$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa File: 2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa (raw, json) Hash identifier: pijSXM2jSdZHkFDXURKkMaHUlRrkqFwzbnqRFg3g2gA= Subject key identifier: 49:BE:FF:66:13:22:E6:ED:D4:23:63:FD:E1:01:0E:CA:11:27:47:C9 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F43285847ED24C8CAD2CF35A81CA3FAC8 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 399082 IP address blocks: 23.157.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:c8:ca:d2:cf:35:a8:1c:a3:fa:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=45f0d0b9-30fc-49d5-be0f-4c31d4ea9c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:d7:ea:43:5d:0d:d3:4c:4e:d4:8e:c6:b6: 58:46:91:36:d5:8c:38:4e:b7:fa:e0:fd:8b:e0:b0: 47:9c:2b:fa:cb:19:63:8d:dc:95:90:9e:c0:91:74: 48:7c:4a:e3:fc:59:fc:62:40:58:fd:17:f9:40:44: 9c:b5:43:2d:d2:e7:46:9b:d6:9e:62:de:27:71:46: dc:20:20:58:a3:79:63:da:19:83:02:d9:52:d3:33: 36:5a:2f:2a:58:b0:5d:c8:9c:94:00:51:9d:92:6c: d4:e3:fe:f4:80:4f:4b:f3:56:f1:6f:4b:4c:c1:3f: 0a:a2:e9:67:3b:eb:42:25:7d:61:bf:f6:e5:78:31: d3:a9:a1:b1:fa:1d:84:0d:27:4d:d1:4f:bf:57:2d: fc:53:32:85:83:8c:11:09:a9:5a:ce:70:37:06:a4: 4e:54:d0:ba:8c:62:c1:f4:54:f8:90:9b:43:9e:38: be:3e:72:7f:05:02:92:89:47:17:a8:11:f8:8b:bd: 46:f3:27:71:4b:be:02:ca:7c:22:7b:ee:a6:16:e7: 77:2e:32:ff:17:23:b1:ef:36:b6:b5:55:d7:ae:4d: 39:d7:0b:95:57:cb:ca:aa:f2:1c:13:4e:94:12:8b: 2e:19:31:d9:8c:4d:81:61:83:ee:fb:4b:6a:a4:52: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:FF:66:13:22:E6:ED:D4:23:63:FD:E1:01:0E:CA:11:27:47:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ca:27:0a:cf:5c:67:01:ef:68:7b:a9:aa:cc:cc:36:b1:f0: c2:08:7f:22:67:f5:e1:30:ce:3e:48:31:97:e7:80:bc:f9:ed: a5:b1:60:ec:16:d6:f7:07:3a:35:8a:71:71:89:91:97:ae:44: 2f:b8:0c:c3:6e:5b:6d:8d:76:6e:88:db:d1:d7:b6:5a:39:7e: 5b:32:3c:6d:64:21:dc:5f:2c:ef:5a:c2:3c:d0:14:ac:38:dd: 93:75:f2:ad:20:d1:39:cb:84:41:ab:73:d8:b8:7e:87:c2:0b: fb:83:43:6c:52:83:91:a9:5b:38:01:58:59:99:7a:59:0d:ac: 19:72:a9:0f:3d:b8:a6:3d:89:b1:ac:6e:ca:7f:3e:27:40:6e: 58:02:27:13:1c:93:cc:bb:22:91:0a:21:71:36:21:c2:54:42: a7:89:9a:03:6a:18:90:75:7a:88:b9:2b:77:3f:63:e4:95:2a: be:fd:db:e9:a1:99:f1:c4:f3:c8:f6:2f:3e:71:a9:23:2f:59: 38:d3:b8:ad:ab:9b:84:c1:45:7f:fd:79:1c:4a:15:da:b5:9c: 11:dd:b6:14:30:75:db:d3:19:db:2e:a2:b5:0a:ea:58:28:d3: 7d:6c:f2:40:a4:8b:ce:de:b9:8c:2c:f4:91:db:fb:8e:04:7b: 87:d4:ef:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMjK0s81qByj+sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NDVmMGQwYjktMzBmYy00OWQ1LWJlMGYtNGMzMWQ0ZWE5Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzX6kNdDdNMTtSOxrZYRpE21Yw4Trf64P2L 4LBHnCv6yxljjdyVkJ7AkXRIfErj/Fn8YkBY/Rf5QESctUMt0udGm9aeYt4ncUbc ICBYo3lj2hmDAtlS0zM2Wi8qWLBdyJyUAFGdkmzU4/70gE9L81bxb0tMwT8Kouln O+tCJX1hv/bleDHTqaGx+h2EDSdN0U+/Vy38UzKFg4wRCalaznA3BqROVNC6jGLB 9FT4kJtDnji+PnJ/BQKSiUcXqBH4i71G8ydxS74Cynwie+6mFud3LjL/FyOx7za2 tVXXrk051wuVV8vKqvIcE06UEosuGTHZjE2BYYPu+0tqpFJSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm+/2YTIubt1CNj/eEBDsoRJ0fJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvMmZmNmZkNGEtNjRhZi0z MzNlLTgyNWQtZDFlYmU1OGM5Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjKJwrPXGcB72h7qarMzDax8MIIfyJn9eEwzj5IMZfngLz57aWxYOwW 1vcHOjWKcXGJkZeuRC+4DMNuW22Ndm6I29HXtlo5flsyPG1kIdxfLO9awjzQFKw4 3ZN18q0g0TnLhEGrc9i4fofCC/uDQ2xSg5GpWzgBWFmZelkNrBlyqQ89uKY9ibGs bsp/PidAblgCJxMck8y7IpEKIXE2IcJUQqeJmgNqGJB1eoi5K3c/Y+SVKr792+mh mfHE88j2Lz5xqSMvWTjTuK2rm4TBRX/9eRxKFdq1nBHdthQwddvTGdsuorUK6lgo 031s8kCki87euYws9JHb+44Ee4fU78U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org