$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/f65c25cb-ddfa-3438-ab69-817eec93f69a.roa File: f65c25cb-ddfa-3438-ab69-817eec93f69a.roa (raw, json) Hash identifier: 8rXU2n5HFHJa5X1R5L8Kkxx7bX2tkby5hoFq2mjk6gg= Subject key identifier: 9C:8B:E2:D1:F9:7C:70:01:3C:0A:C9:30:5A:07:DE:D8:0C:0C:AE:EC Certificate issuer: /CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Certificate serial: 010D0C9F432858474C80BFB13B1F688442863D80 Authority key identifier: DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/f65c25cb-ddfa-3438-ab69-817eec93f69a.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 54134 IP address blocks: 23.148.120.0/24 maxlen: 24 2602:2a5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:bf:b1:3b:1f:68:84:42:86:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=8adafd83-22af-42e3-a86a-84ce12959958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:31:8b:79:28:98:05:e0:b6:51:59:74:1b:ad: 84:fa:90:76:12:06:fc:b6:03:63:02:18:97:c1:24: 5c:81:30:17:b5:43:4d:49:0b:62:5f:a5:cf:31:33: e2:33:22:7d:f6:34:ce:88:14:19:2f:14:e8:e0:46: f5:dd:97:96:90:3d:44:b3:37:c5:cf:c3:a6:f0:51: e3:69:17:7b:ff:3c:89:8c:7e:72:1b:fc:a2:bc:37: 36:0b:fa:47:d4:1f:24:25:c8:ca:18:9c:fe:d0:3a: a2:c2:ad:bb:5d:4d:c8:b5:6a:84:57:db:04:c3:7e: aa:b0:af:7d:23:e6:54:ee:5c:c8:04:d7:90:a9:69: 85:57:c1:3f:96:b2:98:2a:bf:7e:3b:68:d9:b8:4a: 63:f2:ff:82:fe:fe:45:0f:fd:42:42:f6:26:10:67: f9:77:59:f2:99:e0:25:49:e9:18:b4:c2:b2:19:63: eb:64:8d:ce:02:a9:b1:93:2f:5d:ec:a6:cb:c5:e5: 2c:ce:c8:6e:a0:6c:ee:3b:11:5e:74:04:50:d2:d9: 17:ad:27:a2:2a:b3:13:87:88:fe:d9:78:88:bf:a4: 22:4b:2f:eb:39:38:21:ed:57:01:73:08:3c:b8:15: 75:6c:0a:53:24:10:6b:69:83:f8:f0:66:ff:da:81: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:E2:D1:F9:7C:70:01:3C:0A:C9:30:5A:07:DE:D8:0C:0C:AE:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/f65c25cb-ddfa-3438-ab69-817eec93f69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl X509v3 Authority Key Identifier: keyid:DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer sbgp-ipAddrBlock: critical IPv4: 23.148.120.0/24 IPv6: 2602:2a5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f3:e0:51:02:75:05:ae:60:2b:f8:6c:68:9d:ad:cd:61:82: 77:c6:36:4f:5e:71:50:c3:a5:44:49:b4:ba:1f:82:08:a5:0f: 4c:06:ec:da:1d:7b:95:3b:00:77:ee:6c:51:5d:fd:69:d2:33: 9c:8e:88:6c:dd:47:76:0e:25:38:77:f1:ff:4c:db:07:c9:d2: ec:e1:85:5a:75:ff:6e:53:88:81:28:dc:fc:db:7d:df:30:c9: 96:ce:a3:8c:59:f1:74:73:64:f7:5b:79:68:34:2a:2b:a4:08: 13:6f:14:ef:f9:4b:ee:77:3f:9d:3b:c2:91:4e:ba:b5:6b:d0: d4:24:52:6c:11:0f:0e:4a:ac:d9:13:8c:50:0c:19:fe:8b:f9: f6:c5:78:62:00:fa:9e:89:cd:1c:32:30:c8:73:94:94:fe:f8: 1d:90:9e:7d:ab:ae:d7:25:0a:2c:35:a4:4f:f8:06:7c:92:ea: e3:aa:b8:7b:58:ce:7a:5c:64:31:b5:2d:08:cb:0b:b2:d6:2f: 5d:7c:b1:66:8a:15:d1:21:47:63:9b:a6:f5:67:37:9e:08:e4: da:66:a8:65:0e:5a:e0:f1:8f:57:0e:5b:35:50:f4:26:41:ff: d3:45:14:2f:d6:f3:5c:a9:51:a7:a0:19:6f:a3:ff:17:9f:49: 4b:c2:91:8b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdMgL+xOx9ohEKGPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlZmE2YmYtNmU3NC00NzgwLWE4MGQtY2Y4NWQ4MGM5 N2NhMB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk OGFkYWZkODMtMjJhZi00MmUzLWE4NmEtODRjZTEyOTU5OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jGLeSiYBeC2UVl0G62E+pB2Egb8tgNjAhiX wSRcgTAXtUNNSQtiX6XPMTPiMyJ99jTOiBQZLxTo4Eb13ZeWkD1EszfFz8Om8FHj aRd7/zyJjH5yG/yivDc2C/pH1B8kJcjKGJz+0Dqiwq27XU3ItWqEV9sEw36qsK99 I+ZU7lzIBNeQqWmFV8E/lrKYKr9+O2jZuEpj8v+C/v5FD/1CQvYmEGf5d1nymeAl SekYtMKyGWPrZI3OAqmxky9d7KbLxeUszshuoGzuOxFedARQ0tkXrSeiKrMTh4j+ 2XiIv6QiSy/rOTgh7VcBcwg8uBV1bApTJBBraYP48Gb/2oG3AwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJyL4tH5fHABPArJMFoH3tgMDK7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kOGVm YTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1ZDgwYzk3Y2EvZjY1YzI1Y2ItZGRmYS0z NDM4LWFiNjktODE3ZWVjOTNmNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDhlZmE2YmYtNmU3NC00NzgwLWE4 MGQtY2Y4NWQ4MGM5N2NhL2Q4ZWZhNmJmLTZlNzQtNDc4MC1hODBkLWNmODVkODBj OTdjYS5jcmwwHwYDVR0jBBgwFoAU3/hkpy0c6hVjy6cynKwAM7VxOmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kOGVmYTZiZi02ZTc0LTQ3ODAtYTgwZC1jZjg1 ZDgwYzk3Y2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5R4MA4E AgACMAgDBgAmAgKlADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU8+BRAnUFrmAr+Gxona3NYYJ3xjZPXnFQ w6VESbS6H4IIpQ9MBuzaHXuVOwB37mxRXf1p0jOcjohs3Ud2DiU4d/H/TNsHydLs 4YVadf9uU4iBKNz8233fMMmWzqOMWfF0c2T3W3loNCorpAgTbxTv+Uvudz+dO8KR Trq1a9DUJFJsEQ8OSqzZE4xQDBn+i/n2xXhiAPqeic0cMjDIc5SU/vgdkJ59q67X JQosNaRP+AZ8kurjqrh7WM56XGQxtS0Iywuy1i9dfLFmihXRIUdjm6b1ZzeeCOTa ZqhlDlrg8Y9XDls1UPQmQf/TRRQv1vNcqVGnoBlvo/8Xn0lLwpGL -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:59 2024 by rpki-client on console-fra.rpki-client.org