$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/1a48433a-f581-32e3-bc9a-2cd0baaf4850.roa File: 1a48433a-f581-32e3-bc9a-2cd0baaf4850.roa (raw, json) Hash identifier: TjC7kb571qH5NcZnPFx03HAkFwcMEGhbSuiqFesq2L4= Subject key identifier: F8:57:43:CF:EF:4E:5E:E5:00:C2:D7:AD:32:BC:A4:D1:90:BB:F4:C8 Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F43285847A73BE972CB940557561A1300 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/1a48433a-f581-32e3-bc9a-2cd0baaf4850.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 13737 IP address blocks: 23.172.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e9:72:cb:94:05:57:56:1a:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=08631da3-13b3-4b32-9340-8fcb03bc7a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8c:83:a3:3b:c3:af:e8:1e:08:13:37:b9:85: 82:c1:6b:34:e8:02:ee:6f:e3:f3:a5:89:40:d8:0d: a6:54:cd:36:d6:fd:c0:84:12:49:44:f0:ae:1a:c0: 1a:63:fb:14:4b:26:dd:6b:4b:77:bc:bc:6a:61:d2: d0:6b:92:59:ac:40:c9:4f:ab:a1:68:90:27:25:96: 36:53:69:c5:13:92:91:69:49:3c:5c:16:7a:69:15: 84:f9:ea:15:98:14:80:b8:2f:05:3f:c1:8d:e4:e5: 1c:28:d3:79:24:2c:a1:62:45:fc:dc:11:9b:01:7f: ac:25:8c:dc:a1:f0:72:bd:83:09:cc:29:bb:95:fb: 74:cc:7f:c0:b5:d7:05:d4:03:e6:22:14:f5:80:c1: 4d:e7:dc:23:22:52:0c:d6:ea:d1:50:08:e8:0d:73: 41:de:42:46:f4:a6:7e:56:84:82:3c:4a:97:35:23: d4:2a:6d:6d:67:31:01:d3:2d:b3:a8:38:2f:0a:07: de:92:62:6a:b4:b5:6c:6c:e8:36:99:64:9e:90:c0: 37:4d:0b:89:f8:fd:6f:cf:92:02:2a:0b:12:23:f1: a7:1c:5a:a2:88:40:f5:2f:58:70:1e:8e:ae:a7:9d: 6e:55:3c:51:13:49:73:78:f2:64:54:d2:9f:dd:52: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:43:CF:EF:4E:5E:E5:00:C2:D7:AD:32:BC:A4:D1:90:BB:F4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/1a48433a-f581-32e3-bc9a-2cd0baaf4850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv4: 23.172.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7c:95:1c:47:55:08:c5:48:75:6c:3e:4d:81:26:05:7f:f1: 20:9b:8f:b9:3c:07:cd:4b:64:05:67:43:3a:73:9a:d6:38:b5: 9e:4d:05:ee:54:59:dd:75:47:06:12:ae:a0:b1:d8:0f:38:ad: a0:14:5d:2f:23:7e:04:e3:6f:7c:63:d7:6e:87:c6:0b:db:85: 7f:f1:89:6f:b1:3a:ba:75:85:fc:25:0d:7b:43:97:1f:ae:19: 58:f0:1e:dc:3e:ce:aa:3d:4e:8a:52:d3:04:0d:df:34:d3:92: 3f:fd:25:82:e7:85:83:09:20:b0:1e:dd:4f:70:d2:67:48:11: f7:85:5d:ee:0e:6d:2c:74:66:9c:f5:a5:d1:5b:b8:53:67:f5: f3:c2:51:1d:65:28:52:26:9a:c6:9b:50:ca:ec:76:4a:ce:1d: ac:8c:e4:14:d6:c7:1d:c9:89:b5:9b:d7:2c:9b:1a:32:f0:41: 07:83:9b:b0:80:bf:92:a1:1f:63:a5:c8:47:11:9e:51:8b:e8: 51:0e:c9:79:c7:c4:87:13:fa:c5:f0:01:84:1e:92:b0:f8:2b: 74:1b:62:dd:bd:2b:3b:09:ec:40:4a:d8:db:cc:94:14:a3:ce: 44:50:8a:03:12:3f:21:07:bb:2e:e0:a4:38:8d:a8:52:41:86: c8:c3:6f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+lyy5QFV1YaEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDg2MzFkYTMtMTNiMy00YjMyLTkzNDAtOGZjYjAzYmM3YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IyDozvDr+geCBM3uYWCwWs06ALub+PzpYlA 2A2mVM021v3AhBJJRPCuGsAaY/sUSybda0t3vLxqYdLQa5JZrEDJT6uhaJAnJZY2 U2nFE5KRaUk8XBZ6aRWE+eoVmBSAuC8FP8GN5OUcKNN5JCyhYkX83BGbAX+sJYzc ofByvYMJzCm7lft0zH/AtdcF1APmIhT1gMFN59wjIlIM1urRUAjoDXNB3kJG9KZ+ VoSCPEqXNSPUKm1tZzEB0y2zqDgvCgfekmJqtLVsbOg2mWSekMA3TQuJ+P1vz5IC KgsSI/GnHFqiiED1L1hwHo6up51uVTxRE0lzePJkVNKf3VK+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhXQ8/vTl7lAMLXrTK8pNGQu/TIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvMWE0ODQzM2EtZjU4MS0z MmUzLWJjOWEtMmNkMGJhYWY0ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF8lRxHVQjFSHVsPk2BJgV/8SCbj7k8B81LZAVnQzpzmtY4tZ5NBe5U Wd11RwYSrqCx2A84raAUXS8jfgTjb3xj126HxgvbhX/xiW+xOrp1hfwlDXtDlx+u GVjwHtw+zqo9TopS0wQN3zTTkj/9JYLnhYMJILAe3U9w0mdIEfeFXe4ObSx0Zpz1 pdFbuFNn9fPCUR1lKFImmsabUMrsdkrOHayM5BTWxx3JibWb1yybGjLwQQeDm7CA v5KhH2OlyEcRnlGL6FEOyXnHxIcT+sXwAYQekrD4K3QbYt29KzsJ7EBK2NvMlBSj zkRQigMSPyEHuy7gpDiNqFJBhsjDbwQ= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org