$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/380e9ba3-ebe2-39db-bb50-176c4fc87849.roa File: 380e9ba3-ebe2-39db-bb50-176c4fc87849.roa (raw, json) Hash identifier: bIEHJfAamhV+HsDsRA1NlVGI9B8MBUMm2t7Nk6T063k= Subject key identifier: 55:DB:3C:7E:7A:E2:50:BD:6A:9B:1A:B9:1D:32:49:49:C0:64:81:0A Certificate issuer: /CN=5d7856f3-fc7a-471b-9168-0c51be45b670 Certificate serial: 010D0C9F4328584793573EED381B7D51998AEC80 Authority key identifier: AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/380e9ba3-ebe2-39db-bb50-176c4fc87849.roa Signing time: Thu 17 Oct 2024 21:59:34 +0000 ROA not before: Thu 17 Oct 2024 21:59:34 +0000 ROA not after: Wed 15 Jan 2025 22:59:34 +0000 asID: 40268 IP address blocks: 23.171.232.0/24 maxlen: 32 2602:f97d::/36 maxlen: 126 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:57:3e:ed:38:1b:7d:51:99:8a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7856f3-fc7a-471b-9168-0c51be45b670 Validity Not Before: Oct 17 21:59:34 2024 GMT Not After : Jan 15 22:59:34 2025 GMT Subject: CN=cb575b25-7886-42bf-b185-f51bbe120fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:5c:97:ff:5f:ed:0c:74:35:b5:db:e8:2d: 73:a1:14:21:ea:90:c8:f6:e1:8a:8a:90:20:26:46: 66:5d:93:85:6d:1f:ee:a9:24:52:65:4e:34:2d:7a: 66:12:97:f1:7a:d9:d1:02:c6:20:33:f3:d7:e5:0f: 91:9e:9f:dc:50:a7:c6:49:8c:4a:b8:9b:82:22:0d: 19:29:b9:90:ba:3c:2f:cd:36:af:9c:1c:59:e2:bd: 96:f7:80:14:b5:21:c3:76:cb:64:99:c3:2a:0d:1d: 30:ab:05:41:71:02:28:3b:ca:90:d3:6e:50:c6:f1: 3d:78:87:2b:6e:c8:43:63:a6:75:8b:12:6f:3e:28: ad:0c:c5:98:46:3e:7d:70:9a:a7:37:c4:6d:2d:70: 74:03:1c:66:3c:94:ce:2e:07:17:de:79:cd:96:de: 7c:69:e2:4a:4d:7e:4e:1e:86:fb:c9:4e:98:58:76: b9:18:f0:9d:06:5d:74:2d:6c:05:a8:25:59:fe:48: ca:21:6c:5c:08:50:d0:40:f4:22:6f:7b:35:8b:8f: b9:63:69:4f:26:51:e3:28:2d:14:3b:7a:4d:f2:1e: 0b:39:92:07:a3:29:5d:a0:43:40:49:87:38:c7:83: e9:20:7f:d4:9a:fa:a8:41:03:33:78:88:e3:42:32: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DB:3C:7E:7A:E2:50:BD:6A:9B:1A:B9:1D:32:49:49:C0:64:81:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/380e9ba3-ebe2-39db-bb50-176c4fc87849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.crl X509v3 Authority Key Identifier: keyid:AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer sbgp-ipAddrBlock: critical IPv4: 23.171.232.0/24 IPv6: 2602:f97d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:aa:c1:d1:ce:42:bd:be:c2:28:cc:b4:5a:ed:ed:f5:3a:7c: 15:b8:45:5c:ed:5c:79:f9:b1:eb:a5:eb:9d:63:c5:77:ae:85: 