$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa File: 398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa (raw, json) Hash identifier: q2GjxJLvTUpz4/zzJCIaBBqxHGsuKXnvbj/3Ci/RXKA= Subject key identifier: F1:37:87:84:39:6F:96:1B:50:34:FA:0C:02:FF:36:E8:C9:3B:90:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76CECB9A7C9668040C1780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.43.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ce:cb:9a:7c:96:68:04:0c:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=90d4038a-a67b-4bd8-9e65-45a786e85228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:1a:57:c2:0a:ea:8a:c2:3d:26:e6:2a:26: 5e:0b:09:12:b0:98:0a:08:0a:77:d5:15:e3:38:59: bc:86:4f:77:21:35:47:fe:44:12:9f:8d:9c:0e:7e: a4:71:62:17:87:33:bf:22:d9:24:14:08:57:7b:a1: 14:b3:93:17:ef:bc:5a:95:ae:b8:5e:ab:c3:bb:17: ef:bf:73:31:de:62:d5:5d:bb:e1:91:97:d6:75:07: 49:3c:fc:27:cc:34:20:5d:82:fb:86:12:9c:ce:2d: 35:cc:29:c3:6e:f7:b2:d9:33:9c:58:44:dd:af:ae: 24:50:d1:e7:53:4d:74:7a:32:20:0c:9c:21:50:1d: a9:2a:69:32:63:a9:4c:e0:49:0a:a0:2e:21:6d:a6: d6:13:89:a7:30:4e:4c:20:90:a0:4d:f2:74:43:9b: 9e:68:5d:89:8d:84:c6:e2:6c:89:cb:a9:58:e2:4e: 4d:c9:78:41:69:99:30:44:38:5b:a4:1b:d4:a7:c0: 40:37:7a:15:75:05:71:a7:df:4a:5f:bc:fc:23:a0: 06:c8:a1:d8:d9:6b:9d:58:82:e8:e1:ed:d4:23:f2: 1e:96:a3:0e:4a:2f:f2:23:ca:22:49:55:23:f9:55: dc:19:14:2e:f4:2a:32:f4:16:0f:3e:5a:74:85:bf: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:87:84:39:6F:96:1B:50:34:FA:0C:02:FF:36:E8:C9:3B:90:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:24:25:69:87:47:2c:b6:41:65:36:d2:56:ed:13:de:ee:9f: d0:4f:c5:77:fa:c6:4b:85:5d:ee:78:47:a0:23:3d:89:f0:61: 05:f6:de:cb:7e:75:55:76:b6:33:59:ce:d6:99:ae:60:5e:92: c0:07:2e:58:e8:96:e2:c2:d6:a4:bd:1e:6d:06:a1:61:30:38: 0d:c6:d5:33:b1:46:c3:98:51:1b:01:e7:55:ac:20:01:d0:f7: 19:98:40:d0:ee:d0:10:83:37:00:48:e0:bc:92:c7:57:00:b6: 65:3f:ce:31:e7:51:31:84:d7:80:1c:d5:cf:20:1e:15:32:34: 97:aa:73:d0:e0:f6:5a:57:79:35:9d:f7:24:c6:95:4f:ae:be: 81:1e:a9:aa:1d:b7:63:79:f7:8e:07:9a:ae:03:35:91:77:72: f2:f2:73:2d:d0:c9:fd:44:07:3b:ec:ba:71:79:5b:0d:23:50: 9b:34:fc:47:fd:9c:bb:26:2b:68:88:45:8b:f4:5d:04:0c:51: d8:5d:b2:79:6b:7e:04:7a:23:05:ca:8b:69:a1:4f:ef:0e:d0: bf:ba:ab:10:aa:5f:18:61:24:d1:ab:4a:db:2c:7f:68:20:cb: 33:0a:66:11:c5:e5:b4:ca:78:96:28:78:93:78:27:0d:aa:97: eb:7a:b6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedds7LmnyWaAQMF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk OTBkNDAzOGEtYTY3Yi00YmQ4LTllNjUtNDVhNzg2ZTg1MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqMaV8IK6orCPSbmKiZeCwkSsJgKCAp31RXj OFm8hk93ITVH/kQSn42cDn6kcWIXhzO/ItkkFAhXe6EUs5MX77xala64XqvDuxfv v3Mx3mLVXbvhkZfWdQdJPPwnzDQgXYL7hhKczi01zCnDbvey2TOcWETdr64kUNHn U010ejIgDJwhUB2pKmkyY6lM4EkKoC4hbabWE4mnME5MIJCgTfJ0Q5ueaF2JjYTG 4myJy6lY4k5NyXhBaZkwRDhbpBvUp8BAN3oVdQVxp99KX7z8I6AGyKHY2WudWILo 4e3UI/IelqMOSi/yI8oiSVUj+VXcGRQu9Coy9BYPPlp0hb/s4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE3h4Q5b5YbUDT6DAL/NujJO5AsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk4ZmNjMzMtNzZjNi0z YTA4LWFkNGQtMmFkODBjY2Y3YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgkJWmHRyy2QWU20lbtE97un9BPxXf6xkuFXe54R6AjPYnwYQX23st+ dVV2tjNZztaZrmBeksAHLljoluLC1qS9Hm0GoWEwOA3G1TOxRsOYURsB51WsIAHQ 9xmYQNDu0BCDNwBI4LySx1cAtmU/zjHnUTGE14Ac1c8gHhUyNJeqc9Dg9lpXeTWd 9yTGlU+uvoEeqaodt2N5944Hmq4DNZF3cvLycy3Qyf1EBzvsunF5Ww0jUJs0/Ef9 nLsmK2iIRYv0XQQMUdhdsnlrfgR6IwXKi2mhT+8O0L+6qxCqXxhhJNGrStssf2gg yzMKZhHF5bTKeJYoeJN4Jw2ql+t6tvY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:18 2024 by rpki-client on console-ams.rpki-client.org