$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa File: 39fa9a78-d49e-39e9-ad75-d7076cf13110.roa (raw, json) Hash identifier: 3RZRBWKaPeoe4Iyy2uoPUYu+NDuhVUSUPK2RyJ9vw38= Subject key identifier: E9:67:65:82:63:9E:08:06:32:3D:A7:AD:07:5E:58:74:4F:0E:32:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFB0F3442B119FC30B100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.38.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fb:0f:34:42:b1:19:fc:30:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=0d109aa6-7996-4e03-9960-70d769e191a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:48:66:0d:e2:ee:3a:6e:96:2a:1b:40:94: d5:e6:51:fb:1e:ed:3e:76:d4:65:9b:81:91:93:2c: f0:2b:c6:c8:d1:12:e2:63:a4:9e:5c:6c:dd:1b:35: 0b:10:38:c9:91:e6:79:bd:23:61:0f:34:99:dc:ed: a9:0d:96:c0:30:00:9b:6a:aa:c9:eb:c2:85:85:9e: 7a:65:06:91:44:e6:a5:5d:04:49:67:49:2b:4c:2a: e1:8b:d3:ad:4f:64:f0:93:37:9f:83:9f:dd:75:71: f2:9d:50:ac:f3:65:d5:06:8c:77:a5:a1:7d:28:19: fa:e5:5c:56:45:1e:de:cb:76:42:f3:5b:98:4b:7a: 8d:e9:da:ba:e4:45:17:a8:a6:30:3b:59:22:8c:96: 86:ba:9f:ca:fd:bd:8a:dd:06:f7:3b:4e:4a:5c:d8: 18:53:d1:dc:17:cc:1f:01:3d:dc:ea:85:66:74:6b: c8:47:76:ab:a9:49:a5:d7:9d:12:10:78:e1:e0:ae: a0:6b:f0:05:09:58:e7:79:17:b9:0e:71:0f:bc:40: 0d:d1:67:ee:fb:0c:a8:a0:d4:39:33:a6:b7:3c:47: c9:ee:93:d2:7e:01:7c:d5:2e:3f:09:4f:48:17:59: c5:e1:52:b4:27:85:8e:27:52:49:aa:52:e6:e6:33: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:65:82:63:9E:08:06:32:3D:A7:AD:07:5E:58:74:4F:0E:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:af:87:b9:75:6d:32:25:bf:a7:cc:29:7f:d6:53:d8:0c: 76:b4:51:c9:29:83:d4:b3:49:fb:8a:bb:4b:fa:ec:72:d8:f1: 60:93:d1:a0:a2:5d:8f:b2:1f:55:4d:44:85:24:6d:07:74:a2: 7d:99:fc:2b:12:86:49:5b:27:62:63:2f:7c:3a:68:8a:41:6a: 5f:6b:71:b9:5f:8a:49:2d:80:dd:89:f5:f5:89:58:ee:fb:ae: af:f0:ac:3c:e6:4b:54:f1:cf:95:8e:e2:4f:12:e0:64:79:49: 46:23:d7:03:8e:3d:55:b5:30:a6:4c:85:ef:b6:45:a6:2a:fc: cf:ad:75:5e:c6:13:1c:ed:43:e5:bf:0d:1c:d9:9c:b6:c9:a0: 25:41:05:84:99:0d:44:c5:a1:6c:6d:ed:95:1d:d4:68:1b:9f: a3:86:7d:ce:1a:30:b4:3e:ef:87:59:f7:d8:17:52:41:26:a7: 2b:e3:0b:4f:68:50:39:59:ac:eb:73:87:be:87:64:fa:31:94: f7:97:51:4c:11:9e:05:40:fc:bd:bd:1b:15:28:00:7d:a9:20: 27:85:21:da:db:53:ed:c8:6e:a1:d4:bd:0f:7e:95:82:40:25: e4:73:3a:63:ac:c2:01:ad:df:11:49:d7:15:c6:ef:60:49:9a: 2c:d6:f6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/sPNEKxGfwwsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MGQxMDlhYTYtNzk5Ni00ZTAzLTk5NjAtNzBkNzY5ZTE5MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/5IZg3i7jpuliobQJTV5lH7Hu0+dtRlm4GR kyzwK8bI0RLiY6SeXGzdGzULEDjJkeZ5vSNhDzSZ3O2pDZbAMACbaqrJ68KFhZ56 ZQaRROalXQRJZ0krTCrhi9OtT2Twkzefg5/ddXHynVCs82XVBox3paF9KBn65VxW RR7ey3ZC81uYS3qN6dq65EUXqKYwO1kijJaGup/K/b2K3Qb3O05KXNgYU9HcF8wf AT3c6oVmdGvIR3arqUml150SEHjh4K6ga/AFCVjneRe5DnEPvEAN0Wfu+wyooNQ5 M6a3PEfJ7pPSfgF81S4/CU9IF1nF4VK0J4WOJ1JJqlLm5jMlEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlnZYJjnggGMj2nrQdeWHRPDjLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzlmYTlhNzgtZDQ5ZS0z OWU5LWFkNzUtZDcwNzZjZjEzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFybFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn4r4e5dW0yJb+nzCl/1lPYDHa0Uckpg9SzSfuKu0v67HLY8WCT0aCi XY+yH1VNRIUkbQd0on2Z/CsShklbJ2JjL3w6aIpBal9rcblfikktgN2J9fWJWO77 rq/wrDzmS1Txz5WO4k8S4GR5SUYj1wOOPVW1MKZMhe+2RaYq/M+tdV7GExztQ+W/ DRzZnLbJoCVBBYSZDUTFoWxt7ZUd1Ggbn6OGfc4aMLQ+74dZ99gXUkEmpyvjC09o UDlZrOtzh76HZPoxlPeXUUwRngVA/L29GxUoAH2pICeFIdrbU+3IbqHUvQ9+lYJA JeRzOmOswgGt3xFJ1xXG72BJmizW9mk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:18 2024 by rpki-client on console-ams.rpki-client.org