3b:db:38:ea:05:7f:a6:90:ef:41:7e:0c:ce:82:4b:8a:6b:af: 71:a1:06:c8:72:28:da:3a:0b:b7:4a:55:b1:79:89:8b:db:a0: 96:0c:7f:22:73:cd:3d:79:63:37:dd:62:50:85:ee:51:70:a3: 96:f1:a1:43:4a:0c:a8:55:a7:ed:0a:f2:f8:03:c3:7f:48:50: b7:47:ac:4b:6a:53:d3:2c:43:89:8f:db:18:55:55:92:d0:77: 94:7f:4d:2a:6c:15:f0:4f:9c:79:15:27:ad:9a:9d:6f:ee:03: 6c:ef:6b:89:48:2c:99:da:27:97:db:ba:fc:f2:87:16:fe:ca: 7d:e7:7b:d1:02:bb:1b:c9:de:84:8c:5a:2b:6f:ac:14:63:cd: 93:ca:e6:45:ec:8b:8c:6c:80:ba:7f:12:05:3a:2f:fa:b0:8d: ca:bd:3a:d2:b5:6c:07:17:6d:f3:3f:5d:63:ef:15:c2:d7:6f: a0:5f:67:ea:3c:42:a3:32:c1:61:cf:80:fb:b9:8b:f3:d6:35: 16:75:b9:24:b3:f5:4a:98:3f:14:4f:77:e1:6c:33:60:08:15: 0e:ee:d1:00 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeTVz7tOBt9UZmK7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ODU2ZjMtZmM3YS00NzFiLTkxNjgtMGM1MWJlNDVi NjcwMB4XDTI0MTAxNzIxNTkzNFoXDTI1MDExNTIyNTkzNFowLzEtMCsGA1UEAxMk Y2I1NzViMjUtNzg4Ni00MmJmLWIxODUtZjUxYmJlMTIwZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQRcl/9f7Qx0NbXb6C1zoRQh6pDI9uGKipAg JkZmXZOFbR/uqSRSZU40LXpmEpfxetnRAsYgM/PX5Q+Rnp/cUKfGSYxKuJuCIg0Z KbmQujwvzTavnBxZ4r2W94AUtSHDdstkmcMqDR0wqwVBcQIoO8qQ025QxvE9eIcr bshDY6Z1ixJvPiitDMWYRj59cJqnN8RtLXB0AxxmPJTOLgcX3nnNlt58aeJKTX5O Hob7yU6YWHa5GPCdBl10LWwFqCVZ/kjKIWxcCFDQQPQib3s1i4+5Y2lPJlHjKC0U O3pN8h4LOZIHoyldoENASYc4x4PpIH/UmvqoQQMzeIjjQjKlXwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFXbPH564lC9apsauR0ySUnAZIEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDc4 NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUxYmU0NWI2NzAvMzgwZTliYTMtZWJlMi0z OWRiLWJiNTAtMTc2YzRmYzg3ODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ODU2ZjMtZmM3YS00NzFiLTkx NjgtMGM1MWJlNDViNjcwLzVkNzg1NmYzLWZjN2EtNDcxYi05MTY4LTBjNTFiZTQ1 YjY3MC5jcmwwHwYDVR0jBBgwFoAUrTZnnyCo8g3iAQk1xzNzdq0jgAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDc4NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUx YmU0NWI2NzAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6voMA4E AgACMAgDBgQmAvl9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIqsHRzkK9vsIozLRa7e31OnwVuEVc7Vx5 +bHrpeudY8V3roU72zjqBX+mkO9BfgzOgkuKa69xoQbIcijaOgu3SlWxeYmL26CW DH8ic809eWM33WJQhe5RcKOW8aFDSgyoVaftCvL4A8N/SFC3R6xLalPTLEOJj9sY VVWS0HeUf00qbBXwT5x5FSetmp1v7gNs72uJSCyZ2ieX27r88ocW/sp953vRArsb yd6EjForb6wUY82TyuZF7IuMbIC6fxIFOi/6sI3KvTrStWwHF23zP11j7xXC12+g X2fqPEKjMsFhz4D7uYvz1jUWdbkks/VKmD8UT3fhbDNgCBUO7tEA -----END CERTIFICATE-----Generated at Sun Nov 24 15:58:13 2024 by rpki-client on console-ams.rpki-client.org