gkA/roZJtg7MDi zPr+pdCAImf2CWlKTAlRS8KxQGZk0ey2JlzzsxqrQw7fO6mTuDq8r6L9JBTD6OXL /oBNrFy3fs/vr4TjmAMKbC/DFzIT7WxoPRpOw74UJdFI800GHQaKFUM3wUJlgbY7 SOjVJf22SscKcZMPCOGupU4GlER6MKFSEpJHweRE1xsjjtKkBpoMhnspnYnM9h1q 1l7rl4QVO+iNc/LU5KH9xNk4Vf7Ps01d/Fhq4iNV2xsr5E41mCdMLZT2t+h+z84i whNNzYdBr319jeodQVaBIINe6STAbgs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org