$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa File: 143a9322-104a-3282-bef5-611d1147110d.roa (raw, json) Hash identifier: CWhEzWV21qqAMyVchIktm45eXyh4o/gnE2haQWNVz10= Subject key identifier: EA:B2:1C:90:5A:0F:E4:F7:7F:A3:AC:12:62:07:6A:B4:15:F8:58:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF6708A1DFD824610080C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.39.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:70:8a:1d:fd:82:46:10:08:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=2a71412b-0e59-4f21-b48f-e852fe464252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:3c:86:32:61:05:f7:e3:b7:8c:43:c3:0c: bb:cf:e9:ae:85:36:ca:7f:18:8e:3f:c6:1c:2f:38: a9:35:a8:7c:fa:6b:4f:28:b0:95:5d:c6:40:2f:85: fa:2d:03:ac:48:1b:41:26:88:1c:e3:9a:48:33:1b: 4b:f8:a9:ec:6d:67:fa:76:a3:b7:f7:07:08:ea:b5: 75:e4:95:4a:77:9e:5a:3c:68:6a:e2:0e:4e:23:0d: e4:a2:41:90:b5:35:d9:dd:34:7e:3d:2b:52:27:83: cf:dd:e0:63:2d:fa:d3:d5:71:ea:0e:2b:41:89:b9: 70:59:f9:dd:cc:94:18:af:44:03:27:e0:f0:6e:0d: 57:60:5f:74:bd:00:76:5a:0c:69:3b:bf:3d:f2:6b: 33:f2:08:b3:07:af:93:94:6b:fe:54:fa:d7:9a:14: 91:2a:9b:61:1d:1f:d9:86:31:34:44:bd:34:a7:ef: f8:26:40:82:bd:db:19:61:85:d0:77:99:86:9c:c2: f0:89:32:9a:6f:5f:82:15:d6:3b:7e:30:54:da:ed: d4:91:67:f8:5f:c0:4d:fc:48:72:cc:bf:89:a9:e4: 30:a0:e2:64:c7:34:9a:3d:30:91:ea:18:64:97:13: 5c:12:e6:08:fb:57:91:28:be:f2:2e:ef:16:cf:fd: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:1C:90:5A:0F:E4:F7:7F:A3:AC:12:62:07:6A:B4:15:F8:58:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143a9322-104a-3282-bef5-611d1147110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:55:f9:21:be:42:9d:b8:29:6e:53:7e:62:36:cd:5a:70:a2: 63:52:7b:37:25:22:99:90:24:cd:80:72:52:e9:61:c6:c6:04: 3a:98:0d:77:f5:13:30:e7:8d:7b:75:c7:e5:c7:7c:37:f5:12: cc:78:b4:35:dc:f0:01:30:e6:f1:19:a3:22:b9:07:8b:37:f0: 88:27:29:ee:2d:96:92:f0:2f:29:58:fc:27:c7:b8:51:b2:4d: 2a:cb:ec:f1:7b:49:c5:38:a0:6c:ad:80:15:db:46:90:92:77: 79:db:ee:e1:3c:86:79:25:91:92:80:02:87:cc:10:92:f9:25: 16:18:b4:e8:5d:ef:83:0d:48:7f:d9:f8:5d:ed:41:bc:ea:e4: f6:0d:f5:50:d9:a4:10:63:cf:9c:29:3f:7e:08:52:06:2f:e9: 24:d7:88:87:c9:54:69:4e:33:0e:13:a9:b7:95:a1:16:1a:90: 1d:7e:ab:ea:aa:d3:ee:43:55:a5:39:7a:ba:ab:b8:6c:2c:68: ac:1e:14:a5:7a:1b:79:f0:8c:b7:2c:66:88:e6:67:af:08:9d: b8:13:78:89:f5:3e:6b:ef:fa:30:d8:95:13:52:c4:d9:b1:e3: 61:da:5e:83:cc:de:86:cc:b0:ac:f4:0a:36:55:e2:6d:10:4b: e7:06:96:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79nCKHf2CRhAIDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MmE3MTQxMmItMGU1OS00ZjIxLWI0OGYtZTg1MmZlNDY0MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8k8hjJhBffjt4xDwwy7z+muhTbKfxiOP8Yc LzipNah8+mtPKLCVXcZAL4X6LQOsSBtBJogc45pIMxtL+KnsbWf6dqO39wcI6rV1 5JVKd55aPGhq4g5OIw3kokGQtTXZ3TR+PStSJ4PP3eBjLfrT1XHqDitBiblwWfnd zJQYr0QDJ+Dwbg1XYF90vQB2WgxpO7898msz8gizB6+TlGv+VPrXmhSRKpthHR/Z hjE0RL00p+/4JkCCvdsZYYXQd5mGnMLwiTKab1+CFdY7fjBU2u3UkWf4X8BN/Ehy zL+JqeQwoOJkxzSaPTCR6hhklxNcEuYI+1eRKL7yLu8Wz/2RtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqyHJBaD+T3f6OsEmIHarQV+FiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQzYTkzMjItMTA0YS0z MjgyLWJlZjUtNjExZDExNDcxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1V+SG+Qp24KW5TfmI2zVpwomNSezclIpmQJM2AclLpYcbGBDqYDXf1 EzDnjXt1x+XHfDf1Esx4tDXc8AEw5vEZoyK5B4s38IgnKe4tlpLwLylY/CfHuFGy TSrL7PF7ScU4oGytgBXbRpCSd3nb7uE8hnklkZKAAofMEJL5JRYYtOhd74MNSH/Z +F3tQbzq5PYN9VDZpBBjz5wpP34IUgYv6STXiIfJVGlOMw4TqbeVoRYakB1+q+qq 0+5DVaU5erqruGwsaKweFKV6G3nwjLcsZojmZ68InbgTeIn1Pmvv+jDYlRNSxNmx 42HaXoPM3obMsKz0CjZV4m0QS+cGlpw= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:35 2024 by rpki-client on console-ams.rpki-client.org