$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f2cc8d-e8c5-380e-8f9f-527aec676263.roa File: 23f2cc8d-e8c5-380e-8f9f-527aec676263.roa (raw, json) Hash identifier: P/0oNvK/6gp/Tyj5lug1OoQw8xZUdbfzo9aPLMOUWeY= Subject key identifier: 00:11:71:BD:44:45:B7:07:13:29:6A:54:90:76:EF:40:B4:70:D9:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847E2DB7BA3032F2E63E4B55500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f2cc8d-e8c5-380e-8f9f-527aec676263.roa Signing time: Fri 15 Nov 2024 09:34:52 +0000 ROA not before: Fri 15 Nov 2024 09:34:52 +0000 ROA not after: Thu 13 Feb 2025 09:34:52 +0000 asID: 20940 IP address blocks: 23.40.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e2:db:7b:a3:03:2f:2e:63:e4:b5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 15 09:34:52 2024 GMT Not After : Feb 13 09:34:52 2025 GMT Subject: CN=16815e4f-c183-4bba-abaa-172bb21ed446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:d1:99:22:da:46:0b:91:a2:28:07:68:09: 8a:4e:4a:1a:c4:e2:54:84:fa:ae:e8:97:96:66:a8: c4:62:64:69:59:f7:05:62:71:8e:47:18:ce:35:b8: 7e:aa:fc:ab:05:18:8a:e8:12:3a:cf:d2:f9:df:11: 98:1a:b7:51:2c:6e:b0:51:3a:48:7d:d5:36:41:51: 08:8d:0e:7b:c0:c6:73:ae:4c:1b:ac:e4:3a:fa:8f: f9:7a:69:ec:dd:e4:bb:e1:a6:ac:e5:0a:ac:52:d1: bc:39:12:b6:cd:50:b1:cf:47:e8:51:7a:a1:69:1c: 58:d1:e0:c5:27:69:e2:6b:4e:4b:3b:2f:61:38:c2: d1:71:52:9d:bc:ec:86:5c:a8:2a:dc:25:56:86:5a: c5:f9:29:73:20:35:8b:57:a8:ba:5c:89:5e:35:01: 17:bb:c8:7b:a0:b1:dd:a0:54:d7:98:f9:b0:18:e5: 07:de:26:f1:79:1a:99:33:08:67:ae:d8:fa:d1:3f: 22:69:1d:a3:7c:7e:b7:8c:d9:4e:a6:8c:f7:5a:94: 01:ba:83:ce:50:5a:a5:e3:5b:55:06:7c:99:08:39: 49:bb:07:42:4d:76:4d:a9:bb:7d:4d:fa:5f:ba:98: 6c:26:33:18:aa:51:50:07:7e:a5:49:b2:6a:37:47: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:71:BD:44:45:B7:07:13:29:6A:54:90:76:EF:40:B4:70:D9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f2cc8d-e8c5-380e-8f9f-527aec676263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ea:dd:4b:e0:b7:15:6f:16:b1:03:d6:8f:1f:83:17:9d:70: 69:f9:c7:b7:c8:90:9d:12:99:d1:e7:d3:72:e2:0d:ba:8a:b2: 91:b8:d2:18:01:fd:e3:80:b7:7d:21:e9:e8:21:15:6b:1a:d4: 61:fc:ec:b3:73:00:4f:46:d1:dc:f9:7e:04:c9:63:46:73:e6: 8f:5a:c1:c2:ca:5f:42:c4:d6:d5:41:4f:af:ab:e0:59:27:a1: b9:ee:b7:a4:40:07:fe:a0:e7:e4:a2:5e:a8:4d:10:ae:c5:17: 99:57:1c:de:2f:4a:8c:9b:5b:65:d1:44:15:b0:5a:c0:46:a0: 48:34:e0:66:8b:07:5e:62:93:42:57:5c:db:32:51:6c:36:64: 6c:d9:59:eb:8b:4f:71:04:20:ef:9f:8a:c3:b6:2f:a7:39:40: cf:d5:3e:51:27:8c:94:47:f6:d7:37:ef:b0:0e:98:c7:db:03: 24:af:9c:e9:dd:6a:c4:59:0d:18:69:df:d9:51:67:4f:80:3b: d3:5e:14:e2:0a:e9:6c:bc:f2:cb:b0:18:8d:69:32:a3:9f:f3: 7e:6a:07:bf:85:b4:a9:fb:7f:ef:21:db:9b:41:20:90:d0:26: f1:25:ba:1c:d5:ab:a1:da:83:75:3e:87:69:83:ce:af:77:b2: 90:94:19:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfi23ujAy8uY+S1VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNTA5MzQ1MloXDTI1MDIxMzA5MzQ1MlowLzEtMCsGA1UEAxMk MTY4MTVlNGYtYzE4My00YmJhLWFiYWEtMTcyYmIyMWVkNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN/RmSLaRguRoigHaAmKTkoaxOJUhPqu6JeW ZqjEYmRpWfcFYnGORxjONbh+qvyrBRiK6BI6z9L53xGYGrdRLG6wUTpIfdU2QVEI jQ57wMZzrkwbrOQ6+o/5emns3eS74aas5QqsUtG8ORK2zVCxz0foUXqhaRxY0eDF J2nia05LOy9hOMLRcVKdvOyGXKgq3CVWhlrF+SlzIDWLV6i6XIleNQEXu8h7oLHd oFTXmPmwGOUH3ibxeRqZMwhnrtj60T8iaR2jfH63jNlOpoz3WpQBuoPOUFql41tV BnyZCDlJuwdCTXZNqbt9TfpfuphsJjMYqlFQB36lSbJqN0evTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAARcb1ERbcHEylqVJB270C0cNnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNmMmNjOGQtZThjNS0z ODBlLThmOWYtNTI3YWVjNjc2MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHq3UvgtxVvFrED1o8fgxedcGn5x7fIkJ0SmdHn03LiDbqKspG40hgB /eOAt30h6eghFWsa1GH87LNzAE9G0dz5fgTJY0Zz5o9awcLKX0LE1tVBT6+r4Fkn obnut6RAB/6g5+SiXqhNEK7FF5lXHN4vSoybW2XRRBWwWsBGoEg04GaLB15ik0JX XNsyUWw2ZGzZWeuLT3EEIO+fisO2L6c5QM/VPlEnjJRH9tc377AOmMfbAySvnOnd asRZDRhp39lRZ0+AO9NeFOIK6Wy88suwGI1pMqOf835qB7+FtKn7f+8h25tBIJDQ JvEluhzVq6Hag3U+h2mDzq93spCUGRg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:07 2024 by rpki-client on console-ams.rpki-client.org