$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa File: 621b5b6d-5279-3795-91d7-b01a7ddc3514.roa (raw, json) Hash identifier: 7F5xWdx/TxnAUl50RnbZ5CrLiZhGxG4TIrd/P5L9tLw= Subject key identifier: EB:96:5C:20:9A:94:35:CA:70:0E:40:E1:C2:FE:48:8F:E1:B0:DB:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A5D6CDB5AC08B63D8C5EF980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.53.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:cd:b5:ac:08:b6:3d:8c:5e:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=0d4b11f4-62fb-4183-a738-7f0a72771def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:37:9b:97:7d:37:2c:d9:2b:6e:a7:3b:5f: 59:27:fe:1a:24:8f:47:8f:c0:fc:79:4b:8f:e1:88: 70:21:5d:5c:77:58:52:43:42:8a:97:18:ed:e2:48: 71:cb:c4:19:e0:b3:01:85:44:4c:65:35:8c:40:44: 35:60:7a:9f:e3:ab:a5:5e:b8:78:f9:5c:23:d7:10: 5f:e5:c0:46:d3:ed:b3:b6:e1:33:68:94:70:b3:81: ad:20:33:3e:16:01:46:f5:84:f6:bd:95:16:d5:20: 30:60:98:8d:58:be:0c:f5:71:56:f1:4b:ae:0b:c2: c9:ba:93:21:70:f6:7e:10:76:af:fb:3f:0a:a3:69: e2:34:02:18:29:01:d0:28:64:a9:6d:d2:ab:f1:49: 34:da:0b:fa:5a:79:5f:2b:b3:db:5d:a0:70:a7:3f: b9:13:2e:d3:de:14:af:6e:4b:3b:1e:de:a2:6b:64: 9e:c7:d5:3e:e5:b0:c9:06:c0:42:ee:7d:06:05:a3: 6c:35:2f:48:b2:6e:9a:bb:2c:95:85:2e:ef:62:1e: fe:5c:64:58:fb:52:9e:94:37:31:72:3a:f0:91:c4: 4d:aa:57:52:12:30:77:ad:9f:6b:f6:e6:3a:91:b9: 7f:b5:88:b5:96:41:12:2a:96:b6:5b:68:7a:57:92: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:96:5C:20:9A:94:35:CA:70:0E:40:E1:C2:FE:48:8F:E1:B0:DB:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c5:a2:88:7c:cf:dd:31:83:ba:7f:e2:3e:8c:7e:e7:6e:09: ec:e7:24:40:ce:3d:a9:68:e8:0c:4e:2d:fb:d2:3f:f9:99:6e: 23:ca:8a:1d:5d:da:96:12:ed:ac:57:93:1f:c4:76:91:88:12: a9:b0:13:b1:75:ab:b9:c7:22:d8:64:9d:ce:69:6e:61:7a:6d: 41:ba:b8:b6:0c:a0:3e:7b:f7:e3:55:91:5a:c3:e7:b0:b4:ea: e3:34:1d:6f:11:27:9a:2d:c9:25:8d:d0:fc:8a:6f:d7:3d:5c: 54:1d:a8:66:a9:c1:b8:75:2d:25:b3:79:e1:3d:27:96:e2:11: 99:2d:cb:42:74:8e:05:29:56:82:ce:50:26:4c:0d:6d:5d:62: d4:46:6c:28:88:32:8b:8f:b0:e1:f6:42:42:18:3f:91:76:56: d8:06:a9:e6:e9:20:49:47:72:bd:9b:74:53:11:b5:8c:bc:ca: 2a:c1:52:13:04:6c:fc:fc:ea:2e:c7:b5:9f:ba:de:1c:d0:77: 43:23:9d:9d:d2:89:b2:14:56:d1:e1:0f:0c:40:50:08:d0:82: a3:2a:d5:c2:98:8c:fd:f1:61:03:e1:17:f0:67:f1:8d:ad:9a: 6e:a1:6a:16:cb:05:a7:a3:97:1f:bd:0f:3c:69:7d:0a:4e:9c: 94:84:ac:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1s21rAi2PYxe+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MGQ0YjExZjQtNjJmYi00MTgzLWE3MzgtN2YwYTcyNzcxZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDg3m5d9NyzZK26nO19ZJ/4aJI9Hj8D8eUuP 4YhwIV1cd1hSQ0KKlxjt4khxy8QZ4LMBhURMZTWMQEQ1YHqf46ulXrh4+Vwj1xBf 5cBG0+2ztuEzaJRws4GtIDM+FgFG9YT2vZUW1SAwYJiNWL4M9XFW8UuuC8LJupMh cPZ+EHav+z8Ko2niNAIYKQHQKGSpbdKr8Uk02gv6WnlfK7PbXaBwpz+5Ey7T3hSv bks7Ht6ia2Sex9U+5bDJBsBC7n0GBaNsNS9Ism6auyyVhS7vYh7+XGRY+1KelDcx cjrwkcRNqldSEjB3rZ9r9uY6kbl/tYi1lkESKpa2W2h6V5JLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuWXCCalDXKcA5A4cL+SI/hsNsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjIxYjViNmQtNTI3OS0z Nzk1LTkxZDctYjAxYTdkZGMzNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErFooh8z90xg7p/4j6MfuduCeznJEDOPalo6AxOLfvSP/mZbiPKih1d 2pYS7axXkx/EdpGIEqmwE7F1q7nHIthknc5pbmF6bUG6uLYMoD579+NVkVrD57C0 6uM0HW8RJ5otySWN0PyKb9c9XFQdqGapwbh1LSWzeeE9J5biEZkty0J0jgUpVoLO UCZMDW1dYtRGbCiIMouPsOH2QkIYP5F2VtgGqebpIElHcr2bdFMRtYy8yirBUhME bPz86i7HtZ+63hzQd0MjnZ3SibIUVtHhDwxAUAjQgqMq1cKYjP3xYQPhF/Bn8Y2t mm6hahbLBaejlx+9DzxpfQpOnJSErNE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:36 2024 by rpki-client on console-ams.rpki-client.org