$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa File: fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa (raw, json) Hash identifier: 1zPxBta4nPeME7bdwB8KNV6q440intVPuUQ4G78P8xE= Subject key identifier: 46:85:54:25:0C:5C:61:25:03:58:44:A9:72:FF:06:36:48:2E:39:F4 Certificate issuer: /CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0 Certificate serial: 010D0C9F432858479C112A1A203CFA7FE74F6B40 Authority key identifier: 10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 397945 IP address blocks: 23.141.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:2a:1a:20:3c:fa:7f:e7:4f:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=402c2352-49cf-4ce7-8565-4947b10766ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:51:9a:1f:5b:8d:66:b4:d7:d8:42:d0:30: 00:ab:24:24:7f:3a:67:f4:25:d9:10:99:d0:dd:24: f2:5f:d9:8e:b5:d5:02:00:cc:32:4d:49:6f:65:32: fb:27:0f:82:7f:df:8a:a7:9a:bc:2f:7d:9a:bb:ee: 60:d6:2f:22:4e:a9:5e:97:d6:9b:f2:6c:d3:27:ed: 0f:ac:a8:b5:43:f4:1b:af:98:5d:5b:51:dc:7c:46: c0:aa:0c:cb:57:be:a4:99:29:d2:55:1c:63:64:b1: 06:ea:77:57:c7:0d:6f:18:23:09:f7:b0:43:8f:d8: b6:2c:af:45:4d:9e:40:ca:bf:84:d7:ff:cc:9f:c0: 21:f0:ac:fc:b1:a0:8d:b5:fb:11:fb:10:f2:3f:1c: e6:92:19:75:f2:44:b6:04:ee:be:14:e6:2d:3d:88: 74:d9:f2:66:b0:cd:d7:05:95:ec:b3:2f:13:7a:e2: f1:9f:20:7e:11:05:db:58:75:aa:5d:15:2b:c5:16: c8:44:a7:9f:01:d7:27:7e:d1:5a:72:70:0d:a3:78: 64:50:fa:ad:65:c1:e7:2a:b1:d8:ec:5d:91:73:04: 34:83:9d:04:7e:c2:e0:6c:b2:c4:b5:27:e2:7b:5e: 6e:78:76:34:df:89:37:04:57:a6:0a:29:c5:91:68: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:54:25:0C:5C:61:25:03:58:44:A9:72:FF:06:36:48:2E:39:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/fd78a9c7-e861-34bb-981b-2b2e2efcdf4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl X509v3 Authority Key Identifier: keyid:10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:94:41:23:60:8d:95:75:09:6a:0d:a4:2f:38:b7:39:6a:e2: 54:b2:be:ce:35:b5:ee:4e:dc:0f:7a:75:e6:23:c0:5d:91:cd: 2e:34:1a:1a:4a:2e:02:eb:c9:d6:ac:14:6c:9b:f5:ea:e4:25: 11:0a:0b:5e:25:48:37:80:97:1b:c0:93:53:07:38:10:11:a0: 36:08:82:00:9c:a9:5f:62:94:c5:83:d9:78:a9:2f:c5:25:f4: 74:fc:3e:63:2c:4b:c5:5f:9b:ac:9f:6f:0b:bc:b9:c7:fb:0e: 05:0d:62:62:47:e2:41:de:f5:ef:65:e9:64:eb:13:cd:8d:0d: c0:d7:be:49:2c:3b:03:cc:03:ff:86:f7:24:4f:c9:19:56:8f: 10:44:04:aa:c1:c0:76:30:b1:f6:5b:c2:af:45:15:52:db:8d: c2:a6:20:b2:91:c7:1f:f8:10:e3:52:4f:7c:75:ea:56:ce:bb: 70:bf:34:23:b9:be:6f:1e:0c:5a:d8:78:fc:ac:d5:9a:2b:be: 3e:02:1a:7c:e7:42:3b:ca:5d:50:62:c0:e0:77:5a:a0:67:ff: b5:30:26:38:4a:bd:8a:51:af:ac:df:24:93:b9:27:c2:a3:2f: 75:c9:28:57:bd:a4:d1:19:30:64:e1:01:f6:81:83:e0:9c:6b: b1:7b:c1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESoaIDz6f+dPa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAwNjcwOWEtM2Y1ZS00YjgxLWFhNzUtN2NhM2VkNWQw M2UwMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDAyYzIzNTItNDljZi00Y2U3LTg1NjUtNDk0N2IxMDc2NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM1Rmh9bjWa019hC0DAAqyQkfzpn9CXZEJnQ 3STyX9mOtdUCAMwyTUlvZTL7Jw+Cf9+Kp5q8L32au+5g1i8iTqlel9ab8mzTJ+0P rKi1Q/Qbr5hdW1HcfEbAqgzLV76kmSnSVRxjZLEG6ndXxw1vGCMJ97BDj9i2LK9F TZ5Ayr+E1//Mn8Ah8Kz8saCNtfsR+xDyPxzmkhl18kS2BO6+FOYtPYh02fJmsM3X BZXssy8TeuLxnyB+EQXbWHWqXRUrxRbIRKefAdcnftFacnANo3hkUPqtZcHnKrHY 7F2RcwQ0g50EfsLgbLLEtSfie15ueHY034k3BFemCinFkWh7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaFVCUMXGElA1hEqXL/BjZILjn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMDA2 NzA5YS0zZjVlLTRiODEtYWE3NS03Y2EzZWQ1ZDAzZTAvZmQ3OGE5YzctZTg2MS0z NGJiLTk4MWItMmIyZTJlZmNkZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjAwNjcwOWEtM2Y1ZS00YjgxLWFh NzUtN2NhM2VkNWQwM2UwLzIwMDY3MDlhLTNmNWUtNGI4MS1hYTc1LTdjYTNlZDVk MDNlMC5jcmwwHwYDVR0jBBgwFoAUELFE6auD4vlTinxYbmGfvK7B0kcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMDA2NzA5YS0zZjVlLTRiODEtYWE3NS03Y2Ez ZWQ1ZDAzZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKUQSNgjZV1CWoNpC84tzlq4lSyvs41te5O3A96deYjwF2RzS40GhpK LgLrydasFGyb9erkJREKC14lSDeAlxvAk1MHOBARoDYIggCcqV9ilMWD2XipL8Ul 9HT8PmMsS8Vfm6yfbwu8ucf7DgUNYmJH4kHe9e9l6WTrE82NDcDXvkksOwPMA/+G 9yRPyRlWjxBEBKrBwHYwsfZbwq9FFVLbjcKmILKRxx/4EONST3x16lbOu3C/NCO5 vm8eDFrYePys1Zorvj4CGnznQjvKXVBiwOB3WqBn/7UwJjhKvYpRr6zfJJO5J8Kj L3XJKFe9pNEZMGThAfaBg+Cca7F7wXY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:54:27 2024 by rpki-client on console-ams.rpki-client.org