$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa File: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (raw, json) Hash identifier: tKWNRQ5c+I8doJx/RlNqAnbrjEXMkJb1Flumubb3Zg4= Subject key identifier: 36:86:97:0A:67:14:E7:6E:83:56:AF:73:E2:D8:FB:09:87:68:78:55 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F43285847905FCBEC121416923EBEE500 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa Signing time: Wed 16 Oct 2024 20:29:22 +0000 ROA not before: Wed 16 Oct 2024 20:29:22 +0000 ROA not after: Tue 14 Jan 2025 21:29:22 +0000 asID: 30399 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 2602:fa82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:90:5f:cb:ec:12:14:16:92:3e:be:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Oct 16 20:29:22 2024 GMT Not After : Jan 14 21:29:22 2025 GMT Subject: CN=2f68dbf5-1119-4d64-9295-63718c178ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:52:3b:c9:0d:96:a3:7b:44:38:c0:34:da: a1:d9:ab:20:b7:66:ba:27:7b:59:cf:0a:b7:47:93: 98:98:9f:e5:01:2c:39:91:04:a0:65:85:83:b1:3e: 0e:7b:3b:51:4a:e5:ec:ec:70:35:fd:40:f8:16:4a: fe:24:2e:c9:3b:e1:95:0a:a9:61:b3:d5:25:31:47: de:25:93:16:aa:e5:86:0c:23:fd:54:8a:98:a5:44: c2:b5:e8:bb:d8:27:96:5f:56:08:37:13:2c:4a:01: 3d:c9:d2:9f:bb:5d:cc:dd:e6:2e:eb:45:61:f0:3b: b0:e5:75:7b:cc:b8:f4:35:b5:50:3a:38:43:eb:af: ef:43:04:fc:9d:0b:0a:fd:52:a9:e0:20:c3:90:86: 69:71:55:b1:b6:04:ed:18:11:a5:9b:85:02:c2:73: f8:11:4a:ef:f9:d8:27:cb:f1:b9:9d:6d:d7:13:a5: d5:3e:ed:9c:01:f6:4a:eb:43:8f:7b:70:e8:4a:95: 74:99:c8:8f:75:5b:94:9d:e7:90:f2:6d:ef:40:55: 2f:0a:16:93:10:15:2f:5b:78:5f:4c:ea:d6:ac:0c: 64:d1:1d:b0:fe:e7:42:be:0e:15:85:13:a7:7d:36: c5:41:d9:2a:e9:de:cf:7e:dd:c8:8b:bd:13:2c:54: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:97:0A:67:14:E7:6E:83:56:AF:73:E2:D8:FB:09:87:68:78:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 IPv6: 2602:fa82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:16:a9:b0:71:84:a8:4a:4d:83:3e:ab:c2:9b:ce:5b:33:33: 10:c4:a7:af:8c:b6:71:06:4a:30:de:c2:10:1d:1d:fc:33:de: 5b:da:04:2a:a2:bf:a1:a4:20:bd:4b:43:f8:1a:54:09:d2:f5: cd:ec:20:3a:c8:f6:0e:68:6e:e8:e1:b5:97:07:05:4c:a9:d7: 1e:25:96:7f:2c:f5:94:56:83:4f:5b:ed:a0:44:0a:19:d7:21: 0e:6a:df:80:79:19:ba:7d:05:04:bc:1f:37:64:de:3a:a2:bb: 01:41:20:c8:d9:47:04:78:71:fc:64:60:24:72:01:fb:7f:13: 78:58:52:cf:87:c2:81:2b:e5:a7:5b:b7:3f:cf:d3:98:1a:e0: 53:30:c1:b4:79:f2:8a:6c:c9:f0:76:52:e3:7e:0b:70:cd:1a: ba:47:1b:c8:5d:ff:7e:e1:8a:53:88:5e:1c:cc:9e:52:bd:76: f0:f3:d7:08:0b:31:4e:f2:f1:00:dd:4f:13:f0:64:1a:6b:75: e5:d9:35:4f:ee:62:2e:2c:52:06:9a:21:4d:41:40:5f:9f:fb: e0:c3:9f:2c:b1:3e:eb:f9:45:54:a5:82:5f:ef:1f:47:68:fc: 48:97:7b:59:13:2e:6e:5e:f9:d1:1f:7c:14:24:0d:86:64:3a: 89:5c:37:e8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeQX8vsEhQWkj6+5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI0MTAxNjIwMjkyMloXDTI1MDExNDIxMjkyMlowLzEtMCsGA1UEAxMk MmY2OGRiZjUtMTExOS00ZDY0LTkyOTUtNjM3MThjMTc4YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+tSO8kNlqN7RDjANNqh2asgt2a6J3tZzwq3 R5OYmJ/lASw5kQSgZYWDsT4OeztRSuXs7HA1/UD4Fkr+JC7JO+GVCqlhs9UlMUfe JZMWquWGDCP9VIqYpUTCtei72CeWX1YINxMsSgE9ydKfu13M3eYu60Vh8Duw5XV7 zLj0NbVQOjhD66/vQwT8nQsK/VKp4CDDkIZpcVWxtgTtGBGlm4UCwnP4EUrv+dgn y/G5nW3XE6XVPu2cAfZK60OPe3DoSpV0mciPdVuUneeQ8m3vQFUvChaTEBUvW3hf TOrWrAxk0R2w/udCvg4VhROnfTbFQdkq6d7Pft3Ii70TLFRcqwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDaGlwpnFOdug1avc+LY+wmHaHhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvNGU2NTEwNzAtNDlkMy0z NzljLTlkZGItMWM5ODE1ZTAyYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5goMA4E AgACMAgDBgQmAvqCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaFqmwcYSoSk2DPqvCm85bMzMQxKevjLZx Bkow3sIQHR38M95b2gQqor+hpCC9S0P4GlQJ0vXN7CA6yPYOaG7o4bWXBwVMqdce JZZ/LPWUVoNPW+2gRAoZ1yEOat+AeRm6fQUEvB83ZN46orsBQSDI2UcEeHH8ZGAk cgH7fxN4WFLPh8KBK+WnW7c/z9OYGuBTMMG0efKKbMnwdlLjfgtwzRq6RxvIXf9+ 4YpTiF4czJ5SvXbw89cICzFO8vEA3U8T8GQaa3Xl2TVP7mIuLFIGmiFNQUBfn/vg w58ssT7r+UVUpYJf7x9HaPxIl3tZEy5uXvnRH3wUJA2GZDqJXDfo -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:17 2024 by rpki-client on console-fra.rpki-client.org