$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa File: 4c7be311-6f85-3b93-8242-963a4e63a1ab.roa (raw, json) Hash identifier: HIHaDer0fiMgs8noh2iZLyboVXqmNKeYVcUmqjChbUI= Subject key identifier: 33:09:32:CC:DD:8D:6C:94:C1:C8:39:D2:96:F8:79:5D:FC:FC:10:A7 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F43285847DE1C2780524364B877545400 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa Signing time: Wed 13 Nov 2024 16:46:08 +0000 ROA not before: Wed 13 Nov 2024 16:46:08 +0000 ROA not after: Tue 11 Feb 2025 16:46:08 +0000 asID: 32595 IP address blocks: 23.172.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:de:1c:27:80:52:43:64:b8:77:54:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Nov 13 16:46:08 2024 GMT Not After : Feb 11 16:46:08 2025 GMT Subject: CN=f4a2700e-87f1-4caa-b909-13314bcedd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:31:09:bc:4d:9d:5c:49:2e:49:93:fd:65: aa:81:4f:0b:e4:6b:81:c1:b0:60:bd:55:3c:6b:7f: 5c:16:e4:e4:c5:11:dd:9a:9f:69:14:de:8a:8b:76: c6:84:64:82:a5:5a:0e:c5:5c:fe:10:1e:15:20:02: 4d:d2:34:0f:ed:f2:29:fa:87:4c:bc:06:bd:ce:26: 6e:2b:50:7c:05:8c:34:8b:a1:82:78:91:5b:f4:7e: 74:7f:19:a6:52:c5:04:da:33:8d:ca:ee:9a:d8:f3: 4b:eb:3d:b7:e8:00:e2:64:58:4a:37:8b:de:7f:f2: 84:48:96:b3:6d:f9:6b:0c:03:1d:8a:cd:70:6d:1b: 58:7d:c0:f5:01:2e:2b:74:f7:9c:ef:32:b7:43:cf: e1:3a:31:44:a0:88:55:aa:b1:4e:8e:fd:08:4f:90: 6b:20:6d:04:54:07:ab:04:18:dc:41:6e:ab:8b:e3: 7a:7f:01:6f:39:28:b8:78:43:66:c3:93:65:f1:e3: 03:fa:82:66:e0:06:32:f1:f2:e4:c6:f0:b8:8a:d7: 9c:8e:0f:99:f3:be:a6:b9:f1:f0:85:ae:ba:94:aa: 95:26:89:46:23:be:83:bd:b8:f3:0a:16:10:57:20: c0:f6:d3:08:71:f3:b1:64:ee:df:90:f8:0c:7d:f9: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:09:32:CC:DD:8D:6C:94:C1:C8:39:D2:96:F8:79:5D:FC:FC:10:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:56:c3:c7:1f:6e:96:bc:b8:79:22:3b:22:3c:36:2b:5d:1f: 9e:26:54:e6:9f:b1:32:fd:c7:11:41:2e:95:cb:68:99:7b:36: 6e:02:3c:a3:6c:55:14:43:a2:9c:19:db:d6:8e:c3:9f:43:7e: f8:7e:43:ab:5d:96:d4:8f:3f:92:88:55:8f:96:f9:44:9f:30: f5:0c:f5:db:19:26:0e:fd:3d:74:f4:c7:7a:88:1d:2f:6f:78: a2:4d:62:79:39:d4:3e:86:5c:5a:9e:1b:50:e1:fb:be:94:c1: 61:46:ee:8c:80:97:b1:ce:86:d5:35:aa:88:83:3b:13:47:92: 5e:c6:78:19:1b:7c:92:97:05:d8:f4:27:10:f3:4a:9a:b9:ca: 01:78:99:be:2a:43:5a:ee:5e:c7:a5:5c:38:aa:09:00:c7:20: a4:8c:8b:2b:d6:32:72:f7:52:17:e9:35:71:81:72:ab:4e:4b: 3d:ed:46:3a:6c:43:09:04:f3:96:78:96:5c:00:5b:cd:ff:16: 70:f8:87:7b:fb:79:a1:cf:98:be:d7:c9:2d:ef:50:0f:e1:2b: e9:2c:af:c9:ce:a7:55:ee:0e:53:d3:93:a2:a0:b2:93:a7:1c: 05:de:bc:d4:83:01:1c:7a:5c:54:8a:33:86:9a:5f:d7:b7:26: 1b:22:1a:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfeHCeAUkNkuHdUVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI0MTExMzE2NDYwOFoXDTI1MDIxMTE2NDYwOFowLzEtMCsGA1UEAxMk ZjRhMjcwMGUtODdmMS00Y2FhLWI5MDktMTMzMTRiY2VkZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j0xCbxNnVxJLkmT/WWqgU8L5GuBwbBgvVU8 a39cFuTkxRHdmp9pFN6Ki3bGhGSCpVoOxVz+EB4VIAJN0jQP7fIp+odMvAa9ziZu K1B8BYw0i6GCeJFb9H50fxmmUsUE2jONyu6a2PNL6z236ADiZFhKN4vef/KESJaz bflrDAMdis1wbRtYfcD1AS4rdPec7zK3Q8/hOjFEoIhVqrFOjv0IT5BrIG0EVAer BBjcQW6ri+N6fwFvOSi4eENmw5Nl8eMD+oJm4AYy8fLkxvC4itecjg+Z876mufHw ha66lKqVJolGI76DvbjzChYQVyDA9tMIcfOxZO7fkPgMfflzkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMJMszdjWyUwcg50pb4eV38/BCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGM3YmUzMTEtNmY4NS0z YjkzLTgyNDItOTYzYTRlNjNhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRWw8cfbpa8uHkiOyI8NitdH54mVOafsTL9xxFBLpXLaJl7Nm4CPKNs VRRDopwZ29aOw59Dfvh+Q6tdltSPP5KIVY+W+USfMPUM9dsZJg79PXT0x3qIHS9v eKJNYnk51D6GXFqeG1Dh+76UwWFG7oyAl7HOhtU1qoiDOxNHkl7GeBkbfJKXBdj0 JxDzSpq5ygF4mb4qQ1ruXselXDiqCQDHIKSMiyvWMnL3UhfpNXGBcqtOSz3tRjps QwkE85Z4llwAW83/FnD4h3v7eaHPmL7XyS3vUA/hK+ksr8nOp1XuDlPTk6KgspOn HAXevNSDARx6XFSKM4aaX9e3JhsiGr8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org