$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa File: 0a42d5dc-cb0a-3838-8416-aa824497e482.roa (raw, json) Hash identifier: q8D9WECJFOBeTuKI5kawuMhL5wbI5hhXVuMQ3Ov/pUk= Subject key identifier: D9:3F:F6:3D:26:A8:DB:DB:E6:06:E2:91:FE:3D:44:71:2A:52:67:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFB5154540DCB71B89268 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.39.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fb:51:54:54:0d:cb:71:b8:92:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=bd87f1fc-7afe-4fca-be0d-28f3dd5b4112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:3d:66:13:ad:3a:37:6f:95:08:a0:69:50: e5:aa:d7:4b:0a:76:d9:5b:cd:e9:8b:4d:e3:8b:ff: a8:7f:42:6f:d2:02:ae:d5:3c:ac:8a:c2:83:ab:94: 21:f5:98:e7:3d:e7:63:cc:fe:d3:57:49:67:4f:19: bc:fd:7c:06:89:19:f3:99:07:60:e6:70:62:68:fd: 31:9b:02:34:ff:cc:b1:e7:bd:5d:0c:4c:51:90:f4: 3d:2e:60:d6:dd:5d:ef:00:e3:b3:4b:08:a1:44:82: bb:e7:22:74:d2:0a:9f:ab:e5:57:64:c1:ea:82:0b: 26:cc:23:1a:b8:63:9d:c0:37:10:9b:86:36:34:fc: 7f:3d:aa:a3:60:85:89:95:1b:73:aa:9e:ae:a1:27: 9c:3e:8a:eb:d5:26:09:77:78:82:7d:19:3e:bd:15: 16:e8:66:45:78:ce:51:79:6d:5b:2a:ec:d0:77:9b: d6:a4:d5:1e:b3:61:a8:5e:ff:be:71:28:54:62:44: f9:5f:88:99:26:13:00:10:fc:95:d1:28:e8:37:02: 54:b6:23:35:61:a0:34:83:39:0a:ca:1e:93:fd:16: 4f:e6:b0:28:d4:a7:a7:3f:7e:22:71:fc:16:42:d7: 5e:77:fe:85:8f:d3:45:32:0e:2a:fc:38:82:ad:f4: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:F6:3D:26:A8:DB:DB:E6:06:E2:91:FE:3D:44:71:2A:52:67:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a42d5dc-cb0a-3838-8416-aa824497e482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7d:f2:0e:2f:52:e0:d3:d5:4a:e4:29:c6:22:7c:2e:5a:b8: fe:58:29:99:b3:63:65:88:2c:9a:c3:b3:52:31:9a:6d:40:fa: f9:83:ea:f1:08:bb:e4:ef:b9:6c:85:b5:75:3f:18:68:b6:82: bc:88:f6:d9:d5:9c:c6:42:46:30:2f:98:0f:42:c0:62:b4:03: c6:c9:5f:59:e7:bc:e1:0a:d3:e2:3a:84:d8:e7:db:e3:8d:6c: ff:4b:53:6c:26:b1:2b:1d:43:be:00:3e:a3:1f:a0:13:e6:08: 97:63:9c:8b:24:64:92:45:ef:fc:75:f8:a7:08:21:f6:98:d7: 2b:99:89:95:05:3c:69:e1:d3:24:25:b4:70:16:f7:31:53:b1: d2:ca:81:0f:ec:b7:0f:59:ae:2a:5a:ee:7e:35:54:1d:ba:5d: d4:9f:7b:0a:f4:4e:54:dd:8e:0e:21:27:e2:a5:7d:49:f6:49: c4:89:10:3f:18:53:d4:f1:cb:2e:f0:cc:21:53:48:96:d9:d8: e0:e2:43:1c:41:cb:38:43:da:e6:60:56:34:3c:cd:3f:c5:4e: 06:ec:40:e3:0e:a2:db:74:51:b7:48:e1:b9:32:9b:34:cc:45: db:55:41:a1:ba:06:32:ac:aa:f3:97:a8:e1:1f:50:f6:a3:7b: a9:98:3f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/tRVFQNy3G4kmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk YmQ4N2YxZmMtN2FmZS00ZmNhLWJlMGQtMjhmM2RkNWI0MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX49ZhOtOjdvlQigaVDlqtdLCnbZW83pi03j i/+of0Jv0gKu1TysisKDq5Qh9ZjnPedjzP7TV0lnTxm8/XwGiRnzmQdg5nBiaP0x mwI0/8yx571dDExRkPQ9LmDW3V3vAOOzSwihRIK75yJ00gqfq+VXZMHqggsmzCMa uGOdwDcQm4Y2NPx/PaqjYIWJlRtzqp6uoSecPorr1SYJd3iCfRk+vRUW6GZFeM5R eW1bKuzQd5vWpNUes2GoXv++cShUYkT5X4iZJhMAEPyV0SjoNwJUtiM1YaA0gzkK yh6T/RZP5rAo1KenP34icfwWQtded/6Fj9NFMg4q/DiCrfTiUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk/9j0mqNvb5gbikf49RHEqUmeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE0MmQ1ZGMtY2IwYS0z ODM4LTg0MTYtYWE4MjQ0OTdlNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ98g4vUuDT1UrkKcYifC5auP5YKZmzY2WILJrDs1Ixmm1A+vmD6vEI u+TvuWyFtXU/GGi2gryI9tnVnMZCRjAvmA9CwGK0A8bJX1nnvOEK0+I6hNjn2+ON bP9LU2wmsSsdQ74APqMfoBPmCJdjnIskZJJF7/x1+KcIIfaY1yuZiZUFPGnh0yQl tHAW9zFTsdLKgQ/stw9Zripa7n41VB26XdSfewr0TlTdjg4hJ+KlfUn2ScSJED8Y U9Txyy7wzCFTSJbZ2ODiQxxByzhD2uZgVjQ8zT/FTgbsQOMOott0UbdI4bkymzTM RdtVQaG6BjKsqvOXqOEfUPaje6mYPyk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:22 2024 by rpki-client on console-ams.rpki-client.org