$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa File: 3de0104b-158b-38a7-afc4-44c0ac2d311d.roa (raw, json) Hash identifier: FBUD1yHJzBl0So6LJjSOBZAb8YiDjn/Bcav1REdty6s= Subject key identifier: 81:30:D6:FE:E7:B9:45:D8:0E:63:46:03:9F:CD:D8:1B:55:46:AD:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B696C24E357DE75D692D2000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.223.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:c2:4e:35:7d:e7:5d:69:2d:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=a1dacca2-9f18-4f6b-81c8-ed85823a850a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:a6:27:6a:4d:b8:13:0a:07:3e:ce:7c:67: 8f:06:c6:eb:68:33:29:28:38:dc:fb:da:3e:13:d2: de:c9:83:1c:76:dc:09:e0:b2:0d:ae:1b:b9:eb:04: 75:22:a7:89:b8:61:6f:30:7c:24:f1:19:b3:64:b6: e0:5d:8f:99:69:b0:a3:64:fc:df:28:a0:2e:70:0f: 27:21:49:02:8f:c6:b2:ec:c8:d4:02:02:ff:21:54: b0:3c:ca:a0:f8:45:75:8c:7d:9d:a5:62:be:e7:b9: e9:ae:bf:76:9f:07:e8:6b:34:c5:5a:ab:df:3c:63: 05:8c:3e:d1:2b:48:2f:50:00:33:a4:c9:9e:55:e5: 08:f9:cc:ae:86:f1:5a:14:61:c6:c5:a0:ab:d3:e4: 0a:3a:5a:8a:db:f0:ed:10:d4:01:15:ea:8f:d2:15: f4:8b:ec:74:5d:e4:03:fb:cf:38:8e:5a:1e:e9:0f: da:19:80:e2:a9:6a:eb:44:e5:19:ca:ae:8b:c9:9a: 5e:d8:c7:9a:64:24:6b:70:c8:c8:8b:94:51:15:34: 1d:50:5f:25:1d:1d:bb:0b:2a:30:9f:fc:24:80:bf: 32:02:a8:e7:b6:df:92:a4:64:60:45:c1:88:b0:5c: 8d:bf:47:18:fc:f5:0d:49:02:83:db:24:6f:1f:6e: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:D6:FE:E7:B9:45:D8:0E:63:46:03:9F:CD:D8:1B:55:46:AD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8d:71:77:47:de:9d:87:f0:9b:05:7e:10:a5:51:ff:80:a2: 29:ae:c2:d9:1c:2d:1d:01:3a:37:46:49:4a:4c:9f:7b:e6:b9: 18:68:21:e5:20:dd:5c:3a:bd:c9:d3:f6:b9:b4:63:3f:12:dc: 28:db:39:8a:58:38:8c:93:4b:ae:f1:38:20:ce:ed:5c:78:6d: e1:01:e5:fa:f4:01:55:5a:42:00:59:ab:4f:0f:92:a9:e7:a6: b6:2e:0b:09:c8:58:46:f1:ec:17:93:77:1d:76:eb:8a:05:7b: 1d:7d:84:ba:a4:67:c8:2e:7a:30:97:dd:ce:95:fb:6b:a5:f6: f3:9a:11:a9:05:98:4e:f8:23:cc:95:a7:ad:8a:dc:6c:c7:9e: 72:ec:cb:e9:8e:70:e9:32:fa:51:49:d1:17:34:80:aa:41:97: 11:a5:6e:a9:d3:11:74:98:f1:8c:16:df:46:8f:e5:4b:64:88: d9:c6:c1:f3:89:dd:7a:5d:58:27:6a:df:c4:42:75:cb:28:72: fa:79:2b:39:57:f6:6e:3c:70:74:30:6d:6f:ed:df:83:bb:78: e3:5f:51:8a:67:e4:7e:e3:f9:0a:e6:8f:67:ad:b0:24:9a:62: 15:00:c5:5f:7c:37:3f:9b:9f:dd:7b:aa:c0:62:5c:47:55:ca: 3e:f7:fb:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lsJONX3nXWktIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk YTFkYWNjYTItOWYxOC00ZjZiLTgxYzgtZWQ4NTgyM2E4NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsKmJ2pNuBMKBz7OfGePBsbraDMpKDjc+9o+ E9LeyYMcdtwJ4LINrhu56wR1IqeJuGFvMHwk8RmzZLbgXY+ZabCjZPzfKKAucA8n IUkCj8ay7MjUAgL/IVSwPMqg+EV1jH2dpWK+57nprr92nwfoazTFWqvfPGMFjD7R K0gvUAAzpMmeVeUI+cyuhvFaFGHGxaCr0+QKOlqK2/DtENQBFeqP0hX0i+x0XeQD +884jloe6Q/aGYDiqWrrROUZyq6LyZpe2MeaZCRrcMjIi5RRFTQdUF8lHR27Cyow n/wkgL8yAqjntt+SpGRgRcGIsFyNv0cY/PUNSQKD2yRvH27hMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEw1v7nuUXYDmNGA5/N2BtVRq13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RlMDEwNGItMTU4Yi0z OGE3LWFmYzQtNDRjMGFjMmQzMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCNcXdH3p2H8JsFfhClUf+AoimuwtkcLR0BOjdGSUpMn3vmuRhoIeUg 3Vw6vcnT9rm0Yz8S3CjbOYpYOIyTS67xOCDO7Vx4beEB5fr0AVVaQgBZq08Pkqnn prYuCwnIWEbx7BeTdx1264oFex19hLqkZ8guejCX3c6V+2ul9vOaEakFmE74I8yV p62K3GzHnnLsy+mOcOky+lFJ0Rc0gKpBlxGlbqnTEXSY8YwW30aP5UtkiNnGwfOJ 3XpdWCdq38RCdcsocvp5KzlX9m48cHQwbW/t34O7eONfUYpn5H7j+Qrmj2etsCSa YhUAxV98Nz+bn917qsBiXEdVyj73+70= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:49 2024 by rpki-client on console-ams.rpki-client.org