$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa File: 5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa (raw, json) Hash identifier: CO42vttdc0527A8TNvyFxI7gSFVAIlzvzOMI8hjXmJ0= Subject key identifier: A9:14:C9:6A:18:44:57:96:1E:EE:8C:0D:F7:A3:62:EB:B0:1A:19:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479C112EE93EFDF14F99221000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.41.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:2e:e9:3e:fd:f1:4f:99:22:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=7059ce75-8712-4a2c-9ab2-4c8264e7633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:be:58:6f:7f:7b:b3:7e:d1:f8:9b:b6:53: 1a:98:c1:0d:5c:10:86:27:a7:31:81:ff:1b:c0:5f: 3a:a1:49:16:5b:5f:59:58:94:d6:0c:0a:03:af:79: 0e:54:66:a6:a7:46:fc:42:13:9e:47:7f:db:de:d5: 63:f4:c7:3d:e2:d8:ef:ca:46:0a:48:0b:91:bd:5f: a5:f1:66:39:e6:0b:6c:45:a2:c4:1d:e8:7b:26:3a: f5:47:9e:1d:bd:45:c6:94:e0:c5:64:20:f1:0b:0a: 8c:b9:44:19:01:de:de:c9:62:88:3c:40:76:27:3a: 69:ef:82:c0:b7:94:f5:cd:51:fd:58:0b:c6:53:6d: f7:f0:bc:05:20:16:35:da:91:1f:dc:54:d9:f4:78: d4:bc:36:22:5e:7e:33:64:dc:36:cc:e0:22:8e:77: f9:af:ea:a7:de:03:9f:1d:70:2b:84:72:ee:fb:7e: 94:71:8e:10:c8:62:c9:15:44:cb:88:07:2a:4b:de: 26:59:32:a4:d1:37:29:68:3b:a1:82:3f:e5:0c:21: 2a:ad:72:71:16:13:df:21:bc:25:4f:d1:cc:1d:6f: 07:38:7d:42:b4:6a:c6:47:65:f3:9b:cd:67:87:95: e8:53:93:cb:e7:ee:bf:51:e3:23:e9:c1:e6:55:b0: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:C9:6A:18:44:57:96:1E:EE:8C:0D:F7:A3:62:EB:B0:1A:19:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:51:86:1a:9e:9a:ab:7f:0c:8b:88:a3:19:ed:6f:a0:64:3b: c7:fe:d6:c1:bf:13:db:d3:be:e7:1b:ef:a8:45:20:50:c8:84: 16:43:51:f2:7a:36:7b:2d:c6:67:20:54:33:32:b2:cf:d3:88: fc:6b:66:46:06:89:bf:ca:7c:51:07:73:99:a8:c1:c7:78:63: d3:61:fc:ba:38:eb:1b:2b:66:fa:a2:b7:7d:bc:51:82:04:61: 16:62:2e:ad:b5:45:4b:db:41:32:3e:a8:06:1f:15:96:93:c5: b9:b5:fb:ae:41:72:18:4d:6d:e0:a4:5b:3e:b1:d0:54:b6:17: b6:46:b7:e4:94:20:01:14:df:76:41:26:f3:82:36:90:44:e3: eb:8e:e6:85:e8:00:18:54:66:cf:1c:fe:14:b7:d7:45:f1:ac: dc:2e:7f:61:b8:58:7b:2e:51:ba:a5:eb:94:6f:15:ba:c6:55: 1c:dc:0c:a3:70:2c:e0:80:6c:00:71:c4:9a:aa:c9:63:ed:30: 86:9c:b1:25:11:95:f4:41:58:6f:b4:1d:16:34:64:45:26:39: 83:22:a8:e9:ca:46:ba:17:23:3e:12:0c:3c:ed:d6:6e:20:c6: 3d:e6:7c:82:12:f3:54:e3:35:ae:3c:b2:7d:b6:a2:d5:e1:65: bd:40:58:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecES7pPv3xT5kiEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzA1OWNlNzUtODcxMi00YTJjLTlhYjItNGM4MjY0ZTc2MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPu+WG9/e7N+0fibtlMamMENXBCGJ6cxgf8b wF86oUkWW19ZWJTWDAoDr3kOVGamp0b8QhOeR3/b3tVj9Mc94tjvykYKSAuRvV+l 8WY55gtsRaLEHeh7Jjr1R54dvUXGlODFZCDxCwqMuUQZAd7eyWKIPEB2Jzpp74LA t5T1zVH9WAvGU2338LwFIBY12pEf3FTZ9HjUvDYiXn4zZNw2zOAijnf5r+qn3gOf HXArhHLu+36UcY4QyGLJFUTLiAcqS94mWTKk0TcpaDuhgj/lDCEqrXJxFhPfIbwl T9HMHW8HOH1CtGrGR2Xzm81nh5XoU5PL5+6/UeMj6cHmVbDKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkUyWoYRFeWHu6MDfejYuuwGhmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNiMTZmY2UtMzhkOC0z NDBiLWI0ZDctZTBkYzE4OTJiZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFykEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Rhhqemqt/DIuIoxntb6BkO8f+1sG/E9vTvucb76hFIFDIhBZDUfJ6 NnstxmcgVDMyss/TiPxrZkYGib/KfFEHc5mowcd4Y9Nh/Lo46xsrZvqit328UYIE YRZiLq21RUvbQTI+qAYfFZaTxbm1+65BchhNbeCkWz6x0FS2F7ZGt+SUIAEU33ZB JvOCNpBE4+uO5oXoABhUZs8c/hS310XxrNwuf2G4WHsuUbql65RvFbrGVRzcDKNw LOCAbABxxJqqyWPtMIacsSURlfRBWG+0HRY0ZEUmOYMiqOnKRroXIz4SDDzt1m4g xj3mfIIS81TjNa48sn22otXhZb1AWLE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:34 2024 by rpki-client on console-ams.rpki-client.org