$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa File: 8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa (raw, json) Hash identifier: Mzbz/yoXksV+DkV6aZ4G/kcqPEqVX2Cy4TwqxBn7laQ= Subject key identifier: EA:9B:D3:00:39:86:8A:AE:0B:F4:B7:58:10:F5:82:F9:6C:CB:C4:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5BA95454E0D267741B3180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.44.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:a9:54:54:e0:d2:67:74:1b:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=8ab6baf7-325e-47d6-9038-d7e68ef0e303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:bd:34:39:8e:85:36:b0:83:50:a0:11:7c: 3c:57:c1:ae:30:19:d9:0a:ad:97:c3:07:bb:18:c0: d5:75:f3:42:ab:5f:8a:0d:b0:85:96:c8:65:3b:95: 21:72:de:1f:c7:54:ba:37:ec:31:1b:3e:0c:c9:53: ab:f1:f4:9a:1e:89:47:bb:4e:38:af:53:35:5f:17: 50:eb:e1:b5:ee:84:6b:84:f3:9c:83:d4:11:02:ca: 26:02:ee:6b:78:79:2f:55:e6:8b:73:be:fb:08:d9: b2:b1:09:5e:5c:c0:2a:9b:6c:ca:63:aa:c5:5c:71: 1f:8a:8b:6c:be:ca:41:0b:63:d3:53:82:de:0d:66: a8:30:ac:51:ec:c2:9c:93:35:e1:65:2c:85:cc:a4: 7b:1b:f5:67:51:2b:65:b7:fa:3a:fa:70:a3:59:82: 7a:55:dd:13:33:fd:26:87:8e:1b:bc:94:23:2d:33: 01:48:14:21:c5:9e:9e:1a:2b:ee:c9:22:4a:37:09: 37:57:a0:42:82:e6:cb:80:d2:a3:c5:14:1f:18:d7: 38:ef:c6:37:43:b6:c0:79:12:42:87:00:81:d4:22: ae:67:50:fc:d4:e0:7f:c4:dc:61:7c:34:b0:b3:b0: 29:d5:bd:d9:23:37:bc:86:50:a3:06:ea:4f:58:87: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:D3:00:39:86:8A:AE:0B:F4:B7:58:10:F5:82:F9:6C:CB:C4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8754caa5-a5d2-3434-bef5-1d99fb4fce7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0a:fa:d6:94:cb:bb:6e:df:6f:b1:0b:da:46:1b:cb:84:88: 43:bd:bb:70:98:27:3d:7f:c2:1f:42:65:6b:56:ab:07:07:04: d7:5a:56:fd:af:cc:ed:5f:71:cf:8c:77:e0:8e:33:59:33:28: cf:3b:54:e1:24:81:46:43:c5:e2:d2:47:73:00:46:85:7a:63: 54:3f:40:72:12:a1:b5:ba:78:5e:b1:1a:20:ba:31:94:af:96: af:fd:94:19:d8:6e:0d:e6:85:0d:3f:c7:da:97:bd:f8:ee:34: 3a:36:0c:d2:66:be:eb:ce:67:92:78:f8:75:ef:65:e5:82:04: 8f:2b:d1:69:03:ef:bb:ac:2c:bc:8f:ea:18:f0:11:19:35:c2: f7:e0:24:4f:72:ef:92:27:9b:84:33:59:d5:e5:06:d1:74:d3: 0f:79:5c:64:f9:42:0b:27:29:7b:54:e1:4d:d6:cf:06:da:79: 19:b8:0b:5d:ff:43:61:a6:ba:36:91:a6:03:dc:91:ed:c5:1d: b0:a5:1f:7b:f2:79:31:65:14:7e:76:4e:f6:13:65:21:42:38: fc:75:86:93:68:ef:8b:0b:bf:19:d4:27:4b:fd:96:bf:ab:4b: 06:0a:0d:1e:0c:62:30:39:66:21:0e:54:4f:2c:c8:63:21:f8: c5:b3:99:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6lUVODSZ3QbMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk OGFiNmJhZjctMzI1ZS00N2Q2LTkwMzgtZDdlNjhlZjBlMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xi9NDmOhTawg1CgEXw8V8GuMBnZCq2Xwwe7 GMDVdfNCq1+KDbCFlshlO5Uhct4fx1S6N+wxGz4MyVOr8fSaHolHu044r1M1XxdQ 6+G17oRrhPOcg9QRAsomAu5reHkvVeaLc777CNmysQleXMAqm2zKY6rFXHEfiots vspBC2PTU4LeDWaoMKxR7MKckzXhZSyFzKR7G/VnUStlt/o6+nCjWYJ6Vd0TM/0m h44bvJQjLTMBSBQhxZ6eGivuySJKNwk3V6BCgubLgNKjxRQfGNc478Y3Q7bAeRJC hwCB1CKuZ1D81OB/xNxhfDSws7Ap1b3ZIze8hlCjBupPWIcy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqb0wA5hoquC/S3WBD1gvlsy8RxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc1NGNhYTUtYTVkMi0z NDM0LWJlZjUtMWQ5OWZiNGZjZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUK+taUy7tu32+xC9pGG8uEiEO9u3CYJz1/wh9CZWtWqwcHBNdaVv2v zO1fcc+Md+COM1kzKM87VOEkgUZDxeLSR3MARoV6Y1Q/QHISobW6eF6xGiC6MZSv lq/9lBnYbg3mhQ0/x9qXvfjuNDo2DNJmvuvOZ5J4+HXvZeWCBI8r0WkD77usLLyP 6hjwERk1wvfgJE9y75Inm4QzWdXlBtF00w95XGT5QgsnKXtU4U3WzwbaeRm4C13/ Q2GmujaRpgPcke3FHbClH3vyeTFlFH52TvYTZSFCOPx1hpNo74sLvxnUJ0v9lr+r SwYKDR4MYjA5ZiEOVE8syGMh+MWzmbA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:31 2024 by rpki-client on console-ams.rpki-client.org