$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa File: 468310fa-4bbd-301a-80f7-e065d0bbbe47.roa (raw, json) Hash identifier: w5vhCTsbtJTm0XuQLc85jDBB7v/PudJo44zwBTa5IZ0= Subject key identifier: 02:9E:25:17:67:B8:38:8B:2C:B2:22:77:8F:85:97:8D:37:B3:B6:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC048328F79DB284495BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.39.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:04:83:28:f7:9d:b2:84:49:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=498b0cb8-4df4-48eb-b640-b37f77f56ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:de:7b:ac:f0:9d:8d:2c:06:12:76:8a:20:5c: 3f:7d:58:2d:a8:d5:25:ff:40:48:4b:4e:5f:98:17: 1d:1d:f8:2a:cb:34:00:a5:cc:07:9e:a4:3d:3a:49: ec:e6:10:4a:b2:0f:fd:52:a3:fe:99:71:d0:4a:60: da:fd:b2:83:88:2c:46:df:d4:ad:9f:56:5d:f0:56: ba:d0:6c:43:06:db:86:e1:4d:96:a2:78:18:f2:6a: 4b:04:97:75:83:99:40:c8:e7:4e:f8:fa:c1:4e:c6: 12:96:38:33:4e:90:bf:dc:50:6e:be:0a:6c:58:c8: f2:ac:aa:85:db:e1:e9:9d:43:63:70:2a:04:7f:30: d3:73:80:d8:4d:f2:dd:17:35:cd:91:64:e0:34:c9: d4:aa:c0:dd:b3:b5:4c:ac:86:c5:e5:9f:4a:b8:43: 99:01:3a:4f:07:98:31:7a:69:9c:18:4f:21:54:2b: b6:9b:82:2a:d4:c9:d8:78:f5:26:0f:e4:44:1f:89: ce:86:aa:e5:e1:02:08:e2:99:cb:fa:10:1f:15:da: 72:03:29:65:92:ae:d2:be:16:21:47:70:56:03:6b: fa:6d:93:53:e4:25:cd:e8:40:bd:dd:48:2d:de:33: 27:26:89:67:6e:b9:ea:5b:a8:44:7c:b4:60:e0:45: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:25:17:67:B8:38:8B:2C:B2:22:77:8F:85:97:8D:37:B3:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/468310fa-4bbd-301a-80f7-e065d0bbbe47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9f:ea:f7:4e:9a:8d:da:98:de:9c:9f:e0:1d:e8:f5:e5:f0: 7e:b1:9c:cf:7c:b5:66:98:21:49:62:70:91:51:a1:77:64:62: 25:8b:19:e8:7b:63:5d:6a:0e:cb:17:18:03:57:c1:99:e5:75: f4:25:22:1a:07:fb:92:e5:e5:4c:ce:6e:64:11:e3:7e:b8:46: ad:f6:a1:15:ac:ce:22:24:31:3e:e9:16:7e:82:04:e6:25:18: a0:23:73:30:36:74:b2:c4:27:c1:cb:9c:28:c5:57:b1:89:aa: a7:57:c6:ea:c4:0e:05:88:40:a9:03:4c:73:e1:11:3f:f9:d1: ab:70:6a:ed:d3:e6:1d:5a:24:d1:c9:bc:d4:37:fa:5f:82:df: a3:7e:e4:b0:ed:c7:69:15:a4:71:fd:5e:11:68:ba:6a:1c:82: 37:f7:12:41:0d:fd:53:9f:23:1d:88:c3:11:5e:59:9e:85:fe: b3:d6:2d:87:16:ce:c4:65:02:3b:9b:f0:4f:07:01:58:01:88: 68:f5:a1:4f:aa:da:1e:f3:81:f4:d2:70:6c:6c:d9:17:81:93: 44:70:c0:78:eb:96:40:ae:71:cc:49:59:95:57:f8:d9:ad:b5: 1d:19:77:a8:d5:8e:ae:d8:7b:d9:37:5d:9e:16:29:59:f8:f4: a8:4e:a2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearASDKPedsoRJW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NDk4YjBjYjgtNGRmNC00OGViLWI2NDAtYjM3Zjc3ZjU2Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d57rPCdjSwGEnaKIFw/fVgtqNUl/0BIS05f mBcdHfgqyzQApcwHnqQ9Okns5hBKsg/9UqP+mXHQSmDa/bKDiCxG39Stn1Zd8Fa6 0GxDBtuG4U2WongY8mpLBJd1g5lAyOdO+PrBTsYSljgzTpC/3FBuvgpsWMjyrKqF 2+HpnUNjcCoEfzDTc4DYTfLdFzXNkWTgNMnUqsDds7VMrIbF5Z9KuEOZATpPB5gx emmcGE8hVCu2m4Iq1MnYePUmD+REH4nOhqrl4QII4pnL+hAfFdpyAyllkq7SvhYh R3BWA2v6bZNT5CXN6EC93Ugt3jMnJolnbrnqW6hEfLRg4EXIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKeJRdnuDiLLLIid4+Fl403s7bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY4MzEwZmEtNGJiZC0z MDFhLTgwZjctZTA2NWQwYmJiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOf6vdOmo3amN6cn+Ad6PXl8H6xnM98tWaYIUlicJFRoXdkYiWLGeh7 Y11qDssXGANXwZnldfQlIhoH+5Ll5UzObmQR4364Rq32oRWsziIkMT7pFn6CBOYl GKAjczA2dLLEJ8HLnCjFV7GJqqdXxurEDgWIQKkDTHPhET/50atwau3T5h1aJNHJ vNQ3+l+C36N+5LDtx2kVpHH9XhFoumocgjf3EkEN/VOfIx2IwxFeWZ6F/rPWLYcW zsRlAjub8E8HAVgBiGj1oU+q2h7zgfTScGxs2ReBk0RwwHjrlkCuccxJWZVX+Nmt tR0Zd6jVjq7Ye9k3XZ4WKVn49KhOotM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:24 2024 by rpki-client on console-ams.rpki-client.org