$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa File: 405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa (raw, json) Hash identifier: MJuaA1TrL6ag0I8L/5cFIk9yFUC8xKvdGff7O4chXjI= Subject key identifier: 92:B4:47:B7:DE:A1:4D:A1:29:CE:C0:EA:FF:D3:6D:D3:35:6C:E0:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF6709692FF70913C266E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 24319 IP address blocks: 23.32.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:70:96:92:ff:70:91:3c:26:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=f51dd70f-7820-46a0-bfad-527e1e93642d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:14:4b:90:21:12:00:95:16:9c:6a:88:33: cf:27:98:eb:8e:e5:e7:ec:8e:9a:ed:17:5b:7e:89: f9:b1:e9:18:eb:cb:0e:da:d0:d4:07:62:67:9e:fe: 32:02:61:fb:3b:eb:9d:0e:15:14:dc:e2:cd:e8:1b: 08:30:1c:e9:ad:45:74:ec:92:c7:c5:14:83:70:2a: e6:58:64:d3:df:55:1c:9c:4c:ca:0d:e7:a2:56:c7: 04:a8:41:c4:08:a3:0f:5b:b7:28:49:e7:7e:c8:81: bd:71:ba:ce:5a:30:55:72:96:27:db:f7:cd:bb:6e: eb:3e:62:5a:3d:e3:6c:5a:50:ff:bb:0d:6a:f5:0f: 4e:58:cd:04:74:0e:36:5d:fd:e3:99:75:c4:93:40: f8:b5:44:13:ba:e3:a5:59:cb:fa:b6:fc:f8:73:d3: 62:13:f9:12:5b:9f:b6:53:a1:a5:0a:92:75:d2:ec: 28:95:c3:18:c5:26:01:6a:cc:7b:fe:74:fa:05:7b: 73:5c:7a:93:51:51:a9:54:51:12:24:2c:1a:0d:24: 1c:46:27:f3:07:d2:39:7c:9a:96:b5:2a:cb:7e:1b: 5c:5f:0a:c8:ca:dc:5f:95:ff:b3:f5:fd:94:41:af: e7:f7:82:4d:ea:34:7d:ed:04:b6:12:fb:7b:f1:67: d0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:47:B7:DE:A1:4D:A1:29:CE:C0:EA:FF:D3:6D:D3:35:6C:E0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a9:41:a7:81:c6:e3:6f:c6:03:f8:db:b9:5f:53:34:7c:08: 20:11:e9:0a:39:e5:81:93:dd:20:51:4a:fc:e6:be:4d:06:f9: d9:e7:34:bc:a5:53:3b:48:1d:74:6d:fa:2a:35:55:b9:78:f5: 79:3b:68:e9:d4:04:2c:d8:99:96:ad:05:ae:e4:33:bc:d9:9a: 84:93:60:fa:08:b1:95:22:6b:11:49:b2:38:94:88:1d:b9:ad: e0:d6:d6:ee:61:b3:8c:c2:f1:4a:6e:a4:dd:2c:66:5a:77:47: 95:dd:26:19:44:72:d5:d3:50:7a:e8:aa:e7:a7:f9:e4:e2:8d: 1a:39:7d:5f:18:ec:ab:aa:01:78:e7:11:ae:cb:72:b3:5c:a3: 26:be:8a:e4:8e:63:ec:57:8c:bb:5a:65:8e:4f:83:30:49:ca: 16:31:f3:e4:d1:61:1b:ae:3f:3e:a6:05:78:91:64:6a:ac:ef: d4:00:30:a4:f2:7d:e5:a4:e4:a3:7b:3d:f0:7f:f1:ab:dd:e4: c9:b3:27:1b:fc:b9:43:49:96:e0:c5:36:66:36:7d:ef:cd:6f: c9:86:6d:6d:65:50:ba:76:26:1d:56:4a:fb:03:5f:47:0f:1f: ee:6e:bf:c0:90:cf:3a:d7:40:e7:5d:cd:6d:cb:c7:38:94:20: 64:36:37:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79nCWkv9wkTwmbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk ZjUxZGQ3MGYtNzgyMC00NmEwLWJmYWQtNTI3ZTFlOTM2NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzukUS5AhEgCVFpxqiDPPJ5jrjuXn7I6a7Rdb fon5sekY68sO2tDUB2Jnnv4yAmH7O+udDhUU3OLN6BsIMBzprUV07JLHxRSDcCrm WGTT31UcnEzKDeeiVscEqEHECKMPW7coSed+yIG9cbrOWjBVcpYn2/fNu27rPmJa PeNsWlD/uw1q9Q9OWM0EdA42Xf3jmXXEk0D4tUQTuuOlWcv6tvz4c9NiE/kSW5+2 U6GlCpJ10uwolcMYxSYBasx7/nT6BXtzXHqTUVGpVFESJCwaDSQcRifzB9I5fJqW tSrLfhtcXwrIytxflf+z9f2UQa/n94JN6jR97QS2Evt78WfQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK0R7feoU2hKc7A6v/TbdM1bOC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA1YThhZTItMmZkYi0z ZTVkLWE3NTktNDMwYTgzMTllMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWpQaeBxuNvxgP427lfUzR8CCAR6Qo55YGT3SBRSvzmvk0G+dnnNLyl UztIHXRt+io1Vbl49Xk7aOnUBCzYmZatBa7kM7zZmoSTYPoIsZUiaxFJsjiUiB25 reDW1u5hs4zC8UpupN0sZlp3R5XdJhlEctXTUHroquen+eTijRo5fV8Y7KuqAXjn Ea7LcrNcoya+iuSOY+xXjLtaZY5PgzBJyhYx8+TRYRuuPz6mBXiRZGqs79QAMKTy feWk5KN7PfB/8avd5MmzJxv8uUNJluDFNmY2fe/Nb8mGbW1lULp2Jh1WSvsDX0cP H+5uv8CQzzrXQOddzW3LxziUIGQ2N7o= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:02 2024 by rpki-client on console-ams.rpki-client.org