$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa File: 1939975c-3e10-3950-91f1-1904ce380e1a.roa (raw, json) Hash identifier: FjScFj38Amlhr6ljYwK8/tY8ke/ANePk7GNdCv8PooE= Subject key identifier: B8:8F:42:69:00:66:85:F7:30:F4:65:3D:51:50:65:0E:D9:C1:B0:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFE5295481B2DF4B75DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.40.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fe:52:95:48:1b:2d:f4:b7:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=70d0d589-981f-49c3-9ec8-7013c5c2dad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:ab:d8:89:b4:18:ca:5a:45:97:d6:67:5b: 18:99:1b:63:b3:69:e9:fc:be:db:10:b9:6f:75:84: ee:1d:d1:ea:4c:5b:68:e4:c7:b3:32:9e:37:e0:dc: 6b:61:18:95:e7:42:22:4b:a5:9f:2c:26:b9:82:6a: 19:41:bb:a3:4f:cf:ec:ad:46:61:b6:16:66:a6:60: 36:b1:ce:21:05:c5:ea:c0:7f:dd:d2:8a:d2:61:60: 68:40:1d:c2:88:b2:74:84:21:b7:03:29:00:35:c9: 0e:a7:6d:96:0a:fe:72:2b:08:34:bf:d1:c6:ab:67: f1:2d:16:78:91:9c:0f:e8:85:0a:67:7d:2a:68:e8: b9:2b:8e:b8:52:1a:27:50:88:24:5a:bc:4a:70:f7: 3b:7a:84:24:ee:e7:73:e4:db:0e:20:9a:e9:4a:3f: e4:74:79:3b:d2:7f:e0:64:35:97:66:c0:f5:1b:8d: 5c:2d:4d:04:0a:53:fe:0e:cc:e6:6d:9b:38:09:e8: a8:9a:76:4a:39:c2:88:81:36:7c:43:57:cf:55:79: 23:1f:56:a7:29:77:30:1b:7a:8a:70:f5:1a:86:aa: 0a:d1:b8:bb:ee:29:40:e9:bc:c2:50:ec:95:0c:76: 1e:84:0d:72:44:21:b3:cd:54:43:23:8c:52:91:03: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8F:42:69:00:66:85:F7:30:F4:65:3D:51:50:65:0E:D9:C1:B0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e2:55:0f:f6:82:57:5b:07:a3:18:76:17:39:5d:77:71:c9: 04:44:d5:cb:02:32:dd:98:95:f3:47:50:3e:93:d5:b2:24:81: 47:e9:e7:68:8c:a0:7e:ec:22:35:16:b2:d2:5f:b5:b0:43:c9: c9:aa:37:c5:71:b0:ad:d4:ab:bb:9e:9a:93:55:a1:e7:dd:20: a2:37:4e:aa:d5:2d:9f:71:26:6c:8a:ae:04:e7:28:de:fa:12: 7b:cc:71:64:75:32:24:92:6d:61:6c:23:6c:6a:02:b6:a1:8b: 5f:8d:a9:57:2d:35:53:42:ca:c7:75:d0:c5:7a:0e:8a:9b:6d: e7:6b:aa:79:0f:3a:d0:ce:44:91:2b:0e:e4:02:17:8d:e8:c2: 8a:28:8b:4a:12:af:3a:23:7d:ac:a8:87:d0:c2:7a:8c:af:a7: 77:53:c7:7d:03:bb:f1:55:52:e9:18:8b:d7:3d:a1:6f:ad:32: 68:1b:38:90:d0:f0:c1:3f:8c:8f:41:6e:17:7f:9b:b2:30:b0: 7e:73:80:de:68:b3:15:39:4f:90:68:5c:6f:2a:cb:9f:55:98: af:0b:c9:82:6d:60:bc:5f:73:60:f4:68:49:c5:9b:3f:56:25: c7:39:0f:43:a5:c0:b9:6b:ae:4e:bc:7f:b3:74:62:33:b3:51: dc:0d:dd:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/5SlUgbLfS3XaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NzBkMGQ1ODktOTgxZi00OWMzLTllYzgtNzAxM2M1YzJkYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxGr2Im0GMpaRZfWZ1sYmRtjs2np/L7bELlv dYTuHdHqTFto5MezMp434NxrYRiV50IiS6WfLCa5gmoZQbujT8/srUZhthZmpmA2 sc4hBcXqwH/d0orSYWBoQB3CiLJ0hCG3AykANckOp22WCv5yKwg0v9HGq2fxLRZ4 kZwP6IUKZ30qaOi5K464UhonUIgkWrxKcPc7eoQk7udz5NsOIJrpSj/kdHk70n/g ZDWXZsD1G41cLU0EClP+DszmbZs4CeiomnZKOcKIgTZ8Q1fPVXkjH1anKXcwG3qK cPUahqoK0bi77ilA6bzCUOyVDHYehA1yRCGzzVRDI4xSkQOPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiPQmkAZoX3MPRlPVFQZQ7ZwbA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkzOTk3NWMtM2UxMC0z OTUwLTkxZjEtMTkwNGNlMzgwZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyiyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfiVQ/2gldbB6MYdhc5XXdxyQRE1csCMt2YlfNHUD6T1bIkgUfp52iM oH7sIjUWstJftbBDycmqN8VxsK3Uq7uempNVoefdIKI3TqrVLZ9xJmyKrgTnKN76 EnvMcWR1MiSSbWFsI2xqArahi1+NqVctNVNCysd10MV6DoqbbedrqnkPOtDORJEr DuQCF43owoooi0oSrzojfayoh9DCeoyvp3dTx30Du/FVUukYi9c9oW+tMmgbOJDQ 8ME/jI9Bbhd/m7IwsH5zgN5osxU5T5BoXG8qy59VmK8LyYJtYLxfc2D0aEnFmz9W Jcc5D0OlwLlrrk68f7N0YjOzUdwN3d8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:03 2024 by rpki-client on console-ams.rpki-client.org