$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa File: 161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa (raw, json) Hash identifier: o9K13UZv3n2Pwgi5qa+yvYXXANoiZmKz7KrDzEwEy6c= Subject key identifier: F4:62:05:E4:80:5F:6B:14:02:8F:10:26:DD:C2:E5:DD:54:DC:A2:20 Certificate issuer: /CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Certificate serial: 010D0C9F432858480BDA677728646D3B8E077480 Authority key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 26370 IP address blocks: 23.178.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:67:77:28:64:6d:3b:8e:07:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=7938442e-edd5-4ae0-ab19-1ecffe59a04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:0f:18:a2:95:44:13:07:19:f4:a3:1c:97: ee:25:65:4d:5f:96:e0:5c:1a:e4:41:20:cf:ca:6d: ee:99:e4:64:90:aa:ef:ba:e4:88:68:4e:c9:f2:b9: e9:6f:80:64:47:04:49:7d:0c:8c:5e:bd:31:10:cb: 37:da:f5:88:ea:26:92:68:f1:c9:ee:6a:3b:13:23: ef:cf:d1:c5:6c:dd:27:85:75:ea:26:d7:6a:9a:87: 86:4f:93:36:a9:a5:d2:76:ce:05:03:4c:dc:11:29: f0:19:b0:d0:51:2b:1e:32:48:dc:0a:82:f6:29:5f: f4:d5:d0:41:2e:f3:fc:11:b6:0f:d9:bc:ec:d5:97: 66:80:03:d1:4f:8e:7e:07:6c:d3:b9:80:53:d3:88: 17:03:ed:b1:46:21:d0:67:4d:a1:66:88:1b:04:65: 98:a2:15:24:5b:76:47:9f:75:e8:01:36:c5:51:d4: ed:b3:78:72:3f:d3:ec:95:4e:d8:09:15:c4:5d:f9: ab:2e:dc:c4:31:ef:9f:83:19:68:8d:3c:d0:a9:c8: a6:e7:21:59:17:ef:3f:62:f0:56:76:82:eb:aa:5c: 15:18:27:c4:af:33:e0:d3:46:7d:0a:5f:84:14:f5: 48:ef:e3:15:c0:f3:a4:94:79:c5:ac:1c:5d:e3:2e: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:05:E4:80:5F:6B:14:02:8F:10:26:DD:C2:E5:DD:54:DC:A2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl X509v3 Authority Key Identifier: keyid:FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer sbgp-ipAddrBlock: critical IPv4: 23.178.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:47:d8:ed:e9:7d:4d:c7:82:7a:f1:43:fd:32:94:04:08:fc: fb:b7:54:da:6c:71:5f:7e:b1:83:fe:2c:df:ef:39:4d:70:50: dd:7c:ec:ed:18:d4:b3:fe:8f:08:1d:67:40:79:3e:52:be:43: 4b:6f:f9:60:97:f8:c5:7d:e4:e2:f0:99:15:c0:d3:e1:2f:cb: 72:31:f4:79:54:85:25:59:83:98:0a:ce:85:be:54:c6:02:c7: 90:4c:1b:fc:91:de:07:09:e0:3e:c0:62:0d:2a:76:e5:68:f3: 2b:5d:1f:b8:11:9f:30:43:60:95:39:2b:92:aa:1c:99:d9:82: 6e:62:dc:59:fa:b3:cd:c1:af:ea:e4:e6:0b:fb:69:4c:c6:e4: 69:07:47:c6:ae:2c:9a:84:5e:1c:aa:2e:2d:af:ac:19:cf:82: 77:72:4f:a1:70:0c:b7:86:32:00:87:07:eb:e1:fe:3c:2f:8e: 93:e4:12:5d:00:ff:a5:65:27:ca:ad:4b:6a:91:2e:f2:6d:dc: b2:8c:b7:eb:aa:52:4d:1c:86:72:0b:ce:44:6d:77:b6:9e:d9: ef:8f:05:a9:0d:b0:e6:e2:5a:d1:70:84:aa:e3:4e:71:08:16: 62:f3:fa:60:19:be:6f:f4:74:2c:3a:ff:b4:bd:59:64:93:6f: 50:09:c4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2md3KGRtO44HdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZWNjYTQtZGY4Ny00OWVkLTg5NmEtMzFjOTEyYmE4 Yzk4MB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk NzkzODQ0MmUtZWRkNS00YWUwLWFiMTktMWVjZmZlNTlhMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7UPGKKVRBMHGfSjHJfuJWVNX5bgXBrkQSDP ym3umeRkkKrvuuSIaE7J8rnpb4BkRwRJfQyMXr0xEMs32vWI6iaSaPHJ7mo7EyPv z9HFbN0nhXXqJtdqmoeGT5M2qaXSds4FA0zcESnwGbDQUSseMkjcCoL2KV/01dBB LvP8EbYP2bzs1ZdmgAPRT45+B2zTuYBT04gXA+2xRiHQZ02hZogbBGWYohUkW3ZH n3XoATbFUdTts3hyP9PslU7YCRXEXfmrLtzEMe+fgxlojTzQqcim5yFZF+8/YvBW doLrqlwVGCfErzPg00Z9Cl+EFPVI7+MVwPOklHnFrBxd4y6EWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRiBeSAX2sUAo8QJt3C5d1U3KIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kODBl Y2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5MTJiYThjOTgvMTYxYWM0YTEtMGU3ZC0z ZTViLWIwZWYtNThkZTIwYjFiMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDgwZWNjYTQtZGY4Ny00OWVkLTg5 NmEtMzFjOTEyYmE4Yzk4L2Q4MGVjY2E0LWRmODctNDllZC04OTZhLTMxYzkxMmJh OGM5OC5jcmwwHwYDVR0jBBgwFoAU+tkPw3jWtvxPD72Itim2cZabDRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kODBlY2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5 MTJiYThjOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJH2O3pfU3HgnrxQ/0ylAQI/Pu3VNpscV9+sYP+LN/vOU1wUN187O0Y 1LP+jwgdZ0B5PlK+Q0tv+WCX+MV95OLwmRXA0+Evy3Ix9HlUhSVZg5gKzoW+VMYC x5BMG/yR3gcJ4D7AYg0qduVo8ytdH7gRnzBDYJU5K5KqHJnZgm5i3Fn6s83Br+rk 5gv7aUzG5GkHR8auLJqEXhyqLi2vrBnPgndyT6FwDLeGMgCHB+vh/jwvjpPkEl0A /6VlJ8qtS2qRLvJt3LKMt+uqUk0chnILzkRtd7ae2e+PBakNsObiWtFwhKrjTnEI FmLz+mAZvm/0dCw6/7S9WWSTb1AJxOw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:25 2025 by rpki-client