$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/94a3b6d6-1dd3-37c3-9d94-b04fdc2e7b6f.roa File: 94a3b6d6-1dd3-37c3-9d94-b04fdc2e7b6f.roa (raw, json) Hash identifier: HylpDZNI6S7uNSNGkhoE6JgDofyCTmb7dwL1gpFlz5o= Subject key identifier: 03:19:82:4E:85:A5:4C:79:60:6A:09:9D:85:2D:E9:45:B8:25:94:8E Certificate issuer: /CN=3cb45979-c30c-4872-8a79-7c08e9178605 Certificate serial: 010D0C9F43285847AF9BEF22745377051F46FBD0 Authority key identifier: F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/94a3b6d6-1dd3-37c3-9d94-b04fdc2e7b6f.roa Signing time: Mon 28 Oct 2024 01:00:32 +0000 ROA not before: Mon 28 Oct 2024 01:00:32 +0000 ROA not after: Sun 26 Jan 2025 02:00:32 +0000 asID: 32169 IP address blocks: 23.178.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:af:9b:ef:22:74:53:77:05:1f:46:fb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb45979-c30c-4872-8a79-7c08e9178605 Validity Not Before: Oct 28 01:00:32 2024 GMT Not After : Jan 26 02:00:32 2025 GMT Subject: CN=b53a1165-dbae-481a-a9cb-b772a9e9bea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:9d:ed:e6:22:e5:cf:c1:13:6e:65:a4:23: 6b:31:91:59:6a:80:7c:6b:18:7f:2a:aa:e0:8d:fb: f2:e2:68:07:87:90:a7:22:16:8d:42:d5:a5:80:9b: dd:4e:f9:c6:6f:88:dc:d1:5c:06:43:98:28:d3:20: b3:06:fe:ee:1f:0b:31:b9:b6:17:15:0c:59:e2:b2: ae:19:58:47:6c:57:01:11:a6:8a:93:e2:56:e6:3d: 8a:9c:40:d5:14:2f:00:b9:8d:e3:cf:84:8d:a7:27: b5:bf:40:4c:2e:da:cd:3f:58:13:c1:c4:c5:69:91: b3:53:e2:07:17:70:de:95:a4:85:1c:1f:74:20:ab: 9d:b1:52:f9:bb:29:bf:a4:db:ff:70:73:a4:48:3a: 97:c7:90:e4:6a:41:20:e2:88:00:e9:9f:3f:10:a1: 51:d5:13:19:96:02:86:ca:50:e7:a2:ba:65:cd:0a: 00:d3:72:d8:92:8b:e7:3e:8b:1a:b6:44:d9:ff:bf: 63:c9:c3:83:9b:b4:cd:19:db:1c:08:37:25:8b:b0: d8:5a:25:b7:87:3a:80:3b:f5:ef:7d:87:18:da:63: cf:c7:2d:15:90:0a:f1:68:eb:09:ec:59:48:e7:4d: 0a:c1:cb:81:b4:1c:2c:e1:87:b9:df:b5:20:df:11: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:82:4E:85:A5:4C:79:60:6A:09:9D:85:2D:E9:45:B8:25:94:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/94a3b6d6-1dd3-37c3-9d94-b04fdc2e7b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl X509v3 Authority Key Identifier: keyid:F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer sbgp-ipAddrBlock: critical IPv4: 23.178.