$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9766e691-ed4e-3f21-8098-7fc52d129428.roa File: 9766e691-ed4e-3f21-8098-7fc52d129428.roa (raw, json) Hash identifier: ++Z2BzwoMF6FbOR9tIhnoOKEVmK9bth/neLsOIzjw3A= Subject key identifier: 2A:1C:6B:FB:EE:06:EF:6C:63:E4:3F:44:46:F8:C2:5C:2F:18:9F:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478F813862ED674221DA570480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9766e691-ed4e-3f21-8098-7fc52d129428.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 20940 IP address blocks: 23.33.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:38:62:ed:67:42:21:da:57:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=de32da8e-fe7f-45ff-bc1c-618053e0a6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:37:41:18:6c:bf:7f:f4:bd:24:4d:0b:4c:44: 34:d6:11:f8:74:df:5b:ec:38:c7:13:62:42:6c:20: b0:14:7f:6e:09:01:0e:c6:42:f2:f0:25:62:85:cf: 7d:a1:08:95:e4:93:48:c7:b8:e1:3f:62:f0:7b:92: 93:75:e8:37:16:5b:b0:19:2f:50:75:1a:d4:ca:a8: 42:89:f9:f6:73:e4:2d:2f:d4:d2:aa:1b:41:b9:8b: 52:33:f4:8e:dd:fe:44:2a:0a:82:89:92:90:26:d5: 64:9e:1b:0a:76:d7:d1:0b:de:0b:9e:a1:5c:39:e1: 8d:7c:7d:7d:e2:37:d4:22:e2:1b:e8:a9:6b:3f:4f: e3:b5:ea:69:74:95:46:cd:b4:17:39:fc:03:e3:16: be:5c:58:85:ea:cb:09:9d:03:a0:ee:96:af:78:fe: 15:d3:88:8f:c1:cf:44:2c:b2:40:3f:ae:a4:84:b8: 29:c0:19:c5:7b:2c:e3:37:df:13:35:61:6e:5c:74: 40:89:69:47:d9:27:b9:c8:41:81:e8:7a:73:f3:4f: 2c:81:78:3d:45:63:1f:81:75:30:c3:3d:8e:ef:d2: a6:c4:2a:ca:65:c1:86:ea:cd:f2:7d:fe:b4:bb:7f: 32:df:3d:93:fb:9c:3f:77:58:4a:e5:24:f9:4c:cc: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:6B:FB:EE:06:EF:6C:63:E4:3F:44:46:F8:C2:5C:2F:18:9F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9766e691-ed4e-3f21-8098-7fc52d129428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:80:30:d9:a5:91:71:74:6d:d0:4c:b8:15:1d:94:e6:97: 19:e8:69:f9:f3:be:9e:91:b5:13:0a:50:4c:80:43:87:72:0c: 26:bd:b6:c6:8a:e0:b6:f9:3f:53:5b:f0:0b:e9:f3:99:81:2b: e4:c4:85:4c:21:ad:b3:9d:61:98:ce:87:47:f1:22:06:76:97: 3f:1d:cd:ef:b7:6c:cf:46:9e:70:f5:e6:fc:20:21:d0:20:48: b0:9b:51:f4:b1:a6:73:95:34:fe:6d:21:93:24:88:f7:79:e0: 56:90:47:7c:a0:14:70:a8:7a:6d:d9:34:39:8d:f7:fb:ab:1d: 8c:56:d2:1d:b9:7f:59:c1:17:06:76:a0:09:3e:6b:78:39:fb: 84:42:63:a8:be:fc:bc:81:db:4e:63:95:ff:35:2d:8d:a9:2b: 93:f3:07:de:0e:30:0f:7f:dd:88:01:bd:62:cf:a3:20:4c:c8: a6:6a:0f:80:b1:01:31:27:a8:dc:3d:e7:f4:60:ab:b7:7c:4e: 10:2c:0c:8c:43:7c:7f:af:a5:af:9f:40:c5:4e:15:d2:5b:27: b4:3b:09:78:03:0b:e6:ba:a0:30:2a:15:b3:c7:6c:d0:95:f1: 73:dd:a8:bd:87:31:c1:6c:9f:66:7c:eb:84:68:4f:d3:80:eb: de:82:e3:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgThi7WdCIdpXBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk ZGUzMmRhOGUtZmU3Zi00NWZmLWJjMWMtNjE4MDUzZTBhNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zdBGGy/f/S9JE0LTEQ01hH4dN9b7DjHE2JC bCCwFH9uCQEOxkLy8CVihc99oQiV5JNIx7jhP2Lwe5KTdeg3FluwGS9QdRrUyqhC ifn2c+QtL9TSqhtBuYtSM/SO3f5EKgqCiZKQJtVknhsKdtfRC94LnqFcOeGNfH19 4jfUIuIb6KlrP0/jteppdJVGzbQXOfwD4xa+XFiF6ssJnQOg7paveP4V04iPwc9E LLJAP66khLgpwBnFeyzjN98TNWFuXHRAiWlH2Se5yEGB6Hpz808sgXg9RWMfgXUw wz2O79KmxCrKZcGG6s3yff60u38y3z2T+5w/d1hK5ST5TMwNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoca/vuBu9sY+Q/REb4wlwvGJ85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc2NmU2OTEtZWQ0ZS0z ZjIxLTgwOTgtN2ZjNTJkMTI5NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDgDDZpZFxdG3QTLgVHZTmlxnoafnzvp6RtRMKUEyAQ4dyDCa9tsaK 4Lb5P1Nb8Avp85mBK+TEhUwhrbOdYZjOh0fxIgZ2lz8dze+3bM9GnnD15vwgIdAg SLCbUfSxpnOVNP5tIZMkiPd54FaQR3ygFHCoem3ZNDmN9/urHYxW0h25f1nBFwZ2 oAk+a3g5+4RCY6i+/LyB205jlf81LY2pK5PzB94OMA9/3YgBvWLPoyBMyKZqD4Cx ATEnqNw95/Rgq7d8ThAsDIxDfH+vpa+fQMVOFdJbJ7Q7CXgDC+a6oDAqFbPHbNCV 8XPdqL2HMcFsn2Z864RoT9OA696C49Q= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:05 2024 by rpki-client on console-ams.rpki-client.org