$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41e776d1-5f1f-3233-aa97-7311a12c48ef.roa File: 41e776d1-5f1f-3233-aa97-7311a12c48ef.roa (raw, json) Hash identifier: /7u+WhktG+ZJYNVPaUhNlRtIrg503gUBz5hKsRbLORU= Subject key identifier: CE:85:36:33:49:00:1A:D7:48:D9:C6:D1:18:99:03:F0:70:90:36:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A5D6CCA01BFA97F6E7F08780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41e776d1-5f1f-3233-aa97-7311a12c48ef.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.53.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:cc:a0:1b:fa:97:f6:e7:f0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=10f6856a-8808-49e5-be33-6fa1e26d0bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:a9:d5:70:4a:14:da:97:55:79:58:6d:62: 1a:94:9e:c5:cf:f1:65:be:49:05:70:66:ed:67:52: 8f:b7:5c:22:0a:ab:15:1c:06:54:ba:95:06:85:83: 2a:ff:36:23:1d:df:98:1c:55:31:2f:f2:e2:50:74: 9e:df:ed:b7:08:e0:b6:05:a6:72:8a:45:74:f6:48: 61:70:07:3e:30:3e:76:59:6a:da:11:22:cc:7b:17: dc:14:5f:96:07:a0:35:61:ff:9f:0e:71:79:d9:0f: a0:35:c4:00:4c:63:08:34:90:f6:61:25:01:53:b7: 67:0a:84:4d:14:55:3a:4b:5b:58:d1:aa:b7:68:d3: 21:05:19:98:8f:de:df:83:c4:fd:49:6b:68:0b:66: c8:83:23:a6:a7:da:71:e6:19:f5:9f:a3:94:b5:67: 5c:34:77:57:6f:b0:30:30:64:e2:0e:72:b7:9d:83: 48:3b:23:b2:bf:11:28:17:a1:bd:d7:e2:69:a6:46: c3:ec:4b:d2:96:09:85:72:f2:39:9e:07:ea:a7:09: bc:66:a4:b0:df:ee:c3:bc:9f:0a:93:ab:38:87:64: 54:21:c5:13:98:89:e9:e7:95:d9:a4:81:9c:c0:b6: ee:bb:bd:94:35:e7:e5:6c:6f:04:f1:31:23:e5:d6: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:85:36:33:49:00:1A:D7:48:D9:C6:D1:18:99:03:F0:70:90:36:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41e776d1-5f1f-3233-aa97-7311a12c48ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:86:1b:e4:94:14:60:07:27:7b:87:0d:b6:d3:3d:57:14:74: 8d:b7:4c:49:78:25:47:1e:dc:8c:ad:b1:90:8b:19:15:51:b7: 24:b8:1d:64:bd:7c:bf:6a:61:59:6e:00:d2:3b:a4:08:96:09: 7c:7e:fa:ac:3f:18:91:39:01:c3:f7:c8:52:df:b3:a3:6e:11: aa:23:39:c3:6b:6d:03:6e:a6:4e:0c:01:35:13:8d:57:97:00: 4d:aa:72:2d:41:63:a2:b5:34:f3:36:a2:d6:8d:d6:c5:35:25: 20:ee:d6:15:20:43:3a:6e:40:8d:a6:3a:a3:7d:ba:79:ec:91: d5:76:b5:21:b8:55:ff:e1:4e:21:a9:70:1e:74:de:26:43:d9: 2c:f9:3f:96:ce:8e:0e:b2:38:26:3e:7a:12:2c:cf:41:8f:74: fe:dd:3e:8f:ef:1f:00:51:62:92:c6:f9:df:15:7b:fc:44:3a: ef:27:3f:31:bd:ed:1d:19:20:ec:fb:c1:5e:6b:68:ab:c9:76: ee:2a:d1:cb:76:00:a6:d4:d2:80:c6:3f:65:48:e9:9e:c9:bb: c2:7a:e5:72:93:7f:00:8b:87:92:f6:7c:4c:68:a2:03:7b:8a: 27:e0:67:c3:f1:b6:3e:92:37:7d:cb:1d:91:fb:eb:c2:42:d8: 28:8d:7e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1sygG/qX9ufwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MTBmNjg1NmEtODgwOC00OWU1LWJlMzMtNmZhMWUyNmQwYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZup1XBKFNqXVXlYbWIalJ7Fz/FlvkkFcGbt Z1KPt1wiCqsVHAZUupUGhYMq/zYjHd+YHFUxL/LiUHSe3+23COC2BaZyikV09khh cAc+MD52WWraESLMexfcFF+WB6A1Yf+fDnF52Q+gNcQATGMINJD2YSUBU7dnCoRN FFU6S1tY0aq3aNMhBRmYj97fg8T9SWtoC2bIgyOmp9px5hn1n6OUtWdcNHdXb7Aw MGTiDnK3nYNIOyOyvxEoF6G91+JppkbD7EvSlgmFcvI5ngfqpwm8ZqSw3+7DvJ8K k6s4h2RUIcUTmInp55XZpIGcwLbuu72UNeflbG8E8TEj5dbmOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6FNjNJABrXSNnG0RiZA/BwkDZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDFlNzc2ZDEtNWYxZi0z MjMzLWFhOTctNzMxMWExMmM0OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiGG+SUFGAHJ3uHDbbTPVcUdI23TEl4JUce3IytsZCLGRVRtyS4HWS9 fL9qYVluANI7pAiWCXx++qw/GJE5AcP3yFLfs6NuEaojOcNrbQNupk4MATUTjVeX AE2qci1BY6K1NPM2otaN1sU1JSDu1hUgQzpuQI2mOqN9unnskdV2tSG4Vf/hTiGp cB503iZD2Sz5P5bOjg6yOCY+ehIsz0GPdP7dPo/vHwBRYpLG+d8Ve/xEOu8nPzG9 7R0ZIOz7wV5raKvJdu4q0ct2AKbU0oDGP2VI6Z7Ju8J65XKTfwCLh5L2fExoogN7 iifgZ8Pxtj6SN33LHZH768JC2CiNfjE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:22 2024 by rpki-client on console-ams.rpki-client.org