$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa File: 7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa (raw, json) Hash identifier: aL6M6GBy9Qec/pKaWsTJB9KI3GjH8F4YRU/gmdnTZdk= Subject key identifier: BC:94:DF:2E:37:94:C4:83:B5:1D:17:50:01:03:2A:7A:59:EF:2B:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A5D6B67F282794C1E76482C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.52.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b6:7f:28:27:94:c1:e7:64:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=4bc3ee06-f4f1-4b53-9301-e2263a3dec49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:ee:52:25:6d:35:77:58:1e:f6:69:84:83: 74:78:db:55:c3:ae:4a:ee:16:fa:a7:fb:e0:15:68: 98:0b:27:a4:71:1d:8c:5f:dc:da:2c:97:b3:bf:d8: 83:a9:9f:98:14:8c:ea:06:44:76:c0:42:97:d9:6a: 2a:85:00:da:e7:f2:df:07:79:05:f3:ab:46:f7:91: aa:58:e3:c6:e5:91:cc:2a:ce:c7:0d:33:05:0e:5c: e9:78:8b:9d:d2:0e:9c:96:23:4b:52:ec:74:55:a6: 89:d6:4b:b3:8f:15:da:f2:66:58:b2:4e:c0:8e:20: 94:64:36:00:fa:95:8c:f3:f6:0a:e9:23:e8:ad:18: 4f:a1:4e:ab:4a:47:af:06:d6:26:00:05:f2:90:55: 31:b8:25:78:f7:3f:ba:b8:43:53:d0:8f:c7:44:cf: 20:60:fb:8a:b3:09:86:9f:e6:06:2a:c0:d8:cc:17: 48:19:7c:1e:d6:8b:89:24:fc:a7:42:37:4b:24:96: fc:f1:58:6e:10:ef:e2:1d:f3:a1:be:74:68:2f:dc: 10:69:b1:6f:dc:67:4c:62:bb:68:6a:06:58:b5:35: fb:d8:9d:48:ae:56:d0:6f:de:9e:47:35:cc:54:7a: 60:83:a6:4b:21:a3:b2:86:57:9b:ff:36:1a:6d:79: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:DF:2E:37:94:C4:83:B5:1D:17:50:01:03:2A:7A:59:EF:2B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c0cc7fc-546e-32dd-a62e-1a264b6ca608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8b:ef:b4:b9:bf:bb:44:67:e5:fe:62:82:2d:39:d2:1f:7e: fc:8d:ac:49:52:b5:bd:bb:c8:cd:4a:56:59:7f:f3:a4:ab:dc: b4:d5:e5:dc:83:ee:54:42:9b:35:17:f5:7c:e5:72:b9:c7:21: 5a:82:22:06:73:43:c8:ee:06:77:0e:ff:34:1a:63:05:95:9a: e2:2d:5e:3c:c4:97:4d:30:05:21:1c:d6:32:62:af:8b:af:b7: bd:57:39:17:a4:a4:43:6f:88:77:9d:f6:bf:28:5a:a2:61:bf: 95:ee:84:bc:42:5f:d1:bf:79:76:63:a4:62:2c:34:73:31:bf: 50:a7:71:8e:e2:4d:80:54:54:a3:30:e6:d6:1f:df:30:73:42: ba:42:12:d1:d8:b6:11:37:64:16:87:54:04:89:a7:23:d6:b1: 77:90:dc:bd:69:18:fc:32:96:9d:57:5c:ce:6e:03:ac:c8:8e: 62:92:d2:5b:28:4f:98:a2:4b:fe:8c:f4:62:5d:07:56:8e:3a: 07:6a:68:fa:8e:26:ea:28:15:a7:48:42:58:9b:d1:b4:e3:57: ff:2f:8f:95:67:53:7f:80:ab:d1:28:3e:26:f0:a1:87:1c:15: a1:50:b6:37:f3:21:06:53:b7:03:5d:65:a5:5c:d7:6d:a8:2f: 84:f2:1b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rZ/KCeUwedkgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NGJjM2VlMDYtZjRmMS00YjUzLTkzMDEtZTIyNjNhM2RlYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1zuUiVtNXdYHvZphIN0eNtVw65K7hb6p/vg FWiYCyekcR2MX9zaLJezv9iDqZ+YFIzqBkR2wEKX2WoqhQDa5/LfB3kF86tG95Gq WOPG5ZHMKs7HDTMFDlzpeIud0g6cliNLUux0VaaJ1kuzjxXa8mZYsk7AjiCUZDYA +pWM8/YK6SPorRhPoU6rSkevBtYmAAXykFUxuCV49z+6uENT0I/HRM8gYPuKswmG n+YGKsDYzBdIGXwe1ouJJPynQjdLJJb88VhuEO/iHfOhvnRoL9wQabFv3GdMYrto agZYtTX72J1IrlbQb96eRzXMVHpgg6ZLIaOyhleb/zYabXnlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyU3y43lMSDtR0XUAEDKnpZ7ytWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MwY2M3ZmMtNTQ2ZS0z MmRkLWE2MmUtMWEyNjRiNmNhNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqL77S5v7tEZ+X+YoItOdIffvyNrElStb27yM1KVll/86Sr3LTV5dyD 7lRCmzUX9XzlcrnHIVqCIgZzQ8juBncO/zQaYwWVmuItXjzEl00wBSEc1jJir4uv t71XORekpENviHed9r8oWqJhv5XuhLxCX9G/eXZjpGIsNHMxv1CncY7iTYBUVKMw 5tYf3zBzQrpCEtHYthE3ZBaHVASJpyPWsXeQ3L1pGPwylp1XXM5uA6zIjmKS0lso T5iiS/6M9GJdB1aOOgdqaPqOJuooFadIQlib0bTjV/8vj5VnU3+Aq9EoPibwoYcc FaFQtjfzIQZTtwNdZaVc122oL4TyG9k= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:49 2024 by rpki-client on console-ams.rpki-client.org