$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa File: 1b95c541-0faa-37bc-aed5-473b1917e42e.roa (raw, json) Hash identifier: O0j7oXkQa5yB7RUHBOsLCcF165cNOkaFkZnAAUXxTAE= Subject key identifier: 74:4B:5A:72:9C:0F:89:6A:BE:53:39:E1:E5:3A:94:1C:34:C6:07:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584754E0F3A3A2D4EB6769A714C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 20940 IP address blocks: 23.67.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:f3:a3:a2:d4:eb:67:69:a7:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=3ef86265-4c64-410d-805a-54850112d7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:d9:7a:32:89:2d:dc:26:c5:5b:52:fb:83: c0:9f:c3:e9:a4:b3:e1:76:3c:70:27:22:30:33:03: 0c:9b:60:7a:b6:57:67:cc:fd:4d:7b:26:f8:e1:8d: 2a:b5:0d:51:44:4a:7a:87:6c:f7:bc:d2:54:25:16: f6:3e:a1:db:af:73:c1:a0:c5:3f:44:30:64:b1:28: 9b:20:d9:98:be:fe:0a:0b:2a:29:16:13:c3:f8:41: c3:1f:ec:ae:32:0f:4f:12:38:ff:d8:b0:26:e7:6f: a9:ab:74:5c:ed:6c:22:f4:64:7a:b4:52:d5:9c:c4: d0:9d:67:3c:af:49:ce:e3:0e:c4:7f:b7:06:1f:55: f4:a7:de:1e:88:db:23:47:49:1e:c6:b2:09:99:5c: 18:93:f1:c1:5f:8c:c2:26:d3:6f:de:48:3c:76:84: 0f:9c:9d:c1:e1:c4:18:b7:9f:54:db:73:67:de:d3: cb:1d:85:97:b2:19:f2:cb:b2:4c:36:dc:4f:74:86: 87:56:21:30:ad:32:47:7d:4f:70:0b:95:b5:3f:e5: 40:40:60:e3:86:ca:42:93:99:30:6a:67:28:67:a8: 89:72:95:62:27:ea:19:c0:31:5c:ad:61:4c:9f:39: 82:df:e4:c0:c7:94:02:48:ce:cf:e3:62:df:98:5c: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4B:5A:72:9C:0F:89:6A:BE:53:39:E1:E5:3A:94:1C:34:C6:07:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3e:6d:ce:17:8d:e9:d9:e5:c3:cc:d0:d2:65:c0:d7:76:01: c9:9b:37:0a:4d:87:f3:5a:54:1e:db:b9:7f:92:2b:1b:f5:40: 8b:90:d8:fe:d2:e3:e4:d8:ac:a4:a2:9c:6f:b5:04:17:bb:e6: 3e:a5:f3:13:08:d8:f5:5e:08:cc:ae:af:ce:51:39:e9:4a:30: 6a:69:e2:5a:15:85:07:61:1a:00:0d:08:ad:5d:8a:bd:d9:b9: 43:95:ea:03:41:4e:24:23:a2:78:36:4b:34:aa:ea:d7:0e:5d: 5e:c4:02:06:81:b1:da:34:be:76:29:6e:ed:51:db:16:27:4a: fd:65:9f:0c:46:e6:71:86:1c:6b:77:37:50:bb:90:98:2d:0f: 60:8d:70:a0:8b:6d:79:52:f3:09:54:bf:91:55:4f:89:d7:5f: 7d:d2:17:40:e3:cd:07:d4:be:a1:9a:59:55:54:d1:09:35:56: ce:85:a8:6c:31:8e:d4:83:2d:67:dc:a1:7e:e3:e5:da:d1:41: 64:38:56:19:0e:42:fc:ed:c3:55:c7:35:70:40:31:84:c8:02: e2:0a:6e:ba:11:23:2b:c8:9b:a7:6f:7a:58:12:2c:56:d0:6c: 5c:fd:ce:50:37:65:d4:f5:fa:d8:34:ab:ef:6c:96:a8:42:56: 3a:68:93:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4POjotTrZ2mnFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2VmODYyNjUtNGM2NC00MTBkLTgwNWEtNTQ4NTAxMTJkN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ7ZejKJLdwmxVtS+4PAn8PppLPhdjxwJyIw MwMMm2B6tldnzP1Neyb44Y0qtQ1RREp6h2z3vNJUJRb2PqHbr3PBoMU/RDBksSib INmYvv4KCyopFhPD+EHDH+yuMg9PEjj/2LAm52+pq3Rc7Wwi9GR6tFLVnMTQnWc8 r0nO4w7Ef7cGH1X0p94eiNsjR0kexrIJmVwYk/HBX4zCJtNv3kg8doQPnJ3B4cQY t59U23Nn3tPLHYWXshnyy7JMNtxPdIaHViEwrTJHfU9wC5W1P+VAQGDjhspCk5kw amcoZ6iJcpViJ+oZwDFcrWFMnzmC3+TAx5QCSM7P42LfmFyfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRLWnKcD4lqvlM54eU6lBw0xgdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI5NWM1NDEtMGZhYS0z N2JjLWFlZDUtNDczYjE5MTdlNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU+bc4XjenZ5cPM0NJlwNd2AcmbNwpNh/NaVB7buX+SKxv1QIuQ2P7S 4+TYrKSinG+1BBe75j6l8xMI2PVeCMyur85ROelKMGpp4loVhQdhGgANCK1dir3Z uUOV6gNBTiQjong2SzSq6tcOXV7EAgaBsdo0vnYpbu1R2xYnSv1lnwxG5nGGHGt3 N1C7kJgtD2CNcKCLbXlS8wlUv5FVT4nXX33SF0DjzQfUvqGaWVVU0Qk1Vs6FqGwx jtSDLWfcoX7j5drRQWQ4VhkOQvztw1XHNXBAMYTIAuIKbroRIyvIm6dvelgSLFbQ bFz9zlA3ZdT1+tg0q+9slqhCVjpok30= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:03 2024 by rpki-client on console-ams.rpki-client.org