$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa File: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json) Hash identifier: CPKv6kBgb7GZnnHpnHib8gzxUkttYRNEQ382yP+4VoM= Subject key identifier: 50:F4:58:E7:FF:FF:45:D7:1D:B6:2A:A3:68:29:AA:F3:2A:0E:96:92 Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F43285847B3CC0B0D0F4B78B1676646C0 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 400477 IP address blocks: 23.132.56.0/24 maxlen: 24 2602:fbc1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:0b:0d:0f:4b:78:b1:67:66:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=be7fa9ea-a55b-4207-ab66-4dd27aa3204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:82:0d:f3:1d:4a:5f:fc:ae:ee:6b:f0:d7: f4:87:65:c5:9a:b7:9c:52:ad:98:94:c3:d2:cc:31: f9:95:0f:0f:ba:1e:8f:e7:39:8d:e4:22:dc:22:cd: 97:5f:a8:62:9d:e6:1d:5c:6e:06:e3:f7:23:06:8a: 21:1a:81:b3:98:e7:19:f8:9f:d4:f5:2a:a6:92:62: e1:1b:40:83:85:57:f2:71:28:b0:c6:86:03:e0:a3: c9:5b:17:fa:66:52:6e:54:03:eb:5a:70:11:5e:a0: 8d:01:55:9e:b2:10:c2:3b:77:2f:97:3d:78:33:8c: 55:f3:97:9b:be:24:a5:72:09:76:f2:0d:bd:9e:11: 4d:a4:1c:af:2d:11:3c:d0:36:17:1d:36:d3:ec:07: f3:e3:f3:3b:57:b5:74:9d:6d:92:ff:61:a4:65:cc: 61:85:9a:24:d0:a1:6f:bb:86:37:fe:24:38:c1:d3: da:6f:e4:67:84:5c:35:c8:b7:a1:82:07:86:d7:11: 54:20:cf:13:f9:9c:28:1c:01:c0:0a:74:cd:e7:f6: 14:ff:60:ee:7a:8c:b7:1d:85:da:a6:77:60:e6:b0: fd:ac:6c:1c:45:ec:76:be:89:c5:35:70:f2:b2:2b: e1:4e:04:dd:ab:16:37:b3:97:01:a5:de:b7:4d:44: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:58:E7:FF:FF:45:D7:1D:B6:2A:A3:68:29:AA:F3:2A:0E:96:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.56.0/24 IPv6: 2602:fbc1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:20:77:b2:80:4c:d4:7e:a8:b7:43:41:76:81:6c:78:51:2e: 2c:68:db:9e:70:87:ce:f0:08:c9:a7:52:e9:b7:30:35:ff:58: 42:bb:9e:bd:76:4c:51:1f:6e:c0:8b:b3:58:4e:6f:c3:3a:33: 89:ee:3f:30:81:8b:ce:86:51:73:ed:3b:06:90:14:f0:1a:5f: f8:14:cc:5f:0e:2f:15:dd:7f:b5:ae:40:16:66:7e:c2:8d:9b: 74:f7:45:1a:68:ce:c5:53:78:34:6b:bb:73:fa:09:a4:2b:dc: 37:05:fa:cd:52:a2:a7:a4:4d:61:14:32:68:19:c7:3a:73:2f: 10:3c:eb:70:fa:92:9c:e4:a6:2a:88:50:3f:61:56:83:b0:67: 91:e0:1a:0e:a8:11:e7:9e:ec:08:dd:03:b0:20:26:cb:48:ad: ff:9e:dc:a0:df:a8:f3:f7:ff:e8:61:8d:d8:c6:9a:c3:ba:92: aa:35:ac:4e:9e:af:5f:73:4e:fd:55:ec:3b:37:a5:49:b5:a0: 32:68:82:f1:d5:29:23:5f:bb:9a:e8:83:42:45:86:41:39:6b: 04:48:bf:62:8d:a1:57:70:8c:f0:e1:1d:d9:a7:74:fa:30:5b: d1:0a:84:dd:2d:11:48:b2:c7:11:af:b5:fa:dc:52:fa:d3:07: 79:57:06:1a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEezzAsND0t4sWdmRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YmU3ZmE5ZWEtYTU1Yi00MjA3LWFiNjYtNGRkMjdhYTMyMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7uCDfMdSl/8ru5r8Nf0h2XFmrecUq2YlMPS zDH5lQ8Puh6P5zmN5CLcIs2XX6hineYdXG4G4/cjBoohGoGzmOcZ+J/U9SqmkmLh G0CDhVfycSiwxoYD4KPJWxf6ZlJuVAPrWnARXqCNAVWeshDCO3cvlz14M4xV85eb viSlcgl28g29nhFNpByvLRE80DYXHTbT7Afz4/M7V7V0nW2S/2GkZcxhhZok0KFv u4Y3/iQ4wdPab+RnhFw1yLehggeG1xFUIM8T+ZwoHAHACnTN5/YU/2Dueoy3HYXa pndg5rD9rGwcRex2vonFNXDysivhTgTdqxY3s5cBpd63TUSaKQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFD0WOf//0XXHbYqo2gpqvMqDpaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvZGIwZDQ5YzItMDdjNi0z NTNmLWI0MDctM2JlODdjMjRhZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q4MA4E AgACMAgDBgQmAvvBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpIHeygEzUfqi3Q0F2gWx4US4saNuecIfO 8AjJp1LptzA1/1hCu569dkxRH27Ai7NYTm/DOjOJ7j8wgYvOhlFz7TsGkBTwGl/4 FMxfDi8V3X+1rkAWZn7CjZt090UaaM7FU3g0a7tz+gmkK9w3BfrNUqKnpE1hFDJo Gcc6cy8QPOtw+pKc5KYqiFA/YVaDsGeR4BoOqBHnnuwI3QOwICbLSK3/ntyg36jz 9//oYY3YxprDupKqNaxOnq9fc079Vew7N6VJtaAyaILx1SkjX7ua6INCRYZBOWsE SL9ijaFXcIzw4R3Zp3T6MFvRCoTdLRFIsscRr7X63FL60wd5VwYa -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org