$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa File: d79abeda-0936-3a13-9b49-693cf7dce834.roa (raw, json) Hash identifier: Cfz1is3IgFUPFZhfLWai9UcA/bSLR7cBd2n3p2e7j+k= Subject key identifier: 02:40:07:D4:78:62:1E:A3:20:D2:73:0D:F8:5A:6B:56:5A:68:8C:F1 Certificate issuer: /CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Certificate serial: 010D0C9F43285847A4712D135AED39ECF766DA12 Authority key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 22679 IP address blocks: 23.172.152.0/24 maxlen: 24 2602:f971::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:2d:13:5a:ed:39:ec:f7:66:da:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=9a401a0e-6375-4345-9af0-5050ea4976b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:e4:9a:8d:81:5f:fc:a6:57:f8:44:24:be: 9d:27:27:0f:13:bf:f0:dd:15:9c:43:c4:51:b3:f7: 5b:04:c1:2a:56:a3:9f:64:bf:6d:50:b2:d9:c2:e2: 2e:80:a4:b0:09:e8:f1:04:59:f4:10:64:a4:80:68: 30:c1:08:ab:8c:41:3c:a6:50:d3:08:3e:fa:ae:68: 89:14:a0:a3:dd:a2:f4:7d:50:83:c5:c4:16:01:53: 30:4e:d9:89:57:40:9f:54:49:49:c6:8c:9e:cb:11: 24:49:3f:bb:85:1d:35:b7:66:da:98:d6:76:fb:ed: 37:09:db:59:b1:ed:8b:28:43:ae:5c:48:6b:5f:b5: 1f:fd:82:27:67:33:62:a4:12:2f:48:43:b4:bf:0c: c1:b1:d4:24:b0:c0:3f:d5:e4:92:f1:7e:aa:ae:35: 24:99:b5:d3:44:5a:1d:ec:9c:bb:f8:1f:fa:70:07: 76:5d:48:fa:59:00:9a:7b:3d:ae:d2:51:39:17:3c: d2:85:e2:a0:c5:f6:82:9b:f6:f6:f2:77:71:26:0a: f7:65:20:89:51:5e:14:53:d7:93:d2:7c:48:71:bb: 88:f5:e9:ef:8d:97:57:70:36:01:a2:61:28:f5:0e: 21:cc:75:01:e6:9c:5a:27:24:9a:b1:33:7e:df:9d: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:40:07:D4:78:62:1E:A3:20:D2:73:0D:F8:5A:6B:56:5A:68:8C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl X509v3 Authority Key Identifier: keyid:DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:62:6e:11:5e:c0:ef:a2:73:72:b7:58:95:12:67:1d:72:e7: bd:92:9b:21:a5:90:8c:bf:57:57:0a:28:e1:4e:36:7c:bc:49: 3c:42:ed:df:f6:5b:23:d5:7e:45:10:2e:0f:ed:2e:af:ec:8b: 8d:e8:3e:42:e1:dc:bd:96:b0:46:06:2f:8b:78:62:95:9b:3f: ec:d3:36:d2:3b:c2:bd:9a:c7:2d:24:74:c0:8a:ee:b9:0b:fb: 3f:f2:ea:d3:f5:53:55:f2:12:0a:f5:bc:df:6a:6a:08:9b:0b: b2:f5:e1:d8:97:9d:fb:95:21:1e:ac:0e:db:7e:d7:48:01:30: 62:12:d9:8e:e0:e8:04:f3:80:b7:d9:67:aa:80:25:77:80:b8: 62:b6:e3:0d:fb:bd:c4:0d:b9:c8:da:34:f8:35:21:0c:2c:b0: e0:e6:5c:a2:7b:61:df:2f:03:b9:55:54:c6:65:9f:2e:71:6d: 6a:ee:aa:61:de:76:a1:f7:b1:1d:66:7d:e6:2b:d9:55:a3:17: 91:27:90:5f:58:aa:46:31:4d:d7:a6:2e:6d:cc:f8:e1:09:d4: cf:92:39:99:b2:24:7e:01:ed:5b:16:e1:fb:42:80:36:44:93: 78:44:d4:73:e8:01:08:80:56:42:80:27:c1:1b:c3:49:cb:61: d0:63:42:62 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEekcS0TWu057Pdm2hIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3 MmE1MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk OWE0MDFhMGUtNjM3NS00MzQ1LTlhZjAtNTA1MGVhNDk3NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhejkmo2BX/ymV/hEJL6dJycPE7/w3RWcQ8RR s/dbBMEqVqOfZL9tULLZwuIugKSwCejxBFn0EGSkgGgwwQirjEE8plDTCD76rmiJ FKCj3aL0fVCDxcQWAVMwTtmJV0CfVElJxoyeyxEkST+7hR01t2bamNZ2++03CdtZ se2LKEOuXEhrX7Uf/YInZzNipBIvSEO0vwzBsdQksMA/1eSS8X6qrjUkmbXTRFod 7Jy7+B/6cAd2XUj6WQCaez2u0lE5FzzSheKgxfaCm/b28ndxJgr3ZSCJUV4UU9eT 0nxIcbuI9envjZdXcDYBomEo9Q4hzHUB5pxaJySasTN+352HaQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAJAB9R4Yh6jINJzDfhaa1ZaaIzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzFi MjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvZDc5YWJlZGEtMDkzNi0z YTEzLTliNDktNjkzY2Y3ZGNlODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmMxYjIyYTUtZjVlMi00MGQxLTg4 MjctYTBjZjhiODU3MmE1L2JjMWIyMmE1LWY1ZTItNDBkMS04ODI3LWEwY2Y4Yjg1 NzJhNS5jcmwwHwYDVR0jBBgwFoAU3evDgXW+j7IrQNewmG/mTwVGOFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNm OGI4NTcyYTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6yYMA4E AgACMAgDBgQmAvlxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNYm4RXsDvonNyt1iVEmcdcue9kpshpZCM v1dXCijhTjZ8vEk8Qu3f9lsj1X5FEC4P7S6v7IuN6D5C4dy9lrBGBi+LeGKVmz/s 0zbSO8K9msctJHTAiu65C/s/8urT9VNV8hIK9bzfamoImwuy9eHYl537lSEerA7b ftdIATBiEtmO4OgE84C32WeqgCV3gLhituMN+73EDbnI2jT4NSEMLLDg5lyie2Hf LwO5VVTGZZ8ucW1q7qph3nah97EdZn3mK9lVoxeRJ5BfWKpGMU3Xpi5tzPjhCdTP kjmZsiR+Ae1bFuH7QoA2RJN4RNRz6AEIgFZCgCfBG8NJy2HQY0Ji -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:57 2024 by rpki-client on console-fra.rpki-client.org