$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239b2065-f862-3e53-a1d9-30aeb95b330e.roa File: 239b2065-f862-3e53-a1d9-30aeb95b330e.roa (raw, json) Hash identifier: gpYGtpOfhPUrDo6xku3bJ+Y/o64lqZvBnqUWACqL11g= Subject key identifier: D2:F8:9D:76:99:81:2D:78:D7:E9:55:8E:FA:CD:93:CF:3D:E0:F8:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479C112ED6D401637A4AE1E500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239b2065-f862-3e53-a1d9-30aeb95b330e.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.41.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:2e:d6:d4:01:63:7a:4a:e1:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=66c2e1e4-bdf3-4dd8-9a99-96d00c709849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:14:8e:a9:69:10:58:61:05:c4:1c:27:34: 22:54:55:ba:02:36:fb:63:27:12:fd:98:75:a6:16: cc:f1:ac:1a:e9:22:49:41:93:f3:b9:70:6b:2f:52: a0:1e:41:fd:bf:96:11:1d:0d:d1:d7:91:0d:40:5a: e5:09:60:c7:e4:33:2c:f7:24:9b:94:da:47:22:8b: cb:12:4b:a5:c4:0d:b6:61:f5:7b:69:b9:a8:c1:98: 90:e4:37:21:44:a3:46:03:34:c0:c5:a1:8c:d0:05: 72:de:29:30:ed:38:a5:4b:75:76:2e:3c:7d:5f:f7: 29:44:10:98:e6:b3:7e:9b:85:c7:fb:46:0d:2a:c8: af:83:8e:cc:38:49:09:ec:84:0f:68:fc:14:19:36: 55:d2:3d:3a:b5:ea:d5:e6:31:79:b0:08:23:b1:6a: 6a:02:1c:33:d4:5f:30:bb:ce:1e:86:7a:ab:43:cf: 33:c0:8c:38:06:0e:c0:47:79:6b:3b:7b:4a:5a:73: 97:97:5d:89:5b:14:1f:48:21:43:f3:44:d1:c2:88: 25:4d:29:94:3c:29:84:01:5b:44:bd:e1:5e:dc:92: bf:ef:92:3e:df:1c:8c:c7:68:5f:6a:7a:24:9b:42: 2f:6e:f6:e0:6a:23:b7:f0:e6:3a:f0:9f:ec:c8:68: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:9D:76:99:81:2D:78:D7:E9:55:8E:FA:CD:93:CF:3D:E0:F8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239b2065-f862-3e53-a1d9-30aeb95b330e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5d:9a:d0:13:b2:90:cc:58:cd:57:ab:59:9d:34:60:e7:29: 0c:8b:02:62:60:5a:99:fc:b4:ca:c0:a4:33:ca:1a:d8:17:79: b0:e4:50:66:f3:4e:75:d7:d6:ac:ec:54:39:0a:22:c5:20:a7: fa:10:b5:f9:d1:30:82:07:5a:0c:3f:42:c2:0c:2c:eb:7f:7b: e0:4b:86:3d:54:4b:17:c8:a9:ea:cc:ce:eb:7a:1f:3c:e0:b6: b8:0e:e9:41:6f:71:2e:ae:cd:bd:c8:ee:36:f4:47:71:4d:ab: 61:d9:44:0d:d6:2c:dd:d8:7a:ab:c9:cb:5d:f5:e6:b2:fb:52: 22:94:b2:89:02:a5:f9:f3:8a:9e:75:bc:2b:2b:6d:d0:2c:e5: a7:d6:99:fd:52:7f:bb:76:22:2a:fa:f4:48:cd:3b:88:4b:2c: a8:8e:08:fe:da:a3:0d:f8:71:09:8c:fe:54:56:c5:06:f5:5f: 35:88:a4:58:55:92:3a:59:11:da:17:07:fb:9c:03:9b:e2:1d: 2f:ea:2a:cb:1f:97:70:32:27:91:77:62:e5:ce:bd:6d:27:f2: 01:2f:36:0a:c7:1d:c0:7e:55:5c:e3:9e:64:19:bf:38:93:e2: c8:33:42:3c:ea:7c:41:b6:0f:0b:fa:5f:4c:d8:f8:56:f7:3d: fd:c9:ba:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecES7W1AFjekrh5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NjZjMmUxZTQtYmRmMy00ZGQ4LTlhOTktOTZkMDBjNzA5ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbIUjqlpEFhhBcQcJzQiVFW6Ajb7YycS/Zh1 phbM8awa6SJJQZPzuXBrL1KgHkH9v5YRHQ3R15ENQFrlCWDH5DMs9ySblNpHIovL EkulxA22YfV7abmowZiQ5DchRKNGAzTAxaGM0AVy3ikw7TilS3V2Ljx9X/cpRBCY 5rN+m4XH+0YNKsivg47MOEkJ7IQPaPwUGTZV0j06terV5jF5sAgjsWpqAhwz1F8w u84ehnqrQ88zwIw4Bg7AR3lrO3tKWnOXl12JWxQfSCFD80TRwoglTSmUPCmEAVtE veFe3JK/75I+3xyMx2hfanokm0IvbvbgaiO38OY68J/syGhmbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL4nXaZgS141+lVjvrNk8894PipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5YjIwNjUtZjg2Mi0z ZTUzLWExZDktMzBhZWI5NWIzMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJdmtATspDMWM1Xq1mdNGDnKQyLAmJgWpn8tMrApDPKGtgXebDkUGbz TnXX1qzsVDkKIsUgp/oQtfnRMIIHWgw/QsIMLOt/e+BLhj1USxfIqerMzut6Hzzg trgO6UFvcS6uzb3I7jb0R3FNq2HZRA3WLN3YeqvJy1315rL7UiKUsokCpfnzip51 vCsrbdAs5afWmf1Sf7t2Iir69EjNO4hLLKiOCP7aow34cQmM/lRWxQb1XzWIpFhV kjpZEdoXB/ucA5viHS/qKssfl3AyJ5F3YuXOvW0n8gEvNgrHHcB+VVzjnmQZvziT 4sgzQjzqfEG2Dwv6X0zY+Fb3Pf3JugM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:27 2024 by rpki-client on console-fra.rpki-client.org