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a2:f4:c7:22:aa:29:a9:49:5d:93:78:7c:46:37:a2:5b:27: 5e:ae:33:45:05:5d:7e:db:b0:92:a1:fc:3b:cf:ab:73:57:e3: 96:21:30:27:68:3a:93:4a:2e:17:d8:89:e7:e3:64:68:7d:0a: ca:de:e9:df:87:6b:3b:b1:d7:2c:12:5b:1c:64:3a:c0:88:23: b6:c1:1c:eb:1d:bb:68:17:23:95:68:26:a5:9e:97:48:f2:8a: 99:99:76:7e:13:a4:27:04:90:30:cb:0a:36:23:e2:d3:d0:c3: 56:00:36:f1:ae:9d:5a:65:00:12:cb:6e:87:82:14:a5:65:3a: e2:36:e8:bd:11:52:5c:8f:cb:84:64:27:36:01:19:f0:a9:13: 87:9a:cd:c3:9f:3b:47:e6:63:e7:8b:5f:3d:2d:e9:27:6b:2d: e2:61:40:ef:73:7d:ab:b2:d4:28:07:6a:e4:33:c6:d9:42:39: 54:34:c1:97:c6:14:e2:02:19:8c:78:af:53:dd:83:a2:92:53: 33:47:b3:46:3d:6c:65:db:64:ce:19:be:5a:0c:ca:be:6f:86: e6:5c:95:1d:fb:28:c1:9e:0c:a0:e5:3b:fa:b2:1e:7a:f0:0f: 88:63:e3:bb:c6:1e:19:fc:8f:ec:f0:9b:90:82:9d:0f:e7:6f: b4:45:e8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+8idFN3BR9G+9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiNDU5NzktYzMwYy00ODcyLThhNzktN2MwOGU5MTc4 NjA1MB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk YjUzYTExNjUtZGJhZS00ODFhLWE5Y2ItYjc3MmE5ZTliZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Wd7eYi5c/BE25lpCNrMZFZaoB8axh/Kqrg jfvy4mgHh5CnIhaNQtWlgJvdTvnGb4jc0VwGQ5go0yCzBv7uHwsxubYXFQxZ4rKu GVhHbFcBEaaKk+JW5j2KnEDVFC8AuY3jz4SNpye1v0BMLtrNP1gTwcTFaZGzU+IH F3DelaSFHB90IKudsVL5uym/pNv/cHOkSDqXx5DkakEg4ogA6Z8/EKFR1RMZlgKG ylDnorplzQoA03LYkovnPosatkTZ/79jycODm7TNGdscCDcli7DYWiW3hzqAO/Xv fYcY2mPPxy0VkArxaOsJ7FlI500KwcuBtBws4Ye537Ug3xGKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMZgk6FpUx5YGoJnYUt6UW4JZSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zY2I0 NTk3OS1jMzBjLTQ4NzItOGE3OS03YzA4ZTkxNzg2MDUvOTRhM2I2ZDYtMWRkMy0z N2MzLTlkOTQtYjA0ZmRjMmU3YjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2NiNDU5NzktYzMwYy00ODcyLThh NzktN2MwOGU5MTc4NjA1LzNjYjQ1OTc5LWMzMGMtNDg3Mi04YTc5LTdjMDhlOTE3 ODYwNS5jcmwwHwYDVR0jBBgwFoAU8063IhdKMW8LBkBoC2LO36gQPfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zY2I0NTk3OS1jMzBjLTQ4NzItOGE3OS03YzA4 ZTkxNzg2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7KYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOi9MciqimpSV2TeHxGN6JbJ16uM0UFXX7bsJKh/DvPq3NX45YhMCdo OpNKLhfYiefjZGh9Csre6d+Hazux1ywSWxxkOsCII7bBHOsdu2gXI5VoJqWel0jy ipmZdn4TpCcEkDDLCjYj4tPQw1YANvGunVplABLLboeCFKVlOuI26L0RUlyPy4Rk JzYBGfCpE4eazcOfO0fmY+eLXz0t6SdrLeJhQO9zfauy1CgHauQzxtlCOVQ0wZfG FOICGYx4r1Pdg6KSUzNHs0Y9bGXbZM4ZvloMyr5vhuZclR37KMGeDKDlO/qyHnrw D4hj47vGHhn8j+zwm5CCnQ/nb7RF6HU= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:06 2024 by rpki-client on console-ams.rpki-client.org