$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa File: 234c40d2-ad38-350f-a587-7c39d6b7f843.roa (raw, json) Hash identifier: dY3YI2aWanIHlHfkXdms5MO5nHIrQnYyCLTAXHctIv0= Subject key identifier: 8F:D3:2E:93:30:91:04:25:88:07:84:40:BF:0B:ED:62:3B:23:93:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36CC1A5C0FF135492E4240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.55.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:cc:1a:5c:0f:f1:35:49:2e:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=29983bda-4424-48d4-bdb4-8f9d45bce743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:45:5d:85:9c:7d:95:2f:3b:db:de:62:3b: 9b:27:63:94:e4:cf:ed:c5:ac:f2:c4:af:68:c4:60: 42:58:55:8b:09:e1:04:91:54:bd:47:9c:34:e9:b2: 0e:6e:1f:96:d6:0b:89:1c:f4:2a:5f:76:a9:92:e2: 93:5d:82:cb:2e:d8:3d:6d:21:ee:be:8a:15:53:30: f3:db:1f:09:10:d4:f3:8b:b0:f2:3c:98:18:46:8a: aa:ce:7f:01:dd:26:46:7d:9a:ec:54:8c:af:36:2f: 14:14:f5:e4:1a:13:95:ec:3d:33:ee:7e:ae:c5:43: 40:c7:75:fa:b7:fa:92:0e:bd:38:9c:d3:76:a6:31: 5a:fe:a3:f8:60:28:38:9f:79:04:df:cb:18:d1:89: 3f:70:b2:74:1f:28:96:94:60:14:c0:fa:39:f1:3a: 49:f1:4c:a5:9c:f7:a2:3d:ed:7e:d6:bc:ee:6a:d7: d7:7a:84:01:08:45:f6:7f:95:8a:a9:54:e0:91:a9: ad:79:8a:9b:bb:dc:dc:96:44:27:07:5e:29:6a:26: 8a:c5:11:a2:6d:a8:71:d6:2c:da:20:f9:e1:7b:87: fc:0a:f9:b6:d3:8f:dc:19:be:cb:96:64:6a:58:de: 95:19:b9:a8:32:84:26:db:64:aa:25:a1:2c:50:55: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:2E:93:30:91:04:25:88:07:84:40:BF:0B:ED:62:3B:23:93:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2b:83:df:69:1e:43:57:ed:bc:45:0d:d1:6b:a3:1c:9b:06: 4a:ae:b1:e4:f8:fe:9f:ca:c7:89:89:8b:37:39:aa:82:72:01: 25:23:2e:d2:77:49:5a:09:4c:12:f1:c1:e7:2e:33:c2:9e:09: a4:be:59:92:69:5f:0d:cc:02:5f:2b:d1:05:ac:0e:c5:ce:eb: 9b:bc:20:36:d4:05:3a:16:4a:63:fc:be:0e:2e:40:06:55:f4: e9:ab:69:8d:61:c0:72:d5:16:b2:3e:e9:3f:ba:b8:c6:33:4c: 47:45:59:0a:04:ff:b4:93:f1:98:33:de:e2:d1:ea:4b:8d:dc: e9:9c:8e:2f:a3:92:aa:2f:13:43:9b:90:b0:d3:5b:59:dc:64: f5:02:55:b4:1b:fb:58:fa:46:7b:02:f8:d3:b2:0b:40:ef:98: 9b:e9:e9:ba:d4:b6:c3:6b:ed:3c:10:82:fd:ee:4f:ea:27:63: 8e:52:a6:87:a3:1c:53:85:36:30:04:45:bf:d2:33:f2:9c:fe: 5e:da:a2:eb:08:9d:6f:16:61:b8:b5:98:a1:19:d7:43:3e:98: 0e:37:a5:c5:f9:d9:35:db:72:7e:17:17:38:17:68:a3:f0:f6: c7:b3:2b:bd:fc:16:0b:9c:6c:49:f1:fb:05:87:27:17:f1:52: d6:3d:03:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNswaXA/xNUkuQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk Mjk5ODNiZGEtNDQyNC00OGQ0LWJkYjQtOGY5ZDQ1YmNlNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmktFXYWcfZUvO9veYjubJ2OU5M/txazyxK9o xGBCWFWLCeEEkVS9R5w06bIObh+W1guJHPQqX3apkuKTXYLLLtg9bSHuvooVUzDz 2x8JENTzi7DyPJgYRoqqzn8B3SZGfZrsVIyvNi8UFPXkGhOV7D0z7n6uxUNAx3X6 t/qSDr04nNN2pjFa/qP4YCg4n3kE38sY0Yk/cLJ0HyiWlGAUwPo58TpJ8UylnPei Pe1+1rzuatfXeoQBCEX2f5WKqVTgkamteYqbu9zclkQnB14paiaKxRGibahx1iza IPnhe4f8Cvm204/cGb7LlmRqWN6VGbmoMoQm22SqJaEsUFWiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/TLpMwkQQliAeEQL8L7WI7I5P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM0YzQwZDItYWQzOC0z NTBmLWE1ODctN2MzOWQ2YjdmODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzeBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgrg99pHkNX7bxFDdFroxybBkquseT4/p/Kx4mJizc5qoJyASUjLtJ3 SVoJTBLxwecuM8KeCaS+WZJpXw3MAl8r0QWsDsXO65u8IDbUBToWSmP8vg4uQAZV 9OmraY1hwHLVFrI+6T+6uMYzTEdFWQoE/7ST8Zgz3uLR6kuN3Omcji+jkqovE0Ob kLDTW1ncZPUCVbQb+1j6RnsC+NOyC0DvmJvp6brUtsNr7TwQgv3uT+onY45Spoej HFOFNjAERb/SM/Kc/l7aousInW8WYbi1mKEZ10M+mA43pcX52TXbcn4XFzgXaKPw 9sezK738FgucbEnx+wWHJxfxUtY9A2s= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:27 2024 by rpki-client on console-fra.rpki-client.org