$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: 4aKbX7au5VO0kKVA6lpgCGS+EnxS80CCHhWH1nuOgF8= Subject key identifier: A9:46:E0:8A:CE:EF:56:C9:D4:DA:D7:22:B4:57:31:BD:92:9A:0D:F2 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F432858475A7CAF15CECDE35AC4DE0820 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Fri 27 Sep 2024 13:13:55 +0000 ROA not before: Fri 27 Sep 2024 13:13:55 +0000 ROA not after: Thu 26 Dec 2024 14:13:55 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:7c:af:15:ce:cd:e3:5a:c4:de:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Sep 27 13:13:55 2024 GMT Not After : Dec 26 14:13:55 2024 GMT Subject: CN=bd1c7b43-57b8-4f68-a50b-77771875680f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:44:32:31:84:98:8c:b2:99:aa:2f:a7:68: 89:0a:f0:d2:a2:39:a2:6d:08:29:b4:a7:cf:1d:8a: b4:7d:8f:e2:f1:d1:be:4a:bc:51:cf:80:65:3a:67: d0:91:4a:51:f2:d4:97:91:3e:e6:e0:ca:82:f0:bb: ec:57:4c:bf:a1:62:8f:2e:93:8e:12:23:29:12:a2: 9a:1c:bd:63:a6:37:df:09:4e:2c:37:37:51:cd:1a: 12:36:10:74:2f:7b:33:aa:72:f0:2c:69:04:e0:d8: 43:6f:6f:ab:81:ac:5b:9e:b0:11:61:d8:f0:bb:1b: d2:59:a1:63:2b:12:1e:e6:8e:22:67:18:da:99:10: 36:c8:3e:2e:5a:a0:88:41:8c:3f:04:35:c5:39:f6: d9:9f:93:96:67:13:61:42:83:1a:f6:e9:79:dd:3c: 6c:93:75:fa:cb:2d:78:25:18:5b:03:3d:32:73:cf: 5a:f6:97:d9:e5:d2:a2:f6:b4:99:cf:bb:b6:85:0c: 4f:35:f0:df:56:37:ae:b6:77:14:03:3f:25:37:bf: d6:e3:3b:8d:69:82:9a:21:6b:72:75:91:c5:51:eb: 01:97:18:3f:a7:a0:0d:9c:64:8f:80:f3:b8:86:4c: 69:6a:e7:74:d5:5d:9f:a8:10:ac:5c:3b:c8:f9:cb: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:E0:8A:CE:EF:56:C9:D4:DA:D7:22:B4:57:31:BD:92:9A:0D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f4:f3:67:a9:ad:a4:29:c1:5d:c7:f5:70:33:ae:ed:49:78: bf:1a:ae:32:f5:b4:75:6f:a1:a2:76:ff:f4:f7:1b:fc:9b:43: 00:27:fa:88:41:e6:5b:d5:33:a3:bf:07:93:4c:63:20:ea:b7: f2:b9:1b:4e:2e:3b:25:d4:d1:25:37:1a:90:c1:83:d1:56:e9: f5:77:57:b6:8c:08:b7:e3:95:5e:79:58:89:12:62:29:e9:1e: 7e:7f:da:b4:4d:c8:25:3f:15:1b:87:0b:86:e7:1f:ea:8f:a2: fe:ab:c6:6f:86:e8:76:eb:20:f7:9d:62:06:39:de:1e:c7:50: b3:87:a9:18:39:4f:9e:b2:c8:fe:89:cd:16:14:dc:fa:10:a5: 25:a1:9b:e3:23:c8:9d:10:f7:9e:49:92:25:13:53:a3:49:ac: 9f:73:25:fd:c5:50:b4:04:60:06:60:5d:c4:0b:cc:1c:9f:3a: e6:50:76:22:ea:6d:60:d3:f1:13:db:f3:62:45:56:ac:22:49: 73:51:26:d2:92:54:6d:ad:4c:b6:75:21:5e:ce:6d:ab:dc:38: 0f:32:20:79:88:78:b7:72:99:d4:4b:e0:21:2a:37:24:a8:e4: 11:8d:55:12:36:11:e5:d5:e7:93:1c:3d:3b:f5:33:7c:2f:e3: 31:02:59:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdafK8Vzs3jWsTeCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI0MDkyNzEzMTM1NVoXDTI0MTIyNjE0MTM1NVowLzEtMCsGA1UEAxMk YmQxYzdiNDMtNTdiOC00ZjY4LWE1MGItNzc3NzE4NzU2ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWREMjGEmIyymaovp2iJCvDSojmibQgptKfP HYq0fY/i8dG+SrxRz4BlOmfQkUpR8tSXkT7m4MqC8LvsV0y/oWKPLpOOEiMpEqKa HL1jpjffCU4sNzdRzRoSNhB0L3szqnLwLGkE4NhDb2+rgaxbnrARYdjwuxvSWaFj KxIe5o4iZxjamRA2yD4uWqCIQYw/BDXFOfbZn5OWZxNhQoMa9ul53Txsk3X6yy14 JRhbAz0yc89a9pfZ5dKi9rSZz7u2hQxPNfDfVjeutncUAz8lN7/W4zuNaYKaIWty dZHFUesBlxg/p6ANnGSPgPO4hkxpaud01V2fqBCsXDvI+ctUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlG4IrO71bJ1NrXIrRXMb2Smg3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv082epraQpwV3H9XAzru1JeL8arjL1tHVvoaJ2//T3G/ybQwAn+ohB 5lvVM6O/B5NMYyDqt/K5G04uOyXU0SU3GpDBg9FW6fV3V7aMCLfjlV55WIkSYinp Hn5/2rRNyCU/FRuHC4bnH+qPov6rxm+G6HbrIPedYgY53h7HULOHqRg5T56yyP6J zRYU3PoQpSWhm+MjyJ0Q955JkiUTU6NJrJ9zJf3FULQEYAZgXcQLzByfOuZQdiLq bWDT8RPb82JFVqwiSXNRJtKSVG2tTLZ1IV7ObavcOA8yIHmIeLdymdRL4CEqNySo 5BGNVRI2EeXV55McPTv1M3wv4zECWQc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org