$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa File: da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa (raw, json) Hash identifier: jDZaev0Iq5VwP9tojvRmSA+l+cdzbMPubh1mH2zaY0Q= Subject key identifier: A0:D9:C2:38:1C:81:EC:91:27:AE:49:6F:B8:D7:A5:C1:C9:1F:CF:CD Certificate issuer: /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d Certificate serial: 010D0C9F4328584812D53890278093DF33738140 Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 400932 IP address blocks: 23.146.96.0/24 maxlen: 24 2602:fe4d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:38:90:27:80:93:df:33:73:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=49594afd-e386-462c-8083-5c156ea7e4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:b9:3d:60:b4:9b:45:a6:ff:e6:58:0e:dc: 31:39:35:7e:e2:35:21:b5:e9:13:71:61:37:dd:7b: f2:fd:ab:da:d5:6a:f4:02:fa:df:ff:8c:2b:5a:41: e3:dc:9b:17:78:82:9b:a6:66:10:a4:d5:12:c1:7e: 76:de:03:d8:27:e8:2e:f3:28:c6:b9:8b:f9:69:52: 9d:8e:f9:12:29:d5:c0:ad:1f:74:0f:c7:e4:eb:9d: 0e:ce:0d:9b:c1:fd:41:33:aa:ac:fe:1f:02:16:da: 42:47:dd:e9:b9:e1:9e:4c:1c:a1:88:0a:88:1f:d0: 56:97:15:69:31:7f:6e:4b:ba:75:cc:12:86:b2:80: 2a:a3:2c:28:e6:41:41:b4:c3:f6:67:b4:ca:9b:14: 04:99:cb:61:c5:77:67:02:21:20:be:9b:54:6e:41: ab:a1:3b:10:61:4c:c8:4a:b3:33:17:4d:19:d2:3d: 5d:e9:99:6e:a6:14:dc:73:4d:96:af:a8:ec:33:9a: 5f:50:1b:3d:e6:dd:1f:fb:ef:b4:04:ad:87:ef:69: 15:18:54:87:9e:18:64:50:9a:6a:12:b3:1d:e1:22: 99:92:b2:96:56:5a:1e:06:6e:01:c9:01:ff:2c:07: e0:6f:75:c4:73:1f:6a:bc:16:11:36:1d:23:81:0d: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D9:C2:38:1C:81:EC:91:27:AE:49:6F:B8:D7:A5:C1:C9:1F:CF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/da760c50-d4e0-3bf6-9d1a-74873a53d6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl X509v3 Authority Key Identifier: keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer sbgp-ipAddrBlock: critical IPv4: 23.146.96.0/24 IPv6: 2602:fe4d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:90:89:f5:44:d4:53:64:df:ae:ca:44:41:d1:13:55:30:d9: 2e:15:58:7f:a7:74:35:2b:6b:35:3d:80:4d:44:f8:ba:e5:87: 3b:88:06:22:2c:c9:1c:05:dc:dd:73:9e:54:80:7f:b8:89:88: 50:cc:bb:41:96:19:f2:3e:f7:85:41:cd:bc:0e:0a:0c:ba:af: c9:7d:e7:a0:f3:ce:d3:9c:28:50:c2:0d:9c:6c:3b:5c:16:c7: fb:0d:3a:a9:36:51:e2:1b:dc:06:bb:13:b3:68:59:da:83:98: 46:59:33:f6:fb:c6:25:e7:9d:35:bf:89:22:88:3a:cf:e3:e4: 63:5c:19:61:dc:da:8e:c0:a9:dc:7e:92:85:c4:db:04:3c:fd: 78:71:17:04:cc:04:87:57:9c:1f:b3:f6:3c:4a:d8:bb:f3:ed: 01:fe:67:90:dd:c1:7f:48:f6:26:cf:4d:bd:70:ea:48:63:79: 93:6d:be:de:1c:0f:b8:60:fe:a8:20:30:bd:4d:01:09:fb:73: 4e:91:9d:0d:a6:05:c7:06:9e:51:d1:37:29:19:b2:84:5e:57: 1c:3b:96:28:87:f7:b8:39:3f:3a:e8:b1:ae:0a:3f:3e:8f:5d: 9f:7b:c8:8c:6b:a1:95:0f:03:61:6b:be:bc:de:20:58:93:fb: ce:bd:0a:5d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEgS1TiQJ4CT3zNzgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxZmFkNzQtZjEzNS00Mjc5LTkzZDUtZmU5YWE4MThm YzZkMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk NDk1OTRhZmQtZTM4Ni00NjJjLTgwODMtNWMxNTZlYTdlNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcm5PWC0m0Wm/+ZYDtwxOTV+4jUhtekTcWE3 3Xvy/ava1Wr0Avrf/4wrWkHj3JsXeIKbpmYQpNUSwX523gPYJ+gu8yjGuYv5aVKd jvkSKdXArR90D8fk650Ozg2bwf1BM6qs/h8CFtpCR93pueGeTByhiAqIH9BWlxVp MX9uS7p1zBKGsoAqoywo5kFBtMP2Z7TKmxQEmcthxXdnAiEgvptUbkGroTsQYUzI SrMzF00Z0j1d6ZluphTcc02Wr6jsM5pfUBs95t0f+++0BK2H72kVGFSHnhhkUJpq ErMd4SKZkrKWVloeBm4ByQH/LAfgb3XEcx9qvBYRNh0jgQ0B+QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKDZwjgcgeyRJ65Jb7jXpcHJH8/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YjFm YWQ3NC1mMTM1LTQyNzktOTNkNS1mZTlhYTgxOGZjNmQvZGE3NjBjNTAtZDRlMC0z YmY2LTlkMWEtNzQ4NzNhNTNkNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2IxZmFkNzQtZjEzNS00Mjc5LTkz ZDUtZmU5YWE4MThmYzZkLzdiMWZhZDc0LWYxMzUtNDI3OS05M2Q1LWZlOWFhODE4 ZmM2ZC5jcmwwHwYDVR0jBBgwFoAUygU1ggjVDdFz8jbJojYNaPAtzDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YjFmYWQ3NC1mMTM1LTQyNzktOTNkNS1mZTlh YTgxOGZjNmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5JgMA4E AgACMAgDBgQmAv5NADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZkIn1RNRTZN+uykRB0RNVMNkuFVh/p3Q1 K2s1PYBNRPi65Yc7iAYiLMkcBdzdc55UgH+4iYhQzLtBlhnyPveFQc28DgoMuq/J feeg887TnChQwg2cbDtcFsf7DTqpNlHiG9wGuxOzaFnag5hGWTP2+8Yl5501v4ki iDrP4+RjXBlh3NqOwKncfpKFxNsEPP14cRcEzASHV5wfs/Y8Sti78+0B/meQ3cF/ SPYmz029cOpIY3mTbb7eHA+4YP6oIDC9TQEJ+3NOkZ0NpgXHBp5R0TcpGbKEXlcc O5Yoh/e4OT866LGuCj8+j12fe8iMa6GVDwNha7683iBYk/vOvQpd -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:38 2025 by rpki-client