$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37cfa463-4e56-36e9-8fa9-8358350a915e.roa File: 37cfa463-4e56-36e9-8fa9-8358350a915e.roa (raw, json) Hash identifier: MUvmUapj6y7X98PuB6jX7wQhOncfQRfwyD+G4Lz/Njg= Subject key identifier: 5C:E4:59:68:3C:3C:2D:50:AF:4D:EB:95:14:32:FF:4B:B9:EA:BD:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847600BA899495B3846E652F2A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37cfa463-4e56-36e9-8fa9-8358350a915e.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 20940 IP address blocks: 23.73.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a8:99:49:5b:38:46:e6:52:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=706cdb0e-7d1b-49e5-a142-f25c8cd98b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:14:f2:d4:89:db:00:07:83:70:6a:be:e7: 60:4f:8d:c0:10:d9:d4:6c:e3:79:0e:90:0a:97:39: 7c:94:7a:7d:0f:2b:c0:55:eb:eb:32:c8:b0:f3:c6: e6:09:c7:6a:d2:af:dc:ff:fd:8f:5e:9c:02:4c:59: b8:23:92:17:33:67:1f:b2:71:61:be:57:d2:d4:5b: b5:d9:de:1f:34:60:64:e2:cc:de:d2:72:b3:2e:90: 0c:81:e5:10:40:d5:79:b2:34:de:e6:8d:76:dd:ba: 01:70:bc:36:b3:db:ab:c2:1b:9d:3d:42:43:e2:81: 85:8c:65:fc:33:33:e0:e0:1b:a2:a0:36:d8:37:d7: 21:36:ad:ec:89:b6:97:63:1d:cc:1a:c6:88:9d:e9: 80:e5:53:3f:98:ce:60:30:0a:67:b2:50:7c:59:71: 19:9e:40:85:24:38:2e:b6:51:6b:99:64:c9:b4:52: 6c:b9:66:f9:ea:a4:fa:96:fb:9d:33:17:f6:d2:ae: 06:27:61:ad:a7:a0:bb:cd:e4:9c:86:8b:6e:ae:d6: 62:ea:4b:86:7f:ba:96:bc:9d:33:f3:e2:a6:5e:2e: e4:02:f8:9f:53:d8:de:08:d2:e1:b8:c0:44:8a:77: 91:a1:4a:41:e6:fc:2b:45:84:d5:30:c3:11:e8:ad: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E4:59:68:3C:3C:2D:50:AF:4D:EB:95:14:32:FF:4B:B9:EA:BD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37cfa463-4e56-36e9-8fa9-8358350a915e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:bb:96:a2:d8:21:cc:aa:71:82:a0:63:25:8d:49:fb:eb: 24:1f:ba:a7:5d:e3:92:2b:5a:23:44:06:eb:97:ca:33:a4:0c: 51:b5:23:2e:f5:bb:34:29:2d:18:df:04:ca:2a:b9:9b:b6:5e: e9:74:dd:fd:20:05:51:df:4d:b9:79:ab:78:5e:c6:51:33:70: bd:13:c9:cd:76:c0:22:26:93:0f:43:da:5d:d7:cc:5b:9e:e9: b5:a8:15:66:93:fb:13:42:7a:cc:78:7f:dd:b2:82:2b:55:95: 7d:c8:69:5f:43:ba:94:b5:4c:dc:09:74:fb:11:f7:02:44:d1: b9:0e:04:e9:cb:3a:15:38:04:63:20:13:38:72:d2:c8:bd:29: 01:dc:18:4c:cc:9d:cd:5d:bb:bd:a7:6d:96:f6:0b:0e:b8:8e: 06:bc:a4:99:8d:7a:d2:9b:91:97:43:34:cd:ee:16:b4:fa:2c: 66:87:6a:bb:0b:c7:7c:29:aa:b0:34:94:4e:bc:e8:b5:c0:b8: bf:8b:ef:ee:6d:5a:87:ad:00:19:9e:01:54:7c:88:b0:ff:c8: 61:97:59:98:07:f6:3c:77:9d:8d:10:53:66:ec:73:6d:79:a3: 73:8e:21:1a:21:85:ed:27:83:1e:46:da:37:f1:e4:3b:ba:8f: c4:b0:69:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6iZSVs4RuZS8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzA2Y2RiMGUtN2QxYi00OWU1LWExNDItZjI1YzhjZDk4YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGEU8tSJ2wAHg3BqvudgT43AENnUbON5DpAK lzl8lHp9DyvAVevrMsiw88bmCcdq0q/c//2PXpwCTFm4I5IXM2cfsnFhvlfS1Fu1 2d4fNGBk4sze0nKzLpAMgeUQQNV5sjTe5o123boBcLw2s9urwhudPUJD4oGFjGX8 MzPg4BuioDbYN9chNq3sibaXYx3MGsaInemA5VM/mM5gMApnslB8WXEZnkCFJDgu tlFrmWTJtFJsuWb56qT6lvudMxf20q4GJ2Gtp6C7zeSchoturtZi6kuGf7qWvJ0z 8+KmXi7kAvifU9jeCNLhuMBEineRoUpB5vwrRYTVMMMR6K0z7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzkWWg8PC1Qr03rlRQy/0u56r2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdjZmE0NjMtNGU1Ni0z NmU5LThmYTktODM1ODM1MGE5MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgmu5ai2CHMqnGCoGMljUn76yQfuqdd45IrWiNEBuuXyjOkDFG1Iy71 uzQpLRjfBMoquZu2Xul03f0gBVHfTbl5q3hexlEzcL0Tyc12wCImkw9D2l3XzFue 6bWoFWaT+xNCesx4f92ygitVlX3IaV9DupS1TNwJdPsR9wJE0bkOBOnLOhU4BGMg Ezhy0si9KQHcGEzMnc1du72nbZb2Cw64jga8pJmNetKbkZdDNM3uFrT6LGaHarsL x3wpqrA0lE686LXAuL+L7+5tWoetABmeAVR8iLD/yGGXWZgH9jx3nY0QU2bsc215 o3OOIRohhe0ngx5G2jfx5Du6j8SwaSc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:36 2024 by rpki-client on console-fra.rpki-client.org