$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa File: 0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa (raw, json) Hash identifier: Q1cYWm0GkM4wQtACAZwz3u9g2ACbtwE8Xt+mvYj+eNU= Subject key identifier: C3:E3:18:F7:A5:5F:41:78:B2:F0:69:B9:1B:01:A8:DD:2A:18:37:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABF7D1D36D028FB596A300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.36.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:f7:d1:d3:6d:02:8f:b5:96:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=66796205-c399-4da7-abca-54d539835153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:6a:d7:3c:36:85:36:8d:b7:1a:44:fe:94: 28:ba:00:8a:ec:9b:ef:d5:b2:48:2c:a4:94:54:6f: 5c:63:0a:e2:cc:89:22:4d:52:f7:a6:7c:98:03:5c: 50:28:01:06:c6:52:6b:85:be:2a:5f:a2:57:44:6e: e8:4d:4a:94:1f:e8:ec:d6:e0:06:6d:06:40:2e:b8: 57:34:5f:3b:0a:c9:93:a8:d7:94:36:8a:7e:4a:1b: 53:36:d0:c7:7d:41:d3:dd:89:fe:de:b9:af:3c:25: cd:03:b6:ec:ba:a3:58:9e:c6:4b:7b:51:ab:14:27: 5b:dd:4e:8d:3f:61:9e:e2:9f:c4:25:98:2f:09:25: 93:eb:6b:85:8f:b8:eb:d0:ce:a4:0b:d4:a9:c3:22: c0:41:17:a4:f5:e6:eb:23:b1:da:7e:58:2b:6d:f4: 3a:b7:d3:06:62:f5:a9:da:60:b9:1d:d6:d8:35:2a: 9e:47:c8:49:06:ca:41:47:f7:71:b4:e8:17:28:3d: d9:17:7b:6d:8c:04:b5:a0:64:5a:cc:7e:78:4c:69: 08:23:46:7e:88:ad:5d:4f:4b:ed:69:64:8d:6e:18: cc:23:29:b0:64:08:03:fd:f6:21:f4:54:f3:6e:a0: a0:b5:d4:bb:b1:6e:6e:c5:d2:29:45:4d:ba:80:97: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E3:18:F7:A5:5F:41:78:B2:F0:69:B9:1B:01:A8:DD:2A:18:37:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:df:16:04:08:f8:f2:97:83:35:ab:49:ee:2c:b5:dd:84:45: 26:eb:6d:d5:4b:cd:93:da:76:8f:68:b9:37:49:91:c7:05:f5: ff:9b:75:1e:bf:c4:4b:e7:13:2d:6d:5d:82:a8:5a:ca:9f:38: e5:f9:2d:34:e9:85:7e:85:09:64:d1:ba:c7:c7:4a:5c:94:b4: c1:68:5c:dc:f3:2f:bb:a2:32:51:c7:41:d5:a3:de:4f:a8:1f: 38:4d:26:0e:de:bf:25:fe:d3:a8:d5:23:17:09:3a:35:ba:2f: 6e:20:43:2b:02:25:48:8a:5f:e5:d2:61:de:08:01:07:c8:99: 80:b5:a9:33:67:95:2c:19:3b:84:ac:6d:48:c5:bf:a8:92:59: c9:26:56:8c:74:c9:6b:9d:43:b1:16:7a:2b:8f:c3:50:bf:27: c9:4a:8f:45:67:6d:56:27:b2:19:62:8a:d9:54:fb:5d:39:96: 93:c3:8b:0b:45:5f:9c:7f:10:96:a7:fe:e3:73:74:c0:52:f1: e4:c5:87:85:71:f2:fa:d1:96:7a:7c:49:f3:26:a3:3e:e9:61: 66:40:17:30:fa:c1:57:65:bf:bd:ca:cc:26:ab:32:3b:cc:a7: ab:d7:06:21:54:0d:ec:27:8d:3e:72:19:86:f9:19:f9:92:56: f2:a5:65:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/fR020Cj7WWowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NjY3OTYyMDUtYzM5OS00ZGE3LWFiY2EtNTRkNTM5ODM1MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTNq1zw2hTaNtxpE/pQougCK7Jvv1bJILKSU VG9cYwrizIkiTVL3pnyYA1xQKAEGxlJrhb4qX6JXRG7oTUqUH+js1uAGbQZALrhX NF87CsmTqNeUNop+ShtTNtDHfUHT3Yn+3rmvPCXNA7bsuqNYnsZLe1GrFCdb3U6N P2Ge4p/EJZgvCSWT62uFj7jr0M6kC9SpwyLAQRek9ebrI7HaflgrbfQ6t9MGYvWp 2mC5HdbYNSqeR8hJBspBR/dxtOgXKD3ZF3ttjAS1oGRazH54TGkII0Z+iK1dT0vt aWSNbhjMIymwZAgD/fYh9FTzbqCgtdS7sW5uxdIpRU26gJc1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPjGPelX0F4svBpuRsBqN0qGDeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg0OWUxYzQtZjljYy0z ODM2LThiMmEtNWU4NjdjMjk1ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELfFgQI+PKXgzWrSe4std2ERSbrbdVLzZPado9ouTdJkccF9f+bdR6/ xEvnEy1tXYKoWsqfOOX5LTTphX6FCWTRusfHSlyUtMFoXNzzL7uiMlHHQdWj3k+o HzhNJg7evyX+06jVIxcJOjW6L24gQysCJUiKX+XSYd4IAQfImYC1qTNnlSwZO4Ss bUjFv6iSWckmVox0yWudQ7EWeiuPw1C/J8lKj0VnbVYnshliitlU+105lpPDiwtF X5x/EJan/uNzdMBS8eTFh4Vx8vrRlnp8SfMmoz7pYWZAFzD6wVdlv73KzCarMjvM p6vXBiFUDewnjT5yGYb5GfmSVvKlZbo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:22 2024 by rpki-client on console-ams.rpki-client.org