$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa File: 5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa (raw, json) Hash identifier: YZUkyi0XzTv6RJ7sq0peEUdP5I4otqD0NYBe2pyW9vA= Subject key identifier: FF:5B:E6:75:7D:CC:17:B5:B1:11:2D:FD:57:F3:DD:53:06:7A:64:94 Certificate issuer: /CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Certificate serial: 010D0C9F432858478E1BB2F7BAA75D96D9E6E400 Authority key identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 401214 IP address blocks: 23.183.152.0/24 maxlen: 24 2602:f888::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:b2:f7:ba:a7:5d:96:d9:e6:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=3c3e4c73-6136-4c81-8b6b-040ef0c13bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:a2:11:2e:bd:a9:23:db:ee:a5:46:1f:aa: f0:ee:f0:c1:24:f6:2f:80:15:60:88:62:28:46:4e: ab:b9:fe:ea:d9:97:12:84:e1:2b:8a:7f:ff:d3:9b: d2:1d:6b:ae:3c:28:3a:db:10:96:41:4e:77:c2:a0: 8f:be:f8:2e:eb:48:32:88:38:86:00:e5:1a:fc:17: 1e:42:a6:e1:2b:44:70:64:a0:31:7d:23:93:ce:fa: 0e:1b:fa:dc:97:7c:e1:f1:3a:3c:c9:83:12:da:5f: 6c:b6:c0:1a:c1:f8:c4:bc:49:82:0c:0b:c2:3d:f7: c8:19:b8:ee:a9:20:f1:12:24:f7:c6:4c:9f:08:75: 75:77:64:69:fe:68:6d:bf:ce:54:c1:9d:2d:5b:d4: 74:f1:97:b7:3c:c5:cc:7e:d6:f1:11:6f:ee:10:19: b0:6c:df:a0:05:29:a3:2b:38:81:3b:00:54:ee:f1: 71:dd:2e:99:17:cd:28:a6:5c:1c:9c:30:16:06:b5: d7:3b:67:d0:26:f3:60:2d:7f:e5:77:d5:30:b7:a6: 04:83:36:2a:a8:4f:bf:d3:8e:f2:19:cd:2e:64:3d: de:00:6f:fd:dc:a2:fc:e3:64:81:22:37:a1:74:a1: 1d:74:2b:14:ae:cb:a5:d0:b3:c6:5c:4b:b4:5a:45: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:E6:75:7D:CC:17:B5:B1:11:2D:FD:57:F3:DD:53:06:7A:64:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl X509v3 Authority Key Identifier: keyid:0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer sbgp-ipAddrBlock: critical IPv4: 23.183.152.0/24 IPv6: 2602:f888::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:a4:37:1c:99:27:10:99:5b:c0:34:6e:1c:11:cd:76:7c: 79:93:a1:4b:44:ff:b3:29:25:9f:28:dc:5d:c4:44:d4:81:fd: c1:48:c7:4d:58:93:57:a6:eb:6b:69:29:54:46:1f:68:e1:5e: 5d:8b:a4:12:01:c1:25:f1:03:c8:00:10:00:a6:d9:ed:cb:51: b4:8b:1d:8c:45:36:d6:f1:80:83:ae:f1:1d:f4:99:74:04:0b: f2:8e:1d:83:3e:27:ae:a6:36:b3:e9:8a:75:25:65:d5:be:1a: af:b0:30:e7:e6:61:8d:e6:87:40:db:41:8a:e9:e0:80:dc:09: fd:b6:a3:25:02:6e:4d:de:c7:c7:c8:20:3c:2a:54:96:aa:90: 90:c5:22:79:a3:d1:1d:d3:df:97:76:de:92:62:9f:93:10:aa: b9:b4:a1:3c:02:a6:51:13:4e:d0:9c:e2:d2:ce:ed:a0:06:d9: 97:ed:5d:12:a5:7a:9e:b5:b9:84:11:89:bb:b9:34:aa:49:10: 31:b2:6b:1f:26:b5:0c:1c:99:bc:f8:b0:5b:17:eb:97:78:a7: 66:a6:a3:4f:43:8d:68:19:a2:91:45:13:2d:9c:45:7c:e0:dc: 7c:e5:8d:54:ef:c0:68:9d:e7:5d:be:f9:77:d5:67:01:d2:e2: 0a:05:bc:a0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeOG7L3uqddltnm5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQyODQ1YTQtYjk1Mi00YWI3LTljZGItZDQzMmNhNTMw ZGQ5MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk M2MzZTRjNzMtNjEzNi00YzgxLThiNmItMDQwZWYwYzEzYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh2iES69qSPb7qVGH6rw7vDBJPYvgBVgiGIo Rk6ruf7q2ZcShOErin//05vSHWuuPCg62xCWQU53wqCPvvgu60gyiDiGAOUa/Bce QqbhK0RwZKAxfSOTzvoOG/rcl3zh8To8yYMS2l9stsAawfjEvEmCDAvCPffIGbju qSDxEiT3xkyfCHV1d2Rp/mhtv85UwZ0tW9R08Ze3PMXMftbxEW/uEBmwbN+gBSmj KziBOwBU7vFx3S6ZF80oplwcnDAWBrXXO2fQJvNgLX/ld9Uwt6YEgzYqqE+/047y Gc0uZD3eAG/93KL842SBIjehdKEddCsUrsul0LPGXEu0WkVOJwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP9b5nV9zBe1sREt/Vfz3VMGemSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDI4 NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1MzBkZDkvNTkwMWNlMjMtMTNiNi0z MGUwLWFiOTQtM2FlNzlmYjcyZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQyODQ1YTQtYjk1Mi00YWI3LTlj ZGItZDQzMmNhNTMwZGQ5LzVkMjg0NWE0LWI5NTItNGFiNy05Y2RiLWQ0MzJjYTUz MGRkOS5jcmwwHwYDVR0jBBgwFoAUDUskoG7MmmMPdWG1Y/JwuJVXISswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMy Y2E1MzBkZDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7eYMA4E AgACMAgDBgAmAviIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoIqQ3HJknEJlbwDRuHBHNdnx5k6FLRP+z KSWfKNxdxETUgf3BSMdNWJNXputraSlURh9o4V5di6QSAcEl8QPIABAAptnty1G0 ix2MRTbW8YCDrvEd9Jl0BAvyjh2DPieupjaz6Yp1JWXVvhqvsDDn5mGN5odA20GK 6eCA3An9tqMlAm5N3sfHyCA8KlSWqpCQxSJ5o9Ed09+Xdt6SYp+TEKq5tKE8AqZR E07QnOLSzu2gBtmX7V0SpXqetbmEEYm7uTSqSRAxsmsfJrUMHJm8+LBbF+uXeKdm pqNPQ41oGaKRRRMtnEV84Nx85Y1U78Boneddvvl31WcB0uIKBbyg -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:41 2024 by rpki-client on console-fra.rpki-client.org