$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa File: 7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa (raw, json) Hash identifier: KzpT83TBv1kbBSg1NMAacgsxeU2SUdal04GIunM4vVo= Subject key identifier: D2:24:63:36:B8:98:14:95:DC:CC:CF:D2:7B:6B:1F:F9:48:4A:F5:23 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA2FD2DEBA7B9A31F0080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa Signing time: Thu 24 Oct 2024 18:03:01 +0000 ROA not before: Thu 24 Oct 2024 18:03:01 +0000 ROA not after: Wed 22 Jan 2025 19:03:01 +0000 asID: 401152 IP address blocks: 23.27.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a2:fd:2d:eb:a7:b9:a3:1f:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:01 2024 GMT Not After : Jan 22 19:03:01 2025 GMT Subject: CN=2a909ccd-0dcf-453e-93c9-f2813d437650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:b3:1b:58:d0:d0:0d:22:e5:03:3f:d7:cb: 35:ce:c1:ba:e2:8f:01:82:c5:7a:c0:6a:83:43:0c: 58:cb:97:02:fc:2c:64:81:a1:12:25:ac:75:07:fd: b8:f9:65:ce:43:14:0a:08:bd:e6:bd:55:ea:f5:31: 06:d0:f3:e8:0b:51:96:d4:cc:b8:cf:03:12:6e:6b: e5:43:0f:af:1a:31:b5:3c:a7:85:5e:57:d7:62:68: 3a:d9:dd:14:84:d2:1d:e7:7e:48:03:2d:3e:bf:d7: dc:20:59:14:3f:33:6c:59:5e:0d:e2:c9:24:b5:ac: 53:a3:8f:14:43:99:56:8e:a7:0a:4b:e6:df:30:28: f8:cc:ba:bd:d2:fd:cf:58:96:c3:eb:a7:85:8f:4f: 03:dd:5b:56:d7:63:2d:eb:fa:ee:c2:c3:ba:f5:5a: ee:cc:57:03:47:b6:c4:b2:43:40:18:e6:5f:1e:2a: 11:07:bc:b4:54:39:ba:58:ce:6a:9e:09:94:72:84: 30:07:29:b6:26:30:07:7a:cf:99:a0:f9:c6:f5:fd: 5c:59:9d:f5:4a:e5:1a:17:13:d2:01:99:00:29:70: 28:ea:a9:70:d1:2d:b3:55:f3:74:fa:16:c1:ef:86: ee:c5:4a:f0:91:6f:49:a4:a1:28:65:b5:ce:28:0d: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:63:36:B8:98:14:95:DC:CC:CF:D2:7B:6B:1F:F9:48:4A:F5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cc:5a:a6:56:53:98:3b:86:47:17:66:30:3c:ec:31:92:a3: 33:0a:a0:10:04:7b:f3:60:5f:83:4f:34:1e:4e:e5:bb:c8:77: 03:12:73:26:53:d4:b7:9c:e4:c4:fb:31:15:23:91:b2:74:61: a9:28:5f:58:c7:fa:30:ad:2e:f9:85:8a:48:1a:ae:2d:2a:8e: e8:1c:80:5c:20:24:6c:b4:3c:e8:d0:95:03:99:0e:d5:ea:76: 86:52:24:a9:c8:18:b5:70:ee:56:72:9c:b4:66:33:92:ae:db: 46:21:f0:db:60:29:fa:68:43:57:90:d1:1d:59:00:e6:ad:e1: 54:1f:6f:1a:cb:55:c0:39:fe:8b:ea:0e:55:86:5f:03:d3:e2: 7e:c0:08:5c:1d:d0:0f:1a:c5:ff:48:12:f4:d7:94:aa:b0:1b: 8b:ae:31:14:12:d2:6d:06:dc:2a:06:7e:ac:f1:f3:fb:db:d6: 3d:bf:ef:5c:fe:dc:7f:8e:55:e3:bc:51:f3:51:a5:3f:c6:bf: c3:ff:56:81:4a:0b:77:e8:37:5e:ee:79:27:7c:3b:81:99:b3: aa:ca:43:42:d4:e5:03:0e:7b:dc:9a:41:c4:1c:f7:49:09:d9: 6f:1d:b7:aa:ee:ae:2c:97:cb:a7:68:f7:ec:f3:64:b9:8f:a7: db:d7:18:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKL9LeunuaMfAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwMVoXDTI1MDEyMjE5MDMwMVowLzEtMCsGA1UEAxMk MmE5MDljY2QtMGRjZi00NTNlLTkzYzktZjI4MTNkNDM3NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqzG1jQ0A0i5QM/18s1zsG64o8BgsV6wGqD QwxYy5cC/CxkgaESJax1B/24+WXOQxQKCL3mvVXq9TEG0PPoC1GW1My4zwMSbmvl Qw+vGjG1PKeFXlfXYmg62d0UhNId535IAy0+v9fcIFkUPzNsWV4N4skktaxTo48U Q5lWjqcKS+bfMCj4zLq90v3PWJbD66eFj08D3VtW12Mt6/ruwsO69VruzFcDR7bE skNAGOZfHioRB7y0VDm6WM5qngmUcoQwBym2JjAHes+ZoPnG9f1cWZ31SuUaFxPS AZkAKXAo6qlw0S2zVfN0+hbB74buxUrwkW9JpKEoZbXOKA3SQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIkYza4mBSV3MzP0ntrH/lISvUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2NlYWY3ZTMtMWY1MC0z MmMwLTg2M2EtNTUwMGY4M2Y4NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjMWqZWU5g7hkcXZjA87DGSozMKoBAEe/NgX4NPNB5O5bvIdwMScyZT 1Lec5MT7MRUjkbJ0YakoX1jH+jCtLvmFikgari0qjugcgFwgJGy0POjQlQOZDtXq doZSJKnIGLVw7lZynLRmM5Ku20Yh8NtgKfpoQ1eQ0R1ZAOat4VQfbxrLVcA5/ovq DlWGXwPT4n7ACFwd0A8axf9IEvTXlKqwG4uuMRQS0m0G3CoGfqzx8/vb1j2/71z+ 3H+OVeO8UfNRpT/Gv8P/VoFKC3foN17ueSd8O4GZs6rKQ0LU5QMOe9yaQcQc90kJ 2W8dt6ruriyXy6do9+zzZLmPp9vXGKo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:44 2024 by rpki-client on console-fra.rpki-client.org