$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: mfJtwLtv4HAzfhqw3TFVYrCRwrnioacJ/FEVY0NB1Yc= Subject key identifier: 25:D1:FF:BD:F0:D7:83:20:0F:2E:F3:7B:30:02:DF:55:1F:05:3D:A1 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F432858480D6CE59511C6DBB8D70CC340 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Sat 30 Nov 2024 15:31:49 +0000 ROA not before: Sat 30 Nov 2024 15:31:49 +0000 ROA not after: Fri 28 Feb 2025 15:31:49 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0d:6c:e5:95:11:c6:db:b8:d7:0c:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Nov 30 15:31:49 2024 GMT Not After : Feb 28 15:31:49 2025 GMT Subject: CN=df797e40-e824-4f98-9396-60813f04d866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:69:3a:0a:76:d9:bb:4e:79:4e:97:cd:52: e8:7a:6c:1a:e5:bd:d7:fb:db:1c:bc:42:0a:7c:53: f9:27:f9:a2:d5:67:04:5e:41:1f:4e:cd:b5:d7:7c: 34:f5:5b:11:7f:48:40:5f:3f:93:4b:f9:b4:3c:8d: bf:f7:20:5d:bc:bd:4e:7e:8d:7b:f6:f2:52:57:68: 3f:f0:8b:1b:30:80:cb:6a:dc:1b:df:0e:5b:1d:08: 87:d9:c3:07:27:57:bc:6a:11:56:b9:a7:ea:30:4c: 56:fc:ee:d4:b3:e4:ff:7b:ef:88:34:01:2c:1b:ba: 73:8c:a4:4d:f3:39:48:00:66:0b:9b:07:38:2f:31: 4d:d4:38:14:7c:44:6a:9c:c1:1a:9d:1c:74:14:00: 20:19:35:1f:4a:a1:f7:72:1f:89:8e:3b:bd:ab:1d: 4d:f9:4f:cf:47:20:f0:e9:b2:49:77:a2:9b:40:19: af:3e:8a:4d:a4:00:16:a2:f0:32:f4:bb:4d:8a:c1: f1:c3:55:52:94:2d:03:4b:79:f4:ff:62:f9:13:70: a0:fc:f0:3e:dd:25:60:ae:40:88:96:32:9c:dc:14: 03:1c:dc:a5:b3:20:b6:a3:cc:f9:cc:b0:7c:a5:f1: 47:36:bf:25:e7:d0:b4:9f:8f:de:84:dc:2d:46:a9: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:FF:BD:F0:D7:83:20:0F:2E:F3:7B:30:02:DF:55:1F:05:3D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:19:ac:d8:e7:59:f6:33:3c:0f:cb:ac:0b:8a:46:58:11:ff: 94:6f:d4:f7:0d:93:cd:e5:42:aa:0e:4d:a6:64:53:89:68:83: a3:80:1c:83:b0:46:5e:6e:13:c3:21:61:1a:16:4a:2b:3d:88: e7:8c:73:1e:7d:68:83:bb:38:eb:b8:9b:9d:34:56:d7:c6:d5: 2e:a7:3d:58:fa:d6:f8:82:5e:3e:d0:4a:c8:e0:07:b4:55:58: fb:2e:20:7a:0b:93:aa:7b:32:51:1c:34:6c:f9:94:3f:07:bf: 33:c0:5c:68:49:5b:26:65:1c:2e:b0:88:1f:39:3f:24:da:80: 33:dc:2c:f6:ed:cd:5c:1e:28:de:32:71:6e:a4:1f:00:27:9e: a2:00:e1:24:e4:06:b3:c3:24:b4:8f:05:61:b6:71:c6:90:fe: 9b:19:f4:91:2a:57:0d:41:09:62:8f:09:1d:b0:cc:c3:e1:f6: cd:ff:0f:0b:24:f1:4c:3a:1b:1a:40:da:07:2e:5b:c8:08:4c: 1b:e7:7d:26:7d:03:cf:96:06:6f:c4:c5:7c:f6:7d:93:b1:a4: 10:74:84:07:0d:cc:17:67:14:fc:61:25:53:15:37:bc:1f:76: cb:81:cf:08:5b:2a:90:a0:da:07:45:7c:85:5c:1e:e0:55:34: 72:b0:6d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgNbOWVEcbbuNcMw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI0MTEzMDE1MzE0OVoXDTI1MDIyODE1MzE0OVowLzEtMCsGA1UEAxMk ZGY3OTdlNDAtZTgyNC00Zjk4LTkzOTYtNjA4MTNmMDRkODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZtpOgp22btOeU6XzVLoemwa5b3X+9scvEIK fFP5J/mi1WcEXkEfTs2113w09VsRf0hAXz+TS/m0PI2/9yBdvL1Ofo179vJSV2g/ 8IsbMIDLatwb3w5bHQiH2cMHJ1e8ahFWuafqMExW/O7Us+T/e++INAEsG7pzjKRN 8zlIAGYLmwc4LzFN1DgUfERqnMEanRx0FAAgGTUfSqH3ch+Jjju9qx1N+U/PRyDw 6bJJd6KbQBmvPopNpAAWovAy9LtNisHxw1VSlC0DS3n0/2L5E3Cg/PA+3SVgrkCI ljKc3BQDHNylsyC2o8z5zLB8pfFHNr8l59C0n4/ehNwtRqkj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXR/73w14MgDy7zezAC31UfBT2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8ZrNjnWfYzPA/LrAuKRlgR/5Rv1PcNk83lQqoOTaZkU4log6OAHIOw Rl5uE8MhYRoWSis9iOeMcx59aIO7OOu4m500VtfG1S6nPVj61viCXj7QSsjgB7RV WPsuIHoLk6p7MlEcNGz5lD8HvzPAXGhJWyZlHC6wiB85PyTagDPcLPbtzVweKN4y cW6kHwAnnqIA4STkBrPDJLSPBWG2ccaQ/psZ9JEqVw1BCWKPCR2wzMPh9s3/Dwsk 8Uw6GxpA2gcuW8gITBvnfSZ9A8+WBm/ExXz2fZOxpBB0hAcNzBdnFPxhJVMVN7wf dsuBzwhbKpCg2gdFfIVcHuBVNHKwbeo= -----END CERTIFICATE-----Generated at Sat Dec 28 02:49:16 2024 by rpki-client on console-ams.rpki-client.org