$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa File: fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa (raw, json) Hash identifier: kJfMPX8IyBb9OSm539EDfyvH10DGiBrwH4qxAPM5Gks= Subject key identifier: 16:20:39:72:DA:8C:07:47:FC:FF:89:94:CD:1A:EF:2C:EC:AE:41:5C Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Certificate serial: 010D0C9F43285848318AA9F766B31145DCE44E40 Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa Signing time: Fri 13 Dec 2024 14:00:50 +0000 ROA not before: Fri 13 Dec 2024 14:00:50 +0000 ROA not after: Thu 13 Mar 2025 13:00:50 +0000 asID: 14490 IP address blocks: 23.165.168.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:31:8a:a9:f7:66:b3:11:45:dc:e4:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Validity Not Before: Dec 13 14:00:50 2024 GMT Not After : Mar 13 13:00:50 2025 GMT Subject: CN=7b4e4f63-4f17-4057-8021-034bf956e63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:dd:64:23:41:c4:71:9f:ac:4b:9a:7c:b8: b1:f9:9d:8f:61:2a:ac:bb:5c:0b:2b:f3:70:53:20: 3a:c8:c4:ea:2c:ca:c1:a5:64:5f:73:53:37:88:87: 69:71:8b:99:9e:1b:68:d0:ae:55:0d:f0:68:a7:59: 33:aa:35:26:57:f7:6e:e4:1b:2e:21:01:c5:92:54: a6:a0:77:53:b7:df:db:c7:a9:b3:01:97:e5:56:b8: 8b:8a:a7:8d:f0:12:ef:ca:72:9b:c0:90:b2:d6:53: 30:42:1e:c6:fd:9b:d1:73:20:29:11:57:a6:60:c0: ac:5b:07:26:9a:ba:6c:06:89:22:72:19:1f:e1:33: 34:6f:14:ff:39:c3:47:35:ab:0b:1e:00:c1:0c:e4: b3:1e:20:0c:b2:f7:7a:69:9b:31:2b:2b:54:46:75: 65:4a:10:ba:c1:b0:2a:e8:f1:60:79:fa:5f:42:57: 35:6d:03:f5:b9:4e:13:fe:ee:32:c8:be:59:ed:69: be:2d:7c:c7:c5:de:98:d3:6d:b1:24:eb:bd:c5:24: 00:7c:94:7e:d5:64:a6:8e:26:65:2a:6a:68:47:ee: ba:a8:29:39:7b:f5:3d:40:e5:b1:8a:80:46:af:51: ab:86:2d:8f:d1:95:3e:79:d6:52:e4:02:68:1c:61: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:20:39:72:DA:8C:07:47:FC:FF:89:94:CD:1A:EF:2C:EC:AE:41:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl X509v3 Authority Key Identifier: keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer sbgp-ipAddrBlock: critical IPv4: 23.165.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:15:0b:62:d1:56:f3:c9:99:7d:b5:67:69:50:97:63:e6: 2e:aa:20:c1:7f:a4:21:0a:a7:93:57:de:9a:77:9a:99:4f:be: 91:8a:74:79:a6:07:ad:54:9b:88:bd:df:78:14:69:22:3c:dc: 37:41:a4:74:68:8e:07:1b:60:df:23:43:c2:57:d1:f7:77:90: 19:e4:0f:c2:55:f8:a2:97:e5:39:5e:c6:9b:48:8e:d0:37:7e: 44:e2:d3:7f:cc:c7:ef:df:e1:a1:da:26:30:3f:5c:ac:73:a4: a5:96:94:b6:87:6c:9b:d0:7f:f2:4b:55:cd:ee:db:ae:ab:9c: 7a:d9:c3:80:9e:55:36:6d:4c:d0:d3:c2:48:bb:28:cf:9f:4c: 19:c4:5b:b9:8c:36:0d:99:21:89:b6:d8:f3:8a:72:7e:97:39: 1b:7e:8e:de:a0:d8:17:0c:11:b3:29:8f:16:f7:73:e7:fa:d0: 30:a3:78:93:15:05:07:fd:fa:69:63:17:9d:60:b5:ad:a3:9f: fb:88:0e:5c:91:dc:d8:eb:9b:0c:9f:15:0e:ad:a6:63:0c:17: a8:15:dc:15:ec:9a:98:d9:01:76:d7:bb:04:f1:a1:68:2a:23: 8a:fa:5f:80:d7:78:d3:85:a3:88:c5:ef:bf:88:73:5b:78:aa: b8:c2:e7:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgxiqn3ZrMRRdzkTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm ZGJkMB4XDTI0MTIxMzE0MDA1MFoXDTI1MDMxMzEzMDA1MFowLzEtMCsGA1UEAxMk N2I0ZTRmNjMtNGYxNy00MDU3LTgwMjEtMDM0YmY5NTZlNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKTdZCNBxHGfrEuafLix+Z2PYSqsu1wLK/Nw UyA6yMTqLMrBpWRfc1M3iIdpcYuZnhto0K5VDfBop1kzqjUmV/du5BsuIQHFklSm oHdTt9/bx6mzAZflVriLiqeN8BLvynKbwJCy1lMwQh7G/ZvRcyApEVemYMCsWwcm mrpsBokichkf4TM0bxT/OcNHNasLHgDBDOSzHiAMsvd6aZsxKytURnVlShC6wbAq 6PFgefpfQlc1bQP1uU4T/u4yyL5Z7Wm+LXzHxd6Y022xJOu9xSQAfJR+1WSmjiZl KmpoR+66qCk5e/U9QOWxioBGr1Grhi2P0ZU+edZS5AJoHGFLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYgOXLajAdH/P+JlM0a7yzsrkFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvZmU0MTYzOGEtNGYzMy0z NDlmLTgzNDAtNWI2YTRlOGUyMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5 ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk ODg4OWZkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDEFQti0VbzyZl9tWdpUJdj5i6qIMF/pCEKp5NX3pp3mplPvpGKdHmm B61Um4i933gUaSI83DdBpHRojgcbYN8jQ8JX0fd3kBnkD8JV+KKX5TlexptIjtA3 fkTi03/Mx+/f4aHaJjA/XKxzpKWWlLaHbJvQf/JLVc3u266rnHrZw4CeVTZtTNDT wki7KM+fTBnEW7mMNg2ZIYm22POKcn6XORt+jt6g2BcMEbMpjxb3c+f60DCjeJMV BQf9+mljF51gta2jn/uIDlyR3NjrmwyfFQ6tpmMMF6gV3BXsmpjZAXbXuwTxoWgq I4r6X4DXeNOFo4jF77+Ic1t4qrjC50k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:52 2025 by rpki-client