$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa File: 9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa (raw, json) Hash identifier: 0NjgAWTAWNpYYtOfIw0gi+avUUHDM7mc+Eie2tgYgdw= Subject key identifier: F8:35:DC:15:9C:F9:EC:7D:AC:B1:43:66:FD:45:22:9A:EE:F5:3D:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D1656CC576FEA7278B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.223.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d1:65:6c:c5:76:fe:a7:27:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=fb8bb88b-b66f-4ff4-a5ca-3593db3c1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:d7:21:40:5f:f9:7a:43:09:4a:66:72:42: 77:33:8e:2f:7b:22:01:db:76:13:15:cc:d4:23:99: 8d:4d:99:e3:b7:b9:bd:80:83:e4:5d:a4:25:ff:cb: 32:f4:fe:66:b4:96:82:ad:c1:77:43:41:27:b8:d2: e5:87:01:ee:11:c0:1d:5a:50:57:72:5d:ee:d5:d1: 4c:3e:64:d2:49:b1:52:83:40:67:83:95:70:58:84: 31:64:8c:e2:b1:a0:20:ec:62:09:ad:89:d2:98:9f: 66:1b:50:73:c4:15:63:80:20:c1:c2:0a:4e:08:23: bc:eb:7e:e5:2d:26:37:c9:8a:0e:99:61:52:3d:2f: 83:4e:af:8f:14:1a:31:05:13:4a:4a:0c:1d:9b:38: eb:dd:e0:9d:43:b0:4d:ed:51:33:32:97:7e:65:3a: 24:14:d8:3d:80:48:e4:2f:c7:9a:45:ef:a8:bf:02: 6a:a7:0a:3d:1a:36:36:e8:ce:50:9e:0d:08:1c:88: 31:66:39:66:9c:f7:4f:86:2b:fb:df:41:21:4e:b9: 00:1d:e7:59:27:a9:c6:c9:f7:73:28:2b:8c:34:1e: 7e:b2:e7:04:8b:70:ff:4d:45:2f:0f:16:45:6a:74: 64:5d:78:ae:f5:b1:55:d1:75:1e:f5:0c:42:2c:67: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:DC:15:9C:F9:EC:7D:AC:B1:43:66:FD:45:22:9A:EE:F5:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9f:16:81:ce:ca:e5:f6:02:81:d1:fa:37:bb:6f:2f:d3:d1: ff:7f:54:42:e8:1e:e6:61:f4:e4:6a:2b:fd:a2:18:2b:e1:b3: ae:b1:68:c3:10:6e:aa:71:89:b7:d4:fd:5e:c8:ca:9c:89:f1: d4:a9:76:37:09:69:94:61:63:08:cf:b2:c4:e9:0a:77:33:ac: 0d:16:8e:f1:8d:2f:b9:96:d4:ea:96:c5:d4:91:6a:03:39:44: