$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json) Hash identifier: Refi55I0BU5tRZoDS9d7/Wk4QcbfUpxSSq7LZd9PE/4= Subject key identifier: 72:9F:6E:34:F2:3D:A4:F8:DF:3B:DC:4D:85:37:53:DC:CD:9D:76:CE Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Certificate serial: 010D0C9F43285847A5D6B1ED54E34CC6880C0980 Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 400458 IP address blocks: 23.148.104.0/24 maxlen: 24 2602:fbc0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b1:ed:54:e3:4c:c6:88:0c:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=28c07f4f-94d0-46f5-bcb5-7b428b0ff771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:d0:b7:d6:26:a3:cb:26:d0:25:37:15:f1: 6f:ba:d1:7e:d2:f7:69:2f:7a:58:7c:e1:d5:cb:c4: 1b:a7:10:4b:ed:24:7f:71:6b:88:3d:3d:f7:1e:d6: 48:21:97:99:02:47:6b:0f:9e:48:72:a0:1e:f4:a8: d8:86:4e:51:6d:2a:b6:ad:ed:8e:b9:0e:bc:28:68: d0:a0:36:9f:bf:9f:c0:7c:1c:cc:aa:01:5a:ec:c4: 9a:22:9e:3a:92:20:b5:1d:03:ec:79:dc:c0:44:00: f7:3d:5b:5b:79:ad:64:ae:83:ad:2d:60:fc:78:39: 49:1a:ca:ca:d1:62:31:25:cd:14:eb:95:52:12:0f: 87:54:fa:af:16:94:50:f2:c0:4f:7a:30:af:0a:bd: a1:6b:a7:fe:b7:0a:a8:eb:7d:44:62:44:73:80:68: a8:d5:a0:fd:b2:b5:82:18:da:84:d9:d2:12:0f:33: 6a:88:6e:bb:56:0d:54:8b:7d:34:aa:79:26:d2:f9: c4:bc:c0:6e:ba:57:0c:f3:34:b5:86:8c:02:66:5c: 3d:d5:2d:f3:73:bc:e8:42:ff:3a:a0:90:f5:f3:ed: c3:c8:a8:11:4e:35:f7:50:27:d6:91:66:8f:7b:af: fc:04:28:da:c7:89:0d:e6:c2:57:61:0b:00:3f:13: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9F:6E:34:F2:3D:A4:F8:DF:3B:DC:4D:85:37:53:DC:CD:9D:76:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl X509v3 Authority Key Identifier: keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.104.0/24 IPv6: 2602:fbc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:86:a3:a0:e9:ec:89:34:35:4b:b6:5c:b5:aa:38:39:a7:53: 58:6a:fa:a5:e3:a8:9b:ef:54:0d:a0:90:7d:6c:65:db:d3:ac: 42:8f:ca:19:bb:64:a6:a4:d1:0b:e2:5b:49:df:22:d2:44:d8: 3a:a0:29:bb:cc:b5:99:87:b7:5f:cf:a8:85:40:b2:ca:09:a1: 41:65:c1:4b:e3:30:4d:fc:56:1c:2d:54:0c:ef:d0:9a:5b:e8: d3:67:cc:93:e9:c1:02:42:77:85:95:c3:5b:cc:70:e7:a9:25: 5f:57:b7:e7:0b:b8:36:3a:8e:96:6f:96:12:a2:44:78:11:f0: e9:ab:44:13:20:a9:0a:6e:52:00:c8:16:fe:24:54:35:79:f1: c9:43:30:75:99:7c:02:c1:72:d1:a0:4c:34:16:36:5f:90:95: 8e:34:59:2d:ca:0d:20:8c:ed:ea:67:40:a1:54:a6:76:83:34: 97:93:d0:4a:9e:ab:79:12:44:72:2c:d2:18:39:74:21:18:8e: e3:c1:5b:e2:b4:d7:0b:a3:f3:f1:e0:0f:62:af:3c:3a:fb:d5: 24:be:f2:d2:7d:7b:3b:71:e8:ef:59:d7:c4:08:f4:15:31:85: 33:c3:db:d1:6c:e4:f2:89:e4:33:8e:a5:3f:be:e6:4b:ff:c3: 56:35:d3:16 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEel1rHtVONMxogMCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjOGM2ZjMtNGEyMi00YjA5LTkwYjgtNmY3NGVlOTBi ZWI1MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MjhjMDdmNGYtOTRkMC00NmY1LWJjYjUtN2I0MjhiMGZmNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN/Qt9Ymo8sm0CU3FfFvutF+0vdpL3pYfOHV y8QbpxBL7SR/cWuIPT33HtZIIZeZAkdrD55IcqAe9KjYhk5RbSq2re2OuQ68KGjQ oDafv5/AfBzMqgFa7MSaIp46kiC1HQPsedzARAD3PVtbea1kroOtLWD8eDlJGsrK 0WIxJc0U65VSEg+HVPqvFpRQ8sBPejCvCr2ha6f+twqo631EYkRzgGio1aD9srWC GNqE2dISDzNqiG67Vg1Ui300qnkm0vnEvMBuulcM8zS1howCZlw91S3zc7zoQv86 oJD18+3DyKgRTjX3UCfWkWaPe6/8BCjax4kN5sJXYQsAPxMObQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHKfbjTyPaT43zvcTYU3U9zNnXbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4 YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0ZWU5MGJlYjUvZTVjZmM1NWQtMGZjNS0z YTIwLWFlZDUtMmNiZTJkYzYzYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDJjOGM2ZjMtNGEyMi00YjA5LTkw YjgtNmY3NGVlOTBiZWI1LzQyYzhjNmYzLTRhMjItNGIwOS05MGI4LTZmNzRlZTkw YmViNS5jcmwwHwYDVR0jBBgwFoAUy1hstB/HLAz+J/uXLb8L6wVG+14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0 ZWU5MGJlYjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5RoMA4E AgACMAgDBgAmAvvAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFhqOg6eyJNDVLtly1qjg5p1NYavql46ib 71QNoJB9bGXb06xCj8oZu2SmpNEL4ltJ3yLSRNg6oCm7zLWZh7dfz6iFQLLKCaFB ZcFL4zBN/FYcLVQM79CaW+jTZ8yT6cECQneFlcNbzHDnqSVfV7fnC7g2Oo6Wb5YS okR4EfDpq0QTIKkKblIAyBb+JFQ1efHJQzB1mXwCwXLRoEw0FjZfkJWONFktyg0g jO3qZ0ChVKZ2gzSXk9BKnqt5EkRyLNIYOXQhGI7jwVvitNcLo/Px4A9irzw6+9Uk vvLSfXs7cejvWdfECPQVMYUzw9vRbOTyieQzjqU/vuZL/8NWNdMW -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:48 2024 by rpki-client on console-fra.rpki-client.org