$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa File: 17f5970d-36e4-3b44-a225-2f83a9437273.roa (raw, json) Hash identifier: ky3TlO6lm/J/uYTcbhKPVVAuhDakeF+9wEXQYPl3DFo= Subject key identifier: F1:FF:06:29:4F:86:41:0C:BA:90:E4:CC:44:08:F7:1A:87:12:C8:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B696C240202AC244DA07B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:c2:40:20:2a:c2:44:da:07:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=ee0354b3-ad73-4bfa-a7fc-48ea2c8a6cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a2:5d:a7:57:84:e2:4d:36:2d:52:b8:45:2d: 79:c9:32:84:09:77:79:02:34:2d:2f:5c:02:98:73: d0:31:13:fc:47:af:97:e6:87:a2:56:35:40:b9:d1: 8c:fb:4f:a4:48:41:18:d1:38:94:d8:1d:b5:08:09: 80:20:10:06:17:67:37:8b:a8:af:fe:ad:95:91:99: 72:c5:ca:8e:5e:4c:4c:31:da:df:79:31:8a:6f:15: a2:d7:e7:0e:dd:46:79:3e:fe:d8:50:0d:df:7d:75: 91:00:93:9d:4e:2d:45:26:76:d1:0d:9b:de:b5:42: b0:29:cc:1c:c7:3c:56:a5:72:b1:b8:c6:22:ed:14: 83:06:22:eb:f0:ae:d6:03:8f:57:70:89:c3:d0:a7: 95:40:ac:84:c3:6c:fa:88:84:f7:66:c5:9b:bb:09: d1:66:ba:25:83:f4:5a:b4:51:e6:e7:02:13:37:56: 52:c3:71:3d:fe:4c:7d:eb:90:a6:27:71:db:ce:59: 91:ed:98:dc:77:9d:bc:3d:c3:4d:4c:01:1b:85:07: c4:0e:ef:e9:8b:38:c6:33:7a:f0:af:10:51:e4:ea: 39:3f:b1:0a:e6:18:87:40:de:36:39:5b:75:c3:ce: fa:4b:36:a4:f4:04:2f:7b:a8:1a:2f:70:58:47:25: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:06:29:4F:86:41:0C:BA:90:E4:CC:44:08:F7:1A:87:12:C8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:97:d6:0f:80:b9:4e:d6:e3:d9:23:c6:21:91:9a:93:52:ff: 21:65:5f:e6:84:dc:66:b3:53:da:30:3f:c2:0f:3c:74:3b:c6: 39:0a:62:34:f2:6f:25:20:4f:8f:cc:39:7a:90:7c:44:e7:8c: e6:d4:a4:7e:4b:7d:25:fa:0f:9b:96:ec:e7:50:f4:de:eb:21: 10:0e:2b:b2:89:02:2a:9e:e6:95:bd:fa:56:f3:e3:17:58:c1: f4:eb:cc:aa:8f:20:37:66:48:58:b2:ca:ea:fe:66:7a:55:e5: 4c:6a:50:cb:48:bc:70:7a:35:2a:38:b2:e9:a2:29:a8:df:3e: 4f:a0:35:ed:74:27:f0:10:0e:2d:d8:ce:74:08:86:00:bc:00: 29:b5:41:22:2f:d0:79:fb:3b:b0:ec:90:40:d7:a4:29:59:80: 40:78:13:ad:98:1c:6a:83:94:db:e6:f3:18:e5:47:c5:da:ef: 01:93:49:dc:b9:38:6e:d5:49:c8:ee:12:2d:9f:db:3b:51:d7: 32:cc:58:0f:ae:15:b3:48:ba:82:9b:de:64:57:69:54:f4:9a: 4a:2b:d5:27:d4:78:8e:fd:9d:46:ae:08:76:ef:89:fa:ae:c8: e5:23:1a:b9:b2:6a:cb:c4:af:05:98:51:37:e6:1c:60:4b:e1: 62:06:09:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lsJAICrCRNoHuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk ZWUwMzU0YjMtYWQ3My00YmZhLWE3ZmMtNDhlYTJjOGE2Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KJdp1eE4k02LVK4RS15yTKECXd5AjQtL1wC mHPQMRP8R6+X5oeiVjVAudGM+0+kSEEY0TiU2B21CAmAIBAGF2c3i6iv/q2VkZly xcqOXkxMMdrfeTGKbxWi1+cO3UZ5Pv7YUA3ffXWRAJOdTi1FJnbRDZvetUKwKcwc xzxWpXKxuMYi7RSDBiLr8K7WA49XcInD0KeVQKyEw2z6iIT3ZsWbuwnRZrolg/Ra tFHm5wITN1ZSw3E9/kx965CmJ3HbzlmR7Zjcd528PcNNTAEbhQfEDu/pizjGM3rw rxBR5Oo5P7EK5hiHQN42OVt1w876Szak9AQve6gaL3BYRyVjdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH/BilPhkEMupDkzEQI9xqHEsiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdmNTk3MGQtMzZlNC0z YjQ0LWEyMjUtMmY4M2E5NDM3MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuX1g+AuU7W49kjxiGRmpNS/yFlX+aE3GazU9owP8IPPHQ7xjkKYjTy byUgT4/MOXqQfETnjObUpH5LfSX6D5uW7OdQ9N7rIRAOK7KJAiqe5pW9+lbz4xdY wfTrzKqPIDdmSFiyyur+ZnpV5UxqUMtIvHB6NSo4sumiKajfPk+gNe10J/AQDi3Y znQIhgC8ACm1QSIv0Hn7O7DskEDXpClZgEB4E62YHGqDlNvm8xjlR8Xa7wGTSdy5 OG7VScjuEi2f2ztR1zLMWA+uFbNIuoKb3mRXaVT0mkor1SfUeI79nUauCHbvifqu yOUjGrmyasvErwWYUTfmHGBL4WIGCc8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:30 2024 by rpki-client on console-ams.rpki-client.org