$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/818ad5a3-6661-3e75-916b-fa3631a23004.roa File: 818ad5a3-6661-3e75-916b-fa3631a23004.roa (raw, json) Hash identifier: nmz27dHJgr2DzVP94Hy9Tp0STzlIQhxZKQWehmZkGqM= Subject key identifier: C4:C0:4F:79:36:0F:76:82:AD:27:F2:A9:53:42:A8:76:5B:89:E3:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76CF320FC8592027E35900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/818ad5a3-6661-3e75-916b-fa3631a23004.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.43.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:cf:32:0f:c8:59:20:27:e3:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=40a23a44-181a-4df7-ba78-9bcac0a597e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:0e:18:0b:c2:70:e5:8c:0d:c3:a9:1a:16: 8a:56:68:52:e2:a6:ca:55:8f:74:89:92:70:76:9f: b6:92:ec:ca:70:4a:37:a1:ec:f9:d1:83:0a:8e:89: 62:ac:23:49:0c:af:d5:8d:d7:dd:2a:ee:52:6f:0f: 62:35:a3:89:cc:5d:f8:fe:dc:fa:77:76:4b:d7:ff: 24:9d:98:60:1e:36:8a:46:78:63:86:73:c6:40:3d: 29:95:79:a9:fb:97:7b:16:dd:6e:87:f2:d0:8b:37: 49:88:3a:98:86:73:b2:71:c1:91:2e:93:08:4d:df: d0:e3:26:eb:1c:b7:80:7c:6b:39:37:c6:8f:8c:94: 7d:20:04:34:40:37:3a:fb:9c:1b:c5:70:0f:ea:18: 1d:17:76:74:41:af:dd:b7:91:55:25:c4:c9:21:76: b5:c6:28:ee:2a:5d:e2:81:9b:de:26:03:cf:ea:aa: 81:6a:03:3f:dd:c6:9c:a3:98:bb:6b:44:b2:69:15: 80:6f:26:05:4a:40:cc:9b:d8:3a:b6:91:cb:51:86: c6:76:41:fa:6e:81:76:14:b0:c2:2b:f3:cf:68:7f: c9:ee:b4:bc:44:21:06:bd:f9:56:52:cb:1d:79:26: 8e:b1:37:22:8f:79:16:37:0e:19:62:f2:4a:0e:3d: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C0:4F:79:36:0F:76:82:AD:27:F2:A9:53:42:A8:76:5B:89:E3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/818ad5a3-6661-3e75-916b-fa3631a23004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ba:4d:a3:1d:df:d3:c8:ab:1d:6a:9d:dd:2f:46:c1:80:a4: 93:b2:98:34:df:ce:a2:5c:c6:ed:f9:36:b5:64:99:e4:06:19: ef:a8:7e:c3:fa:0a:cb:1f:e1:b9:67:89:9f:b9:94:00:0d:d0: 4b:0d:05:6b:52:07:d3:5b:2b:c1:a7:d8:59:16:4d:33:db:a8: 88:8a:cb:8f:6b:b0:6d:fc:e1:41:89:18:e1:d3:a3:16:a9:28: 33:aa:c8:52:67:b7:22:4e:e1:12:0f:a2:19:fc:6f:7b:c4:c9: b2:cf:82:51:b4:a3:98:7c:1b:f6:4e:2a:e4:42:d8:80:b5:ae: 00:44:e7:d9:7a:26:21:47:ff:7b:f0:cf:c5:32:be:cd:08:57: d7:65:50:f4:32:9b:7e:7d:7d:9d:ba:71:5b:75:9a:29:f6:1a: e5:b8:7a:d6:40:6b:0b:27:ee:d4:46:b7:ea:4a:e2:ff:84:41: 4c:b3:15:1e:78:f4:9f:32:84:f8:10:60:92:1c:b1:e5:61:de: 2d:d1:bd:a3:9f:75:ba:35:86:f6:ed:e3:1f:ea:51:9c:5f:32: 78:58:ef:37:43:7e:92:6d:d8:31:61:94:1f:11:2d:18:e8:fc: a5:6c:5a:0d:a2:b5:22:8e:f3:67:f7:a7:f8:d0:83:8d:15:21: 72:b3:f9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedds8yD8hZICfjWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NDBhMjNhNDQtMTgxYS00ZGY3LWJhNzgtOWJjYWMwYTU5N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSYOGAvCcOWMDcOpGhaKVmhS4qbKVY90iZJw dp+2kuzKcEo3oez50YMKjolirCNJDK/VjdfdKu5Sbw9iNaOJzF34/tz6d3ZL1/8k nZhgHjaKRnhjhnPGQD0plXmp+5d7Ft1uh/LQizdJiDqYhnOyccGRLpMITd/Q4ybr HLeAfGs5N8aPjJR9IAQ0QDc6+5wbxXAP6hgdF3Z0Qa/dt5FVJcTJIXa1xijuKl3i gZveJgPP6qqBagM/3caco5i7a0SyaRWAbyYFSkDMm9g6tpHLUYbGdkH6boF2FLDC K/PPaH/J7rS8RCEGvflWUssdeSaOsTcij3kWNw4ZYvJKDj2mKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTAT3k2D3aCrSfyqVNCqHZbieMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE4YWQ1YTMtNjY2MS0z ZTc1LTkxNmItZmEzNjMxYTIzMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS6TaMd39PIqx1qnd0vRsGApJOymDTfzqJcxu35NrVkmeQGGe+ofsP6 Cssf4blniZ+5lAAN0EsNBWtSB9NbK8Gn2FkWTTPbqIiKy49rsG384UGJGOHToxap KDOqyFJntyJO4RIPohn8b3vEybLPglG0o5h8G/ZOKuRC2IC1rgBE59l6JiFH/3vw z8Uyvs0IV9dlUPQym359fZ26cVt1min2GuW4etZAawsn7tRGt+pK4v+EQUyzFR54 9J8yhPgQYJIcseVh3i3RvaOfdbo1hvbt4x/qUZxfMnhY7zdDfpJt2DFhlB8RLRjo /KVsWg2itSKO82f3p/jQg40VIXKz+QE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:07 2024 by rpki-client on console-fra.rpki-client.org