$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json) Hash identifier: tS5mtNN30eyp8jLhfi3ebyhoZmm+sx2CnbH9YXevoJU= Subject key identifier: C0:70:79:B0:E2:E8:35:2C:67:B1:7E:3B:60:3C:9B:04:3C:3B:FB:40 Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F43285847AE36A3FEF57C26E1EA48F860 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 23347 IP address blocks: 23.156.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:a3:fe:f5:7c:26:e1:ea:48:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=f9d9d482-15a0-459c-87a1-002a8ecea726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:9a:da:b6:b2:2f:1f:33:39:5f:c3:03:89: ea:2e:31:f7:bd:10:1b:77:f8:e9:2f:ae:04:27:4f: f5:8a:ac:d9:4c:1d:99:0b:d8:24:99:18:fc:5d:5c: 07:14:e8:4b:cb:3f:52:bb:62:99:91:4e:6d:ae:8d: b8:dd:e1:e9:ec:fc:dd:cc:01:f0:45:f8:f8:bc:f7: 9a:0a:15:ea:b8:7f:cd:9e:6e:26:50:72:2c:dd:1e: da:00:e7:c3:49:c5:08:6c:36:82:17:25:0f:ea:3e: eb:48:b2:41:31:5f:2c:82:ce:0f:f6:8e:76:a8:57: 3a:83:5d:f7:2e:90:0a:ef:7e:c9:72:c1:5e:16:98: 3f:f4:f3:d1:91:e0:55:07:f4:a3:fb:27:d3:66:3e: d1:bc:32:fa:a1:e5:16:04:c4:dd:91:09:93:40:cc: 58:66:98:5b:d6:28:17:6b:d1:a5:06:ce:53:47:ee: ec:6e:df:5e:51:db:df:4d:2c:7b:ba:a8:94:da:6c: 2b:7e:b0:7c:b6:46:b5:2c:96:2e:64:bd:d7:02:04: 0f:54:3b:17:a7:b6:de:37:24:c0:78:15:32:6d:f4: ee:42:e8:2e:83:82:08:7e:d4:98:75:b3:09:ff:6f: 4c:62:db:f9:8c:de:05:78:ee:bd:a2:ff:a6:49:82: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:79:B0:E2:E8:35:2C:67:B1:7E:3B:60:3C:9B:04:3C:3B:FB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ea:07:61:e9:67:86:d0:85:47:c5:bb:04:ac:52:9b:4c:99: 14:03:62:9e:f6:e5:e9:bd:b7:91:b8:c4:30:e4:d3:bc:93:b1: b0:82:12:4d:19:a4:1d:a4:39:f3:17:43:9f:46:b1:ae:25:1d: 22:e7:d3:8a:ec:a6:3b:65:ae:e9:4a:b1:54:a1:db:5f:80:16: ca:f9:2f:0f:5f:e0:36:54:a2:ce:19:88:a3:f1:40:bc:6b:ab: 15:b3:5d:f0:b1:6d:bf:04:16:a5:46:73:a2:e5:0e:89:e7:24: 6a:ff:57:24:73:bf:d7:8d:cf:0a:cf:0d:c2:2f:dd:1f:ba:36: 74:e2:10:44:80:f8:af:4a:98:dd:da:11:d7:8e:5f:4b:34:c0: 9e:41:6b:4e:52:c7:4a:aa:5a:c4:ac:1c:00:1a:cc:2f:df:2a: 1b:60:2c:10:e0:20:8a:86:e0:cd:eb:c1:e7:f4:18:b9:3a:a6: 3f:c6:b4:4f:04:6b:28:2c:7e:00:d9:73:9c:6a:3d:1f:0e:d7: ba:4c:75:aa:72:bb:96:24:93:cc:8f:03:ca:21:5a:69:20:56: 04:67:b7:ed:c0:8b:d4:4e:00:47:a0:b2:83:c7:ac:49:36:1a: 17:7a:12:39:2f:a9:e9:ef:aa:ce:aa:15:dc:fa:b8:7c:3b:6e: ab:ce:12:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNqP+9Xwm4epI+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjlkOWQ0ODItMTVhMC00NTljLTg3YTEtMDAyYThlY2VhNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweSa2rayLx8zOV/DA4nqLjH3vRAbd/jpL64E J0/1iqzZTB2ZC9gkmRj8XVwHFOhLyz9Su2KZkU5tro243eHp7PzdzAHwRfj4vPea ChXquH/Nnm4mUHIs3R7aAOfDScUIbDaCFyUP6j7rSLJBMV8sgs4P9o52qFc6g133 LpAK737JcsFeFpg/9PPRkeBVB/Sj+yfTZj7RvDL6oeUWBMTdkQmTQMxYZphb1igX a9GlBs5TR+7sbt9eUdvfTSx7uqiU2mwrfrB8tka1LJYuZL3XAgQPVDsXp7beNyTA eBUybfTuQugug4IIftSYdbMJ/29MYtv5jN4FeO69ov+mSYJaYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBwebDi6DUsZ7F+O2A8mwQ8O/tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvNGNlY2I1MGEtZGRhNS0z MjA2LTg5MmYtODQxZTFmOGQ2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3qB2HpZ4bQhUfFuwSsUptMmRQDYp725em9t5G4xDDk07yTsbCCEk0Z pB2kOfMXQ59Gsa4lHSLn04rspjtlrulKsVSh21+AFsr5Lw9f4DZUos4ZiKPxQLxr qxWzXfCxbb8EFqVGc6LlDonnJGr/VyRzv9eNzwrPDcIv3R+6NnTiEESA+K9KmN3a EdeOX0s0wJ5Ba05Sx0qqWsSsHAAazC/fKhtgLBDgIIqG4M3rwef0GLk6pj/GtE8E aygsfgDZc5xqPR8O17pMdapyu5Ykk8yPA8ohWmkgVgRnt+3Ai9ROAEegsoPHrEk2 Ghd6Ejkvqenvqs6qFdz6uHw7bqvOEjk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:25:09 2024 by rpki-client on console-fra.rpki-client.org