$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa File: 3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa (raw, json) Hash identifier: tK/oSFT1FWJig3Bsp7+hUfJzLvEVx8bUgn5wRAtjQ1s= Subject key identifier: B9:61:5F:7C:5B:6D:BF:56:2B:01:A1:6D:50:29:90:7D:F1:C9:BB:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478E1BD4D4775482B07A9E2280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.32.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d4:d4:77:54:82:b0:7a:9e:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=719cd059-9731-489e-bf20-2e34865afe61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:5f:fe:a3:9f:53:db:b5:77:47:40:8c:f3: 53:a5:79:a7:d3:1d:5a:c0:c5:a3:a0:5f:33:c1:22: e2:b0:bc:29:dd:93:36:8c:94:cd:30:35:d4:af:7a: ec:ea:a2:44:56:e6:36:ff:aa:39:5e:5a:3d:43:47: 4e:e4:81:4e:14:ba:06:80:76:68:dc:8c:05:4a:99: 56:4c:8f:1c:8f:9c:a7:94:1e:c4:3b:87:b8:a4:eb: 55:43:25:d0:13:9e:0a:8b:b2:9d:47:87:5f:89:98: 6d:9e:ff:6e:2c:9d:24:68:08:df:10:e6:1f:73:92: 0e:62:6d:4e:eb:31:ee:19:74:34:02:b7:6a:78:b1: ac:35:7a:01:36:65:60:be:1a:98:e4:71:16:dc:39: 53:12:e9:3b:4c:08:2a:40:2f:1f:34:30:6a:a7:35: ff:7c:83:91:c5:58:1f:98:dd:26:45:8c:b2:8d:da: 04:3f:d1:03:b0:9b:37:8f:d8:2a:0e:c9:8a:bc:ce: 24:9c:d3:53:3c:cd:18:65:59:2d:8a:b0:eb:b0:5a: a7:5e:fe:64:18:58:3d:8d:74:ac:54:3d:f9:e9:b6: e7:60:52:c8:70:40:3d:4d:73:97:cb:93:52:16:d1: f4:94:1f:3a:0a:f5:51:4e:10:20:f9:02:d4:44:43: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:61:5F:7C:5B:6D:BF:56:2B:01:A1:6D:50:29:90:7D:F1:C9:BB:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7e:48:4e:0b:21:3b:91:f3:02:67:fc:0c:4a:7c:9c:0a:81: 5b:f0:64:8b:c5:3a:bc:18:a3:68:a7:34:7e:80:b5:58:20:f4: 36:10:6e:b1:31:f9:a3:30:43:0d:af:60:21:85:27:ca:4e:c6: 5f:97:d9:c2:53:f6:be:6d:cb:44:98:57:c1:64:73:70:d4:98: 1c:9a:45:f7:24:ae:3c:d7:96:0b:2a:f8:1f:37:54:08:86:17: 6d:c7:81:82:02:e8:e4:68:0e:d5:3b:76:f7:da:0f:01:31:19: 9b:87:82:53:c1:9f:aa:85:26:96:aa:f6:df:63:e2:8c:e5:6b: af:68:1a:9a:44:b0:5d:82:0f:31:ca:4b:a8:48:c3:fe:b6:1f: a2:12:a2:45:af:10:36:c1:45:d5:4f:30:85:ad:4f:88:48:c7: e0:33:7f:fc:f2:60:41:7e:a9:4a:99:0c:ce:cc:94:20:6c:fd: eb:3a:63:9b:67:ca:d4:0b:df:18:d0:fc:55:df:c5:7a:6a:16: 00:a0:82:75:0c:df:26:fd:a1:c3:59:48:67:20:43:25:da:9c: 21:09:79:9c:77:3d:56:22:55:a5:e1:d7:51:a5:a8:48:e6:00: 55:23:a7:72:c4:74:08:ab:1d:5b:89:7c:d6:14:61:fe:ed:48: 49:c6:22:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9TUd1SCsHqeIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NzE5Y2QwNTktOTczMS00ODllLWJmMjAtMmUzNDg2NWFmZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dRf/qOfU9u1d0dAjPNTpXmn0x1awMWjoF8z wSLisLwp3ZM2jJTNMDXUr3rs6qJEVuY2/6o5Xlo9Q0dO5IFOFLoGgHZo3IwFSplW TI8cj5ynlB7EO4e4pOtVQyXQE54Ki7KdR4dfiZhtnv9uLJ0kaAjfEOYfc5IOYm1O 6zHuGXQ0ArdqeLGsNXoBNmVgvhqY5HEW3DlTEuk7TAgqQC8fNDBqpzX/fIORxVgf mN0mRYyyjdoEP9EDsJs3j9gqDsmKvM4knNNTPM0YZVktirDrsFqnXv5kGFg9jXSs VD356bbnYFLIcEA9TXOXy5NSFtH0lB86CvVRThAg+QLURENYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlhX3xbbb9WKwGhbVApkH3xybsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U0MWNiMDUtMjNmOS0z NjMzLWI3M2EtZWU0NGQ1YTJjNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR+SE4LITuR8wJn/AxKfJwKgVvwZIvFOrwYo2inNH6AtVgg9DYQbrEx +aMwQw2vYCGFJ8pOxl+X2cJT9r5ty0SYV8Fkc3DUmByaRfckrjzXlgsq+B83VAiG F23HgYIC6ORoDtU7dvfaDwExGZuHglPBn6qFJpaq9t9j4ozla69oGppEsF2CDzHK S6hIw/62H6ISokWvEDbBRdVPMIWtT4hIx+Azf/zyYEF+qUqZDM7MlCBs/es6Y5tn ytQL3xjQ/FXfxXpqFgCggnUM3yb9ocNZSGcgQyXanCEJeZx3PVYiVaXh11GlqEjm AFUjp3LEdAirHVuJfNYUYf7tSEnGIss= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:20 2024 by rpki-client on console-ams.rpki-client.org