$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ecbda-8396-3e8f-ae0f-12c063218dc7.roa File: 267ecbda-8396-3e8f-ae0f-12c063218dc7.roa (raw, json) Hash identifier: DqrM2IudMpbO+8Kr2mrn6ONqf3GzxboY+l++fwmZUhM= Subject key identifier: 37:39:DC:02:6E:C3:42:97:38:B7:52:C7:0B:B5:60:0A:93:CE:91:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479C11311F32E33F444A355580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ecbda-8396-3e8f-ae0f-12c063218dc7.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 16625 IP address blocks: 23.41.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:31:1f:32:e3:3f:44:4a:35:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=a8461e44-e9c2-4dd3-a511-2aa7b0a1b580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:e6:56:d9:c7:66:bb:42:b9:ff:59:76:c5: 8e:0e:6b:29:89:33:f0:19:d0:16:a0:f6:2c:01:0b: 80:7f:0b:43:ee:73:66:b3:31:a0:41:42:e3:a6:19: 19:de:c1:9d:37:fb:8d:38:b4:5d:93:3b:3a:e2:71: 89:a8:ef:ec:a9:03:b6:80:3a:a1:19:b7:5e:05:8f: 25:2e:50:ff:a2:cc:b4:7e:89:e5:cd:96:46:68:53: 32:90:3b:c1:f1:d5:01:a6:0f:9d:5f:76:49:73:a2: 1e:c5:f1:4d:8e:8a:01:0a:4c:72:2e:b0:2f:d1:b9: c2:57:11:11:b4:7e:05:14:23:9e:c0:71:b9:dc:63: fc:08:6a:3d:7a:ad:6e:cb:ba:dc:4d:80:88:2e:af: f5:8c:82:22:a3:9e:f4:b7:8e:d1:3b:0f:94:59:0b: f7:3d:5b:e0:ec:45:a7:dd:e2:4d:ca:0a:5a:9c:a0: e9:90:58:39:41:98:7d:41:f2:30:8f:ce:c5:d9:7b: 31:3a:9b:4d:d1:45:02:8f:cc:ac:ab:01:88:09:c0: bf:2c:49:ba:4f:96:57:be:07:1d:44:ce:b5:ca:23: 9f:e5:11:8b:95:31:5f:a1:71:d7:37:70:c4:99:cf: 8c:92:0e:d2:5d:76:a2:33:1a:ca:15:e0:7d:72:f3: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:DC:02:6E:C3:42:97:38:B7:52:C7:0B:B5:60:0A:93:CE:91:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ecbda-8396-3e8f-ae0f-12c063218dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:65:33:20:23:f7:d2:a8:c5:89:d4:ee:c0:de:92:4b:e9:10: a9:4d:18:07:21:97:4d:a0:f1:7d:79:8b:36:38:5d:11:b4:a3: 52:eb:76:22:63:e9:a3:3d:45:99:89:4f:57:c7:84:ff:04:ce: 25:51:d7:79:f9:cc:5d:e8:0e:c6:e5:ae:0d:fc:06:44:85:26: a3:e6:db:da:eb:d6:b9:1a:ae:7e:7d:14:dd:b3:bc:56:6f:50: 7a:ec:21:fe:29:e7:9a:a2:15:7e:36:b9:4b:78:2e:1e:2e:25: 5f:74:cf:c0:f9:17:33:46:ec:52:9c:fa:bd:38:03:77:07:aa: 3f:bb:b5:35:ae:c6:5b:90:4f:3e:8b:87:e9:79:11:dd:e6:b7: 5c:97:a0:c1:fc:18:9e:91:7f:51:ac:0d:13:c6:ed:b6:25:23: 50:9e:d5:de:67:27:25:2f:21:43:c9:cd:32:51:f3:4c:d1:e9: 62:64:88:d7:83:8f:88:6d:7a:02:e6:02:e8:96:56:28:11:2f: 02:33:70:2b:79:bc:c3:ae:3a:0a:5d:de:42:e2:d0:3f:1a:55: d8:7b:08:f2:58:b3:98:58:db:e2:4a:be:ed:3c:89:a8:2a:da: d4:1c:f5:43:7d:87:16:60:fa:a1:67:88:60:34:6a:29:e2:c4: 2d:3e:2f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecETEfMuM/REo1VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTg0NjFlNDQtZTljMi00ZGQzLWE1MTEtMmFhN2IwYTFiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5DmVtnHZrtCuf9ZdsWODmspiTPwGdAWoPYs AQuAfwtD7nNmszGgQULjphkZ3sGdN/uNOLRdkzs64nGJqO/sqQO2gDqhGbdeBY8l LlD/osy0fonlzZZGaFMykDvB8dUBpg+dX3ZJc6IexfFNjooBCkxyLrAv0bnCVxER tH4FFCOewHG53GP8CGo9eq1uy7rcTYCILq/1jIIio570t47ROw+UWQv3PVvg7EWn 3eJNygpanKDpkFg5QZh9QfIwj87F2XsxOptN0UUCj8ysqwGICcC/LEm6T5ZXvgcd RM61yiOf5RGLlTFfoXHXN3DEmc+Mkg7SXXaiMxrKFeB9cvNXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc53AJuw0KXOLdSxwu1YAqTzpHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjY3ZWNiZGEtODM5Ni0z ZThmLWFlMGYtMTJjMDYzMjE4ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFymoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBlMyAj99KoxYnU7sDekkvpEKlNGAchl02g8X15izY4XRG0o1LrdiJj 6aM9RZmJT1fHhP8EziVR13n5zF3oDsblrg38BkSFJqPm29rr1rkarn59FN2zvFZv UHrsIf4p55qiFX42uUt4Lh4uJV90z8D5FzNG7FKc+r04A3cHqj+7tTWuxluQTz6L h+l5Ed3mt1yXoMH8GJ6Rf1GsDRPG7bYlI1Ce1d5nJyUvIUPJzTJR80zR6WJkiNeD j4htegLmAuiWVigRLwIzcCt5vMOuOgpd3kLi0D8aVdh7CPJYs5hY2+JKvu08iagq 2tQc9UN9hxZg+qFniGA0ainixC0+L58= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:44 2024 by rpki-client on console-ams.rpki-client.org