$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: kZXLgF+0v2I/TrtJ2CRrWTLT8pcr8R3N1I6CWwKtiHs= Subject key identifier: 38:67:9C:B7:43:8D:28:AD:70:08:7A:D2:DC:20:68:BF:83:31:71:E1 Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F432858483B39463C4447605503ED3180 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Tue 17 Dec 2024 01:14:59 +0000 ROA not before: Tue 17 Dec 2024 01:14:59 +0000 ROA not after: Mon 17 Mar 2025 00:14:59 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Dec 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:39:46:3c:44:47:60:55:03:ed:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Dec 17 01:14:59 2024 GMT Not After : Mar 17 00:14:59 2025 GMT Subject: CN=e73fd5e3-7242-4f3d-a9bd-71bb931ef2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:0e:d3:ab:ee:33:16:0a:48:55:2d:3d:1c: fa:e0:d2:68:af:92:29:f8:dd:61:02:b5:8e:ae:92: 3b:1a:77:d2:d6:a5:45:16:9b:a8:2f:45:0f:b9:b1: 4e:1b:43:71:69:c4:07:8d:8f:93:cf:54:8f:b0:4c: 3d:38:1e:da:31:39:89:73:98:75:62:0e:0f:2e:66: 7d:2b:3c:f1:60:1a:67:f4:61:5c:f6:8c:2d:8e:5a: 3a:03:e5:a9:69:0f:ff:8a:74:1d:55:e3:89:b0:54: c7:a5:77:d2:e1:d5:04:de:02:f2:e3:a7:44:7d:a3: 52:5e:53:b3:14:4b:23:85:29:c5:74:b3:e2:c7:80: be:86:2a:6a:6a:65:45:ed:44:42:cb:3e:12:d3:58: f1:c8:89:68:2d:bc:64:06:a5:ec:ff:07:60:d5:6c: ca:e5:c1:9c:c0:71:e0:76:d4:77:05:a7:8d:82:4b: 95:28:68:50:43:0c:4f:d3:7f:48:08:04:3b:ff:05: 0e:75:b1:ce:ec:49:f2:8c:be:7c:24:5b:3e:7c:b5: a1:89:f3:bf:86:97:4d:60:c1:c0:ca:ea:15:c7:c2: 15:6f:e3:df:5e:3d:8f:05:ba:e2:60:5d:cc:e8:12: 94:88:2b:ea:58:15:f3:ba:8e:bc:1c:9c:29:b5:62: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:9C:B7:43:8D:28:AD:70:08:7A:D2:DC:20:68:BF:83:31:71:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7e:b6:c6:a3:a1:5e:d0:d0:09:7b:93:f7:aa:82:fc:6c:83: e8:bc:bb:ca:09:b0:e5:f8:4d:f9:74:b1:b8:d4:bc:15:43:15: 6e:9b:b6:a6:60:94:f0:d9:b5:82:14:1a:55:43:4f:8c:ff:43: 77:d2:40:e9:2b:1b:77:41:24:40:99:a4:96:15:2a:22:7b:43: 8c:5e:ed:7c:ee:78:f9:27:ae:d4:7f:00:18:df:76:6a:43:41: 19:7a:91:42:ef:8b:5f:04:be:2f:1f:97:d3:c8:87:12:f3:d7: 35:93:3b:57:94:93:6b:ef:be:71:ac:aa:41:e1:2f:4c:05:c5: 47:73:f6:10:fb:dc:b0:f4:fc:05:a0:93:9f:75:52:18:d1:81: 21:4b:9b:39:6e:4c:ad:84:07:20:c3:d6:4e:ef:ba:7f:b3:a7: d2:39:92:19:4d:77:2d:15:77:2d:fb:2f:dd:63:80:f3:0d:66: 79:46:97:45:23:6c:39:15:11:55:70:d8:fc:8c:b7:c6:4c:13: d6:b5:7a:54:40:09:6f:e0:f2:94:e3:e3:3a:f5:b8:3c:0d:10: cc:9d:6a:c2:1e:c3:55:3c:8f:14:90:4a:fa:da:94:be:39:93: 87:04:36:1c:ca:4f:4f:75:c3:77:75:2d:ca:c0:e1:c5:98:ba: e2:5a:50:33 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEg7OUY8REdgVQPtMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI0MTIxNzAxMTQ1OVoXDTI1MDMxNzAwMTQ1OVowLzEtMCsGA1UEAxMk ZTczZmQ1ZTMtNzI0Mi00ZjNkLWE5YmQtNzFiYjkzMWVmMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4O06vuMxYKSFUtPRz64NJor5Ip+N1hArWO rpI7GnfS1qVFFpuoL0UPubFOG0NxacQHjY+Tz1SPsEw9OB7aMTmJc5h1Yg4PLmZ9 KzzxYBpn9GFc9owtjlo6A+WpaQ//inQdVeOJsFTHpXfS4dUE3gLy46dEfaNSXlOz FEsjhSnFdLPix4C+hipqamVF7URCyz4S01jxyIloLbxkBqXs/wdg1WzK5cGcwHHg dtR3BaeNgkuVKGhQQwxP039ICAQ7/wUOdbHO7EnyjL58JFs+fLWhifO/hpdNYMHA yuoVx8IVb+PfXj2PBbriYF3M6BKUiCvqWBXzuo68HJwptWJOiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDhnnLdDjSitcAh60twgaL+DMXHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrfrbGo6Fe0NAJe5P3qoL8bIPovLvKCbDl +E35dLG41LwVQxVum7amYJTw2bWCFBpVQ0+M/0N30kDpKxt3QSRAmaSWFSoie0OM Xu187nj5J67UfwAY33ZqQ0EZepFC74tfBL4vH5fTyIcS89c1kztXlJNr775xrKpB 4S9MBcVHc/YQ+9yw9PwFoJOfdVIY0YEhS5s5bkythAcgw9ZO77p/s6fSOZIZTXct FXct+y/dY4DzDWZ5RpdFI2w5FRFVcNj8jLfGTBPWtXpUQAlv4PKU4+M69bg8DRDM nWrCHsNVPI8UkEr62pS+OZOHBDYcyk9PdcN3dS3KwOHFmLriWlAz -----END CERTIFICATE-----Generated at Sat Dec 28 17:54:47 2024 by rpki-client on console-fra.rpki-client.org