$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa File: 28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa (raw, json) Hash identifier: MDtcrkA134st36cKETJu5V9JpKeRrCukR3yWkm8TM7s= Subject key identifier: 06:84:85:6F:11:5F:C4:6C:92:05:1A:9C:AF:C6:C2:1F:76:C8:B0:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478E1BD3A001E11791531F6B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.32.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d3:a0:01:e1:17:91:53:1f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=1b7ea8d6-41b3-49f7-b080-62db1ac94828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:af:c0:13:7c:b7:06:80:f1:c6:ed:91:e9: ae:82:88:13:6d:09:2c:07:18:ac:7e:82:e9:17:6d: 86:de:ea:42:4c:51:9a:ff:23:f5:f1:11:e1:00:a7: 99:e9:d8:cf:0f:6b:f1:fe:60:47:72:02:39:15:2e: 7a:a1:c6:16:f3:4f:0e:6c:88:d5:66:61:91:18:4e: 14:33:26:0d:c4:6d:54:9f:68:4a:6a:8e:7d:ec:73: 68:9f:2a:cf:0f:d1:8c:f2:41:ad:a6:39:c0:45:5d: e0:45:46:bb:94:4f:f0:e9:aa:f4:64:ba:ae:f7:d2: bc:ca:f6:26:b1:12:4d:56:6f:38:34:b5:1b:b4:c8: 71:2e:b5:bd:ec:81:6b:24:c9:26:bb:63:ba:00:db: a0:b1:a9:01:1b:e8:43:ba:90:2c:ec:00:15:d7:ab: 3f:ee:c7:1c:9e:df:2a:0c:17:87:c9:90:53:f2:82: 48:02:f1:0f:db:de:8d:db:e4:41:08:ab:e2:af:61: ed:45:34:ad:7f:32:75:b7:4f:98:c4:13:6c:8c:72: db:1c:4a:41:03:25:4f:a2:be:b8:b7:33:29:e8:16: 9e:f8:04:26:4a:bb:c6:aa:c9:6e:17:95:e9:d5:22: 63:ee:05:89:f5:ce:ef:1c:90:13:f7:d7:dd:77:f6: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:84:85:6F:11:5F:C4:6C:92:05:1A:9C:AF:C6:C2:1F:76:C8:B0:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e5:c3:aa:0e:83:5a:d7:80:f1:82:69:79:57:0a:10:86:37: a1:a6:b3:12:55:13:b6:03:f6:24:67:b4:8f:ae:27:1d:5e:67: 34:ef:67:65:45:b2:d9:aa:c2:e3:e1:b9:98:9c:26:f9:a9:00: 27:3f:34:e6:ef:a4:a0:8c:ac:ea:6d:e5:e1:20:04:5f:bc:24: 6b:21:54:e7:23:f4:35:8a:29:e8:28:d2:2c:f2:1d:ac:5e:36: aa:62:96:f9:1d:9a:cf:6c:0c:0f:66:4f:ae:d3:70:b3:9c:48: 18:9b:fd:48:e3:9d:e1:c1:bd:b8:38:b3:c6:75:bf:25:f3:9b: ae:05:2c:6a:00:9a:5f:b0:fb:0a:8e:5e:05:fd:36:bc:e7:d4: 2e:c9:43:6f:86:a0:db:3f:5c:81:f3:5b:84:72:97:72:c4:24: 61:95:56:74:fb:2e:6e:90:79:f2:f8:7b:c3:86:d1:80:04:36: 99:1f:60:6f:36:5f:ae:6f:71:db:5c:ce:15:df:22:44:8e:d4: 6f:83:92:4f:86:3a:34:e1:e4:54:7f:5c:ce:b4:d2:a4:14:e4: 66:15:0b:16:49:ca:71:94:62:e6:e3:0f:c1:29:bb:70:ae:eb: c4:26:86:51:4f:5b:9b:1e:24:e5:29:b6:da:e5:f8:4c:d0:a9: 27:cd:11:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9OgAeEXkVMfawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MWI3ZWE4ZDYtNDFiMy00OWY3LWIwODAtNjJkYjFhYzk0ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2GvwBN8twaA8cbtkemugogTbQksBxisfoLp F22G3upCTFGa/yP18RHhAKeZ6djPD2vx/mBHcgI5FS56ocYW808ObIjVZmGRGE4U MyYNxG1Un2hKao597HNonyrPD9GM8kGtpjnARV3gRUa7lE/w6ar0ZLqu99K8yvYm sRJNVm84NLUbtMhxLrW97IFrJMkmu2O6ANugsakBG+hDupAs7AAV16s/7sccnt8q DBeHyZBT8oJIAvEP296N2+RBCKvir2HtRTStfzJ1t0+YxBNsjHLbHEpBAyVPor64 tzMp6Bae+AQmSrvGqsluF5Xp1SJj7gWJ9c7vHJAT99fdd/bAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaEhW8RX8RskgUanK/Gwh92yLBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1ODllZWEtZDlmYy0z ZTk3LThjZjktYThmZDdlODlmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzlw6oOg1rXgPGCaXlXChCGN6GmsxJVE7YD9iRntI+uJx1eZzTvZ2VF stmqwuPhuZicJvmpACc/NObvpKCMrOpt5eEgBF+8JGshVOcj9DWKKego0izyHaxe Nqpilvkdms9sDA9mT67TcLOcSBib/UjjneHBvbg4s8Z1vyXzm64FLGoAml+w+wqO XgX9Nrzn1C7JQ2+GoNs/XIHzW4Ryl3LEJGGVVnT7Lm6QefL4e8OG0YAENpkfYG82 X65vcdtczhXfIkSO1G+Dkk+GOjTh5FR/XM600qQU5GYVCxZJynGUYubjD8Epu3Cu 68QmhlFPW5seJOUpttrl+EzQqSfNETs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:09 2024 by rpki-client on console-ams.rpki-client.org