$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa File: 1b6b4554-6168-3529-a377-02cd9bc61653.roa (raw, json) Hash identifier: U/cKvYnrZEhrE1Nv7GZTOwaLPL0qTqW7U/s5oaLiMso= Subject key identifier: 1A:AE:3C:A2:6C:DF:71:8D:0D:87:AA:6A:7A:E7:A3:6D:C2:1A:46:C6 Certificate issuer: /CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Certificate serial: 010D0C9F43285847E4C4A7D090D0C6536BCF1480 Authority key identifier: 99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa Signing time: Sat 16 Nov 2024 02:00:28 +0000 ROA not before: Sat 16 Nov 2024 02:00:28 +0000 ROA not after: Fri 14 Feb 2025 02:00:28 +0000 asID: 395648 IP address blocks: 23.173.248.0/24 maxlen: 24 2602:f946::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e4:c4:a7:d0:90:d0:c6:53:6b:cf:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Validity Not Before: Nov 16 02:00:28 2024 GMT Not After : Feb 14 02:00:28 2025 GMT Subject: CN=d0b0e00e-ab88-461a-8da0-840d1d73502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:3a:56:33:44:cd:a0:99:b0:ca:76:28:d4: 87:b8:28:11:00:17:73:6f:a8:d8:b5:42:2a:ee:28: 07:65:89:88:68:4a:a2:f7:cf:88:de:29:99:cb:dd: 6f:e0:c5:2c:bb:5e:8a:9b:73:c0:f1:d8:5c:82:72: b1:4b:5e:36:9b:2b:a3:7f:79:77:a7:c0:2a:12:38: 9c:1b:45:ae:a9:61:93:37:1d:d1:67:14:ec:e0:b5: 4b:ca:e1:15:d0:f8:23:9c:1c:39:85:67:00:4e:d4: 5b:2b:4c:ae:a5:15:a8:e6:b0:78:11:5c:b0:8a:4c: 42:75:7d:22:bb:7a:76:8d:ff:6e:4a:7c:19:60:17: a4:82:44:5e:d9:fd:1a:5f:ff:11:c6:66:10:24:76: 2e:04:45:f6:1d:e8:1b:e8:59:83:fb:b0:19:89:e9: 5f:f9:82:62:18:e6:1d:a3:02:fb:f3:a9:e6:8b:9b: 53:93:55:bb:5d:e0:68:4f:73:f5:9c:df:f0:87:2f: 31:4f:94:64:7d:2b:69:f6:e1:7f:5e:c9:cf:ea:4e: 96:2e:cb:a2:43:9d:85:01:f6:43:cc:f9:bb:8f:25: 15:8e:5a:dc:b1:ce:d4:b8:2d:bf:8f:8e:49:d9:f2: f8:c1:32:b6:20:60:e0:16:04:30:6f:10:f5:2d:3c: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:3C:A2:6C:DF:71:8D:0D:87:AA:6A:7A:E7:A3:6D:C2:1A:46:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl X509v3 Authority Key Identifier: keyid:99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer sbgp-ipAddrBlock: critical IPv4: 23.173.248.0/24 IPv6: 2602:f946::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f0:c8:09:22:d0:0f:4a:85:37:57:d3:6a:4c:13:aa:7a:02:93: 88:34:bc:74:8d:ea:61:8a:ee:10:e0:49:17:5b:51:d6:bf:0a: 4f:a8:ec:f2:0d:0b:6e:b0:67:61:84:d7:11:77:6a:f8:41:f2: 6f:22:58:29:60:92:33:8f:b1:d9:59:36:b6:26:85:b7:a3:d2: 69:c8:e3:da:17:ae:7b:a8:13:58:63:3d:ed:8d:80:37:a8:ac: a1:2d:7d:6f:a2:df:70:43:c4:6d:0b:07:32:67:2b:88:e7:53: 0a:65:e6:c6:c6:22:df:4f:e8:ff:2a:35:7b:46:28:b8:68:45: a9:79:84:9c:36:68:8c:a3:98:60:f4:ae:dd:00:fa:06:86:bd: 21:a3:6f:3f:ab:a4:81:09:ff:c5:ae:9b:73:0f:2a:c1:7d:22: f3:e1:66:68:c1:f3:b9:fb:97:6b:c8:1c:67:8f:81:0e:1d:ed: 67:17:6c:f8:e2:e9:94:1e:cd:e1:02:86:de:b5:18:09:bf:1a: ee:e8:41:6b:90:90:bd:31:7a:cb:da:f7:83:3f:3a:8a:e7:ff: da:51:ec:0c:fc:5c:59:42:03:55:8e:df:c3:dc:3e:fd:91:8f: 95:21:0c:de:55:56:b2:74:85:31:53:11:bc:09:5f:0a:e1:46: 5a:28:a4:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEfkxKfQkNDGU2vPFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZhODMwMGEtNmI3My00MmM2LWI4MTItNmI0OWI2NTg3 YTM4MB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk ZDBiMGUwMGUtYWI4OC00NjFhLThkYTAtODQwZDFkNzM1MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PU6VjNEzaCZsMp2KNSHuCgRABdzb6jYtUIq 7igHZYmIaEqi98+I3imZy91v4MUsu16Km3PA8dhcgnKxS142myujf3l3p8AqEjic G0WuqWGTNx3RZxTs4LVLyuEV0PgjnBw5hWcATtRbK0yupRWo5rB4EVywikxCdX0i u3p2jf9uSnwZYBekgkRe2f0aX/8RxmYQJHYuBEX2Hegb6FmD+7AZielf+YJiGOYd owL786nmi5tTk1W7XeBoT3P1nN/why8xT5RkfStp9uF/XsnP6k6WLsuiQ52FAfZD zPm7jyUVjlrcsc7UuC2/j45J2fL4wTK2IGDgFgQwbxD1LTwkvwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBquPKJs33GNDYeqanrno23CGkbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNmE4 MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5YjY1ODdhMzgvMWI2YjQ1NTQtNjE2OC0z NTI5LWEzNzctMDJjZDliYzYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTZhODMwMGEtNmI3My00MmM2LWI4 MTItNmI0OWI2NTg3YTM4LzE2YTgzMDBhLTZiNzMtNDJjNi1iODEyLTZiNDliNjU4 N2EzOC5jcmwwHwYDVR0jBBgwFoAUmRZTmjW2WvWh4aSSnu+LKx2HQ9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNmE4MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5 YjY1ODdhMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF634MA4E AgACMAgDBgAmAvlGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDwyAki0A9KhTdX02pME6p6ApOINLx0jeph iu4Q4EkXW1HWvwpPqOzyDQtusGdhhNcRd2r4QfJvIlgpYJIzj7HZWTa2JoW3o9Jp yOPaF657qBNYYz3tjYA3qKyhLX1vot9wQ8RtCwcyZyuI51MKZebGxiLfT+j/KjV7 Rii4aEWpeYScNmiMo5hg9K7dAPoGhr0ho28/q6SBCf/FrptzDyrBfSLz4WZowfO5 +5dryBxnj4EOHe1nF2z44umUHs3hAobetRgJvxru6EFrkJC9MXrL2veDPzqK5//a UewM/FxZQgNVjt/D3D79kY+VIQzeVVaydIUxUxG8CV8K4UZaKKTE -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:33 2024 by rpki-client on console-ams.rpki-client.org