$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa File: 39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa (raw, json) Hash identifier: 4vUNlvvlJZqhMDiN7qUqujXPks/dYBZBhDE4VBg1aBM= Subject key identifier: C4:57:D0:C9:23:29:A7:72:47:AB:C0:02:55:9F:56:DA:35:95:A0:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847F1551A1C23D56EA95436E2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 20940 IP address blocks: 23.32.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:1a:1c:23:d5:6e:a9:54:36:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6abf72a1-ac87-4304-9106-e86404a90c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:6a:61:45:7b:57:c7:25:69:03:91:2a:93: a7:31:9e:39:b7:1b:81:c0:11:db:b9:8e:06:5e:65: a9:4a:c9:93:b8:03:bf:ec:5e:c0:fb:dd:a9:db:71: dd:5b:fb:78:6d:de:da:b9:5c:39:5b:f3:1b:8a:c6: d5:ef:db:0e:cd:9a:64:06:b1:59:4a:9f:92:98:cf: c1:b6:6f:1e:89:84:5a:aa:cd:b1:54:a1:4d:e3:63: 70:1b:99:57:12:16:9a:c7:7b:1b:93:64:a2:be:8f: c6:d4:0e:0a:be:74:c8:e0:a4:89:39:6f:fe:a7:85: e9:76:e6:f7:e7:15:f8:92:e2:06:5d:bb:01:e4:c8: 63:ba:8c:b5:86:c1:0a:84:fa:f0:c1:77:d2:70:ce: 3a:c8:b1:3e:0b:c4:54:ff:ff:05:81:ab:36:55:58: f0:85:c4:63:23:3d:a6:40:93:07:5e:28:7f:c0:35: 9c:e5:b9:85:b9:ef:2e:19:63:ee:63:7e:54:ad:0f: 6e:91:4b:25:bc:50:01:36:2e:b7:8c:a5:26:29:ed: a6:57:f4:a6:22:e1:26:10:24:23:94:2e:97:42:89: 20:93:5b:b1:a6:17:df:b0:48:85:ba:12:f0:2c:54: 5b:55:d8:2a:eb:6b:9b:44:49:42:dc:c3:f0:22:9c: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:57:D0:C9:23:29:A7:72:47:AB:C0:02:55:9F:56:DA:35:95:A0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:76:dd:24:69:bd:f2:97:bb:3e:ff:b6:0b:47:d5:c9:48:f1: 69:b5:d5:a0:66:22:27:2f:6b:57:dc:d1:48:d6:41:bc:04:83: 40:6a:3c:25:ea:ad:04:a8:52:73:1b:35:46:cc:97:59:61:1f: 22:c8:d5:af:6a:1f:df:23:0e:52:aa:ff:3f:a0:d3:22:de:9c: 24:d5:7f:db:20:ab:b8:12:4a:9a:ee:81:0e:60:93:c0:6d:ba: d6:2a:6a:e1:64:18:d9:11:3b:68:15:65:ad:08:93:87:19:00: c9:63:58:73:62:4a:0e:59:4d:6a:95:da:ac:45:89:bb:2e:c7: 6c:dd:7b:6f:01:08:fa:65:a8:49:44:19:bb:d7:8a:b4:ce:d8: 4c:bb:f3:e6:60:dc:18:29:1c:01:08:d7:e8:d2:d7:07:dd:4a: cb:e3:67:60:b2:04:14:50:e9:65:40:51:44:2b:a2:6f:d0:52: f3:f0:1c:ae:2f:60:aa:05:64:7c:fd:4f:f0:60:27:37:07:a6: f5:bd:d5:59:7d:d0:62:35:0c:9b:7d:17:79:e4:0b:8c:c6:1c: 67:fc:11:04:71:7f:fb:0b:a9:db:9c:ce:e5:08:70:5a:20:cf: 43:8b:23:e8:0c:c5:17:44:bc:ac:1c:b5:d1:df:8a:5a:50:81: 6d:5a:7f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRocI9VuqVQ24sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NmFiZjcyYTEtYWM4Ny00MzA0LTkxMDYtZTg2NDA0YTkwYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhShqYUV7V8claQORKpOnMZ45txuBwBHbuY4G XmWpSsmTuAO/7F7A+92p23HdW/t4bd7auVw5W/MbisbV79sOzZpkBrFZSp+SmM/B tm8eiYRaqs2xVKFN42NwG5lXEhaax3sbk2Sivo/G1A4KvnTI4KSJOW/+p4Xpdub3 5xX4kuIGXbsB5Mhjuoy1hsEKhPrwwXfScM46yLE+C8RU//8Fgas2VVjwhcRjIz2m QJMHXih/wDWc5bmFue8uGWPuY35UrQ9ukUslvFABNi63jKUmKe2mV/SmIuEmECQj lC6XQokgk1uxphffsEiFuhLwLFRbVdgq62ubRElC3MPwIpwc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRX0MkjKadyR6vAAlWfVto1laA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzljMDZhZDYtYzZkMy0z NDI3LTkzZjEtYzdhZjcyNTlhNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd23SRpvfKXuz7/tgtH1clI8Wm11aBmIicva1fc0UjWQbwEg0BqPCXq rQSoUnMbNUbMl1lhHyLI1a9qH98jDlKq/z+g0yLenCTVf9sgq7gSSprugQ5gk8Bt utYqauFkGNkRO2gVZa0Ik4cZAMljWHNiSg5ZTWqV2qxFibsux2zde28BCPplqElE GbvXirTO2Ey78+Zg3BgpHAEI1+jS1wfdSsvjZ2CyBBRQ6WVAUUQrom/QUvPwHK4v YKoFZHz9T/BgJzcHpvW91Vl90GI1DJt9F3nkC4zGHGf8EQRxf/sLqduczuUIcFog z0OLI+gMxRdEvKwctdHfilpQgW1af7I= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:36 2024 by rpki-client on console-fra.rpki-client.org