$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa File: cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json) Hash identifier: SKew9c6RkIytlzT8XljbMfwMZ85qFpY3pa6amazPwMM= Subject key identifier: FE:A2:68:B1:AD:3B:E8:76:87:CC:CD:89:CC:F0:47:7F:ED:E2:80:C9 Certificate issuer: /CN=8deb6383-7043-43c4-b39c-395a97ee0114 Certificate serial: 010D0C9F43285847A1A67E2F8C39BE44E104D180 Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa Signing time: Wed 23 Oct 2024 01:00:32 +0000 ROA not before: Wed 23 Oct 2024 01:00:32 +0000 ROA not after: Tue 21 Jan 2025 02:00:32 +0000 asID: 13925 IP address blocks: 23.131.160.0/24 maxlen: 24 23.131.161.0/24 maxlen: 24 2620:138:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:a6:7e:2f:8c:39:be:44:e1:04:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114 Validity Not Before: Oct 23 01:00:32 2024 GMT Not After : Jan 21 02:00:32 2025 GMT Subject: CN=e9dbb957-7656-40a0-aa55-ef68169cef26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:b9:53:5e:ed:9e:ed:05:17:80:ea:c4:b5: 35:08:3d:72:f5:10:f6:42:36:76:d9:51:c2:b3:4a: f8:c9:f9:39:80:4c:2b:7c:48:83:05:31:d6:77:77: 57:5b:13:cc:2d:81:62:ad:92:4a:fb:95:e0:62:81: dc:01:5c:d9:57:1e:1e:38:8e:c3:27:cd:9f:71:93: e4:68:63:3c:93:99:53:85:6a:41:37:d9:b5:bc:57: f5:83:2a:2a:db:c6:33:fa:ee:e3:dc:f2:73:c6:24: 31:5e:1a:00:47:ef:f0:1d:38:cb:08:23:b6:58:43: 78:5f:8e:31:19:95:e9:96:2e:e6:ce:69:9f:3b:89: b8:fa:2a:35:dd:26:3e:67:6e:ff:58:df:ca:a9:3f: 2c:01:af:88:82:4d:46:5f:a8:46:bf:dc:69:cc:31: 5e:b1:f8:2b:b9:f0:96:2b:d0:21:8c:9a:1a:9a:1b: a6:ce:4e:6d:01:3a:37:b5:b4:41:97:a4:6a:fd:2f: 06:01:58:d1:68:18:20:9e:b1:36:4b:c6:bf:9e:ad: 80:ae:e3:0b:c0:ca:6f:85:e8:0f:01:ca:38:b3:5a: 7c:a7:bb:e9:91:2a:74:c3:1a:8a:e2:6a:7e:c4:cc: 7d:71:5a:6b:8d:51:62:4a:fb:3a:f4:02:2b:da:52: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A2:68:B1:AD:3B:E8:76:87:CC:CD:89:CC:F0:47:7F:ED:E2:80:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl X509v3 Authority Key Identifier: keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer sbgp-ipAddrBlock: critical IPv4: 23.131.160.0/23 IPv6: 2620:138:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a4:b2:02:27:f9:21:29:4d:ab:e1:10:0e:97:fd:1c:15:85: b4:b7:61:70:44:9d:9d:48:3e:b1:22:6a:9d:8f:84:d6:40:d0: 7f:29:4d:b7:e8:ba:8d:b3:ec:99:2e:d9:86:93:e7:b7:8b:cb: ac:42:50:8f:b7:00:c8:09:98:ee:a7:6e:97:55:70:99:a8:58: f0:a5:b7:d2:18:95:19:f0:4b:28:b6:0b:fa:5a:2e:c2:3b:96: 94:24:9d:c4:72:3a:f8:6e:9b:8e:99:fe:df:c6:01:9d:25:2c: ce:7b:42:11:45:c5:a3:1b:5d:0d:9a:b2:4c:db:45:fc:79:57: 78:89:ff:02:8d:0e:e2:04:b6:d7:80:d6:cb:b8:14:43:de:bf: 37:3f:32:b3:c2:8e:24:70:e8:34:68:6c:dd:5d:94:6a:00:5a: 4e:24:1f:1f:a0:31:e5:79:80:c4:fe:a2:60:b3:e7:dd:f0:12: 81:80:87:ae:46:5c:f5:ef:59:00:82:77:76:e4:ae:62:28:81: e6:f5:6e:4e:8c:4b:b2:1a:96:9f:40:22:28:59:bb:6e:56:a4: b9:ac:dd:1d:57:2e:ef:29:cd:5c:ff:c1:ce:0b:33:6e:71:17: 92:02:a7:5e:6f:50:2a:11:c8:b1:1e:bf:b6:cd:4d:0c:ec:b7: 8d:52:51:c4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEehpn4vjDm+ROEE0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlYjYzODMtNzA0My00M2M0LWIzOWMtMzk1YTk3ZWUw MTE0MB4XDTI0MTAyMzAxMDAzMloXDTI1MDEyMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTlkYmI5NTctNzY1Ni00MGEwLWFhNTUtZWY2ODE2OWNlZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp425U17tnu0FF4DqxLU1CD1y9RD2QjZ22VHC s0r4yfk5gEwrfEiDBTHWd3dXWxPMLYFirZJK+5XgYoHcAVzZVx4eOI7DJ82fcZPk aGM8k5lThWpBN9m1vFf1gyoq28Yz+u7j3PJzxiQxXhoAR+/wHTjLCCO2WEN4X44x GZXpli7mzmmfO4m4+io13SY+Z27/WN/KqT8sAa+Igk1GX6hGv9xpzDFesfgrufCW K9AhjJoamhumzk5tATo3tbRBl6Rq/S8GAVjRaBggnrE2S8a/nq2AruMLwMpvhegP Aco4s1p8p7vpkSp0wxqK4mp+xMx9cVprjVFiSvs69AIr2lIDZwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFP6iaLGtO+h2h8zNiczwR3/t4oDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGVi NjM4My03MDQzLTQzYzQtYjM5Yy0zOTVhOTdlZTAxMTQvY2ZhYWU1YzgtYTMyYS0z OTM3LThiMzgtMDkwOTM4MDAxMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRlYjYzODMtNzA0My00M2M0LWIz OWMtMzk1YTk3ZWUwMTE0LzhkZWI2MzgzLTcwNDMtNDNjNC1iMzljLTM5NWE5N2Vl MDExNC5jcmwwHwYDVR0jBBgwFoAU6W//RnPZ9uE0VumNjwSN0GAc6KgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGViNjM4My03MDQzLTQzYzQtYjM5Yy0zOTVh OTdlZTAxMTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF4OgMA8E AgACMAkDBwQmIAE4UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMaSyAif5ISlNq+EQDpf9HBWFtLdhcESd nUg+sSJqnY+E1kDQfylNt+i6jbPsmS7ZhpPnt4vLrEJQj7cAyAmY7qdul1VwmahY 8KW30hiVGfBLKLYL+louwjuWlCSdxHI6+G6bjpn+38YBnSUszntCEUXFoxtdDZqy TNtF/HlXeIn/Ao0O4gS214DWy7gUQ96/Nz8ys8KOJHDoNGhs3V2UagBaTiQfH6Ax 5XmAxP6iYLPn3fASgYCHrkZc9e9ZAIJ3duSuYiiB5vVuToxLshqWn0AiKFm7blak uazdHVcu7ynNXP/BzgszbnEXkgKnXm9QKhHIsR6/ts1NDOy3jVJRxA== -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org