$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa File: 43049f14-aa13-3e5b-9852-030af82b41df.roa (raw, json) Hash identifier: vYqjpFvyDExYlpgswfyRdu+UZ0tFp3njZrl1z+Vwn6Q= Subject key identifier: 46:32:B1:C2:25:D2:1D:C7:AC:57:B3:DF:24:C7:8A:37:F1:F0:F6:D9 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F43285847E62A2538FD319B247FFE8980 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 11870 IP address blocks: 167.23.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:25:38:fd:31:9b:24:7f:fe:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=afe4ba0d-8f80-43e6-a8d2-310d17cdb531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:0e:9d:97:9d:5a:44:41:17:b0:7d:63:ff: f3:3a:1b:d1:93:5f:a1:d8:fa:1d:74:01:e3:23:09: aa:05:a6:a4:79:cf:66:90:ed:2f:ba:fe:97:73:b1: 48:95:27:4c:3b:93:0c:e5:28:2c:3c:3d:1c:c2:45: a3:3c:42:bc:29:dd:c7:35:7d:ff:2f:91:de:8e:9b: 8e:05:09:54:af:88:58:18:91:03:78:16:85:31:7e: 6d:ea:e1:17:87:4e:35:02:c8:70:77:d1:48:35:1a: 46:56:b4:b5:f3:e7:a8:b7:98:a1:4f:f5:d5:57:9c: 57:59:88:ee:5f:a7:92:54:da:c2:76:48:9e:ba:64: bb:99:e9:fa:ae:76:a5:a2:f1:06:99:49:28:dd:67: 66:4b:aa:9e:f4:71:d8:a8:e8:1e:7a:ce:fd:cf:48: fc:59:a7:61:63:55:a1:ac:3b:03:d8:30:09:5d:50: 69:25:bf:5d:32:49:2b:b1:2b:f6:f7:26:fb:1c:21: de:54:1d:90:a5:1d:71:85:81:26:da:0f:8f:dd:8a: 5a:37:aa:da:f1:ff:b4:10:d1:10:5e:b1:7b:49:63: 2e:1f:61:8a:77:6c:74:d2:da:0e:9a:85:02:fc:29: 64:99:8d:9f:ee:12:f5:4c:ad:b2:92:48:90:0d:68: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:32:B1:C2:25:D2:1D:C7:AC:57:B3:DF:24:C7:8A:37:F1:F0:F6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/43049f14-aa13-3e5b-9852-030af82b41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b8:bb:a9:a1:9b:7b:d4:c3:3e:67:ab:e0:a8:86:ca:35:bd: 1f:02:05:a0:e1:36:a2:d6:a8:97:c4:13:57:a4:9a:18:96:8d: d3:06:33:e3:4d:02:9e:55:88:57:25:1c:8f:5a:66:c5:f5:aa: 07:05:5b:d0:04:9b:f7:e0:7e:84:8c:7f:d1:d2:74:d6:db:31: b3:7e:97:23:fe:94:bc:6f:b0:9d:82:05:9e:4d:ed:fc:df:52: 81:52:ba:df:40:b3:29:e1:17:1d:0c:1d:94:30:09:32:e8:64: 05:f3:45:7f:91:a2:87:c5:94:29:2a:20:1f:30:22:78:1a:da: 6c:ee:49:b8:ed:33:ad:a3:19:24:ba:8a:96:8c:f7:c8:16:7d: a5:10:47:ee:95:0e:ca:87:5d:64:33:b3:8f:ae:b8:67:eb:0f: e5:36:7f:9c:19:0f:b0:1e:6e:24:7f:ab:fb:17:b4:b7:15:34: f0:c3:88:f2:17:cb:79:9e:41:b4:23:ee:7c:e8:b8:2d:d7:e0: bc:c9:41:f3:c9:07:19:71:b0:7a:04:90:44:83:82:c7:31:6f: ac:9a:ad:08:f6:95:e9:5c:ec:3a:0a:9d:24:e7:d7:70:34:90: 79:45:83:d8:83:c9:41:13:dd:87:be:f9:38:e4:3a:ff:48:84: d8:6a:71:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKiU4/TGbJH/+iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YWZlNGJhMGQtOGY4MC00M2U2LWE4ZDItMzEwZDE3Y2RiNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H0OnZedWkRBF7B9Y//zOhvRk1+h2PoddAHj IwmqBaakec9mkO0vuv6Xc7FIlSdMO5MM5SgsPD0cwkWjPEK8Kd3HNX3/L5HejpuO BQlUr4hYGJEDeBaFMX5t6uEXh041Ashwd9FINRpGVrS18+eot5ihT/XVV5xXWYju X6eSVNrCdkieumS7men6rnalovEGmUko3WdmS6qe9HHYqOgees79z0j8WadhY1Wh rDsD2DAJXVBpJb9dMkkrsSv29yb7HCHeVB2QpR1xhYEm2g+P3YpaN6ra8f+0ENEQ XrF7SWMuH2GKd2x00toOmoUC/ClkmY2f7hL1TK2ykkiQDWgsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYyscIl0h3HrFez3yTHijfx8PbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvNDMwNDlmMTQtYWExMy0z ZTViLTk4NTItMDMwYWY4MmI0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe4u6mhm3vUwz5nq+Cohso1vR8CBaDhNqLWqJfEE1ekmhiWjdMGM+NN Ap5ViFclHI9aZsX1qgcFW9AEm/fgfoSMf9HSdNbbMbN+lyP+lLxvsJ2CBZ5N7fzf UoFSut9AsynhFx0MHZQwCTLoZAXzRX+RoofFlCkqIB8wInga2mzuSbjtM62jGSS6 ipaM98gWfaUQR+6VDsqHXWQzs4+uuGfrD+U2f5wZD7AebiR/q/sXtLcVNPDDiPIX y3meQbQj7nzouC3X4LzJQfPJBxlxsHoEkESDgscxb6yarQj2lelc7DoKnSTn13A0 kHlFg9iDyUET3Ye++TjkOv9IhNhqcYo= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:57 2024 by rpki-client on console-ams.rpki-client.org