$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa File: 273977bd-025d-3a7e-8997-f99ebb9a85b8.roa (raw, json) Hash identifier: UjQHuIMpVquGwEjaovjJ4E72F1m4SRK8cCu62D+z9zo= Subject key identifier: 45:0B:58:BE:25:DA:C6:0C:1B:97:24:FC:95:42:39:BF:ED:DD:EF:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A1027E3833642A3345A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 20940 IP address blocks: 23.3.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a1:02:7e:38:33:64:2a:33:45:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=c218ad43-dce9-4ec2-925a-65233c100df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:74:c9:80:f7:91:87:a0:d7:f4:03:2c:6e: 17:61:cb:67:d1:e6:af:d8:5a:52:d7:85:b1:86:cc: c7:27:7c:cb:a6:76:f1:08:1f:92:c3:49:b2:26:22: c4:79:2c:66:60:cb:0c:be:9a:6e:35:ca:51:ed:2c: be:bd:b3:4a:0f:00:21:d6:65:65:63:ac:24:6a:ee: 27:f6:06:98:23:22:ca:3e:ca:04:c0:0c:4d:83:32: 39:16:59:4a:e0:12:80:18:13:73:12:bf:67:99:83: 4a:14:3b:9d:e6:cc:34:a2:3f:76:8f:26:73:9f:ba: b9:05:e9:f3:62:d0:45:89:ee:58:95:36:d1:73:fe: 59:19:06:d9:d5:11:79:94:ef:64:95:de:e0:45:d9: 78:0a:8a:a4:31:7e:4f:b8:ec:fb:6d:6b:62:74:de: d9:e9:08:85:fa:2b:f4:04:cf:25:76:de:e1:73:d8: 8f:c4:fc:f5:f2:78:5d:be:55:d4:5e:2e:37:20:f0: 81:2c:8c:cc:b3:ca:48:7e:06:e0:d0:0b:29:01:8d: 86:5d:ea:1c:76:00:30:f6:0b:06:dd:a1:dc:7d:2c: d1:7c:0c:9f:e5:71:14:9e:63:a1:a2:91:35:ed:c4: 30:73:8e:d3:b0:e7:fd:b5:b8:84:cd:73:7e:2a:46: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0B:58:BE:25:DA:C6:0C:1B:97:24:FC:95:42:39:BF:ED:DD:EF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ac:e0:11:86:ee:e8:87:d2:2e:ad:fe:93:05:1a:99:0a:aa: ce:69:fe:4e:46:73:1f:11:92:c3:09:a1:15:e7:1e:a5:60:c5: f8:6b:5d:74:d6:7f:82:ce:13:fe:7c:b6:8f:f7:9f:ab:01:77: b0:37:af:54:e2:58:83:25:9a:e6:57:a6:c8:e9:64:01:40:da: d6:db:76:b5:70:58:90:d8:48:40:63:fd:e5:54:78:0e:b9:1e: c5:55:54:5f:93:c1:8c:93:bc:de:4f:90:e6:82:43:60:3a:99: 42:14:31:cb:52:72:96:84:95:5f:40:6b:54:4f:d6:7a:40:73: 52:f2:96:11:85:b3:7e:7c:0a:2d:67:9b:2f:be:df:c8:f6:88: 03:e9:3a:9b:9a:6e:18:95:96:45:30:7d:a7:5f:58:f6:9d:c9: b1:e4:b5:dd:0d:08:5c:42:c8:4c:c0:18:6a:d2:10:c4:02:d4: 8e:e4:2b:88:2c:89:79:28:50:83:6e:94:bb:6c:7f:68:22:d9: 57:67:e4:b1:1d:38:f8:e8:0b:0d:ab:b1:2e:07:6a:9e:bd:6b: 60:52:e5:e6:8d:b1:6a:80:ba:fd:73:7b:8f:ac:98:c0:e7:32: 52:a1:25:2d:2c:5d:20:92:67:37:39:7a:00:d2:f6:52:c2:37: f4:8e:36:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloQJ+ODNkKjNFogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk YzIxOGFkNDMtZGNlOS00ZWMyLTkyNWEtNjUyMzNjMTAwZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplN0yYD3kYeg1/QDLG4XYctn0eav2FpS14Wx hszHJ3zLpnbxCB+Sw0myJiLEeSxmYMsMvppuNcpR7Sy+vbNKDwAh1mVlY6wkau4n 9gaYIyLKPsoEwAxNgzI5FllK4BKAGBNzEr9nmYNKFDud5sw0oj92jyZzn7q5Benz YtBFie5YlTbRc/5ZGQbZ1RF5lO9kld7gRdl4CoqkMX5PuOz7bWtidN7Z6QiF+iv0 BM8ldt7hc9iPxPz18nhdvlXUXi43IPCBLIzMs8pIfgbg0AspAY2GXeocdgAw9gsG 3aHcfSzRfAyf5XEUnmOhopE17cQwc47TsOf9tbiEzXN+KkbNKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEULWL4l2sYMG5ck/JVCOb/t3e/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjczOTc3YmQtMDI1ZC0z YTdlLTg5OTctZjk5ZWJiOWE4NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAms4BGG7uiH0i6t/pMFGpkKqs5p/k5Gcx8RksMJoRXnHqVgxfhrXXTW f4LOE/58to/3n6sBd7A3r1TiWIMlmuZXpsjpZAFA2tbbdrVwWJDYSEBj/eVUeA65 HsVVVF+TwYyTvN5PkOaCQ2A6mUIUMctScpaElV9Aa1RP1npAc1LylhGFs358Ci1n my++38j2iAPpOpuabhiVlkUwfadfWPadybHktd0NCFxCyEzAGGrSEMQC1I7kK4gs iXkoUINulLtsf2gi2Vdn5LEdOPjoCw2rsS4Hap69a2BS5eaNsWqAuv1ze4+smMDn MlKhJS0sXSCSZzc5egDS9lLCN/SONlc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:08 2024 by rpki-client on console-ams.rpki-client.org