$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa File: 3c023405-e30c-3f94-a89b-98a745767f6a.roa (raw, json) Hash identifier: NRbt34P/Ofl0ra78U0XcaahwzpF56oPyH4JtWZ7cPX0= Subject key identifier: 98:32:4C:50:C5:35:68:10:7F:58:D9:C2:92:D9:12:17:9A:20:A3:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479C1131A8E7A83F25B8339D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.41.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:31:a8:e7:a8:3f:25:b8:33:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=1e3fb9c4-11d6-4f76-b14e-7a0e984104fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:4b:24:b1:ad:bd:46:6c:64:36:31:94:cc: 21:d6:6e:74:b3:67:82:d6:58:79:63:cc:bf:84:a6: e4:50:26:12:34:93:ac:b4:49:48:58:ab:6c:00:c2: 43:9d:fc:6a:c5:11:a1:bc:01:72:15:54:44:fd:19: ea:5f:7a:b7:0a:8a:d7:05:37:39:86:3a:d7:83:fe: 93:1a:e2:44:c0:21:0b:e4:70:95:e9:e9:46:a8:a3: b4:dd:0c:ba:34:5e:c7:b2:fd:54:b1:62:8a:6c:e1: cb:43:df:17:7b:86:f3:34:9d:65:1a:1d:77:b7:d2: 24:9c:cd:ab:be:21:6f:b7:a9:57:37:af:75:52:a5: 97:2e:43:a8:68:3b:c2:a9:11:60:0e:e5:d7:a2:c6: 02:24:a4:bb:53:d1:99:5d:f2:db:cd:03:21:bb:c4: fe:36:22:32:b1:20:d0:47:11:e9:88:62:4c:66:35: 6a:b0:6f:be:85:c0:b8:2b:e0:96:94:4f:b6:ff:a6: c5:57:08:b2:1f:82:03:86:6a:e8:12:98:0b:0b:b8: d5:c5:46:ad:68:e6:78:b1:6e:b7:fa:00:07:9a:8e: 43:b0:4d:69:72:8e:a0:59:e4:36:ea:7e:a5:72:5a: 34:1e:13:7c:d5:a4:b3:5d:06:e3:83:b9:73:44:60: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:4C:50:C5:35:68:10:7F:58:D9:C2:92:D9:12:17:9A:20:A3:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2f:11:e6:a3:66:3e:4d:87:c0:9f:ce:1f:0a:85:7a:09:0a: e3:c9:03:9b:69:f9:d4:dc:91:ff:1a:33:d5:ad:95:e8:97:f1: 17:76:35:94:b5:ac:86:26:63:02:b0:48:b2:7f:7e:e6:26:02: 75:a9:96:75:48:86:0b:5e:72:a7:63:00:fe:fd:50:92:82:0a: d4:9a:c0:a1:9b:38:03:d1:6a:c9:09:37:a4:6c:70:08:09:a1: 24:fd:e7:10:af:ec:08:fa:7c:aa:e4:78:d9:59:16:1f:df:3b: 27:74:58:76:98:af:02:3c:2c:ca:04:68:64:d9:25:3a:46:a4: b2:ed:7a:b3:76:d5:36:e8:d7:9e:f5:03:f3:a7:62:f2:50:83: fd:0a:5f:cf:79:8a:ac:60:7e:62:38:14:70:2c:a2:9c:9f:c0: 10:08:a0:2f:84:75:33:8f:5e:21:7d:f6:f3:98:c8:70:8f:7b: ee:e1:92:93:04:9f:87:f3:56:77:a3:b9:51:3c:57:37:41:4f: c2:93:96:6f:4a:ba:f0:58:6a:54:41:c7:4e:6b:36:60:1f:c0: dd:22:fe:df:98:0b:b5:1c:13:40:e0:77:63:f4:a1:76:97:38: 20:04:c7:d7:63:3a:55:46:23:30:d8:3a:f8:3e:94:02:fc:e3: 0a:ca:9d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecETGo56g/JbgznQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MWUzZmI5YzQtMTFkNi00Zjc2LWIxNGUtN2EwZTk4NDEwNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkepLJLGtvUZsZDYxlMwh1m50s2eC1lh5Y8y/ hKbkUCYSNJOstElIWKtsAMJDnfxqxRGhvAFyFVRE/RnqX3q3CorXBTc5hjrXg/6T GuJEwCEL5HCV6elGqKO03Qy6NF7Hsv1UsWKKbOHLQ98Xe4bzNJ1lGh13t9IknM2r viFvt6lXN691UqWXLkOoaDvCqRFgDuXXosYCJKS7U9GZXfLbzQMhu8T+NiIysSDQ RxHpiGJMZjVqsG++hcC4K+CWlE+2/6bFVwiyH4IDhmroEpgLC7jVxUataOZ4sW63 +gAHmo5DsE1pco6gWeQ26n6lclo0HhN81aSzXQbjg7lzRGBoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgyTFDFNWgQf1jZwpLZEheaIKMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MwMjM0MDUtZTMwYy0z Zjk0LWE4OWItOThhNzQ1NzY3ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFynQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwvEeajZj5Nh8Cfzh8KhXoJCuPJA5tp+dTckf8aM9WtleiX8Rd2NZS1 rIYmYwKwSLJ/fuYmAnWplnVIhgtecqdjAP79UJKCCtSawKGbOAPRaskJN6RscAgJ oST95xCv7Aj6fKrkeNlZFh/fOyd0WHaYrwI8LMoEaGTZJTpGpLLterN21Tbo1571 A/OnYvJQg/0KX895iqxgfmI4FHAsopyfwBAIoC+EdTOPXiF99vOYyHCPe+7hkpME n4fzVnejuVE8VzdBT8KTlm9KuvBYalRBx05rNmAfwN0i/t+YC7UcE0Dgd2P0oXaX OCAEx9djOlVGIzDYOvg+lAL84wrKneM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:19 2024 by rpki-client on console-ams.rpki-client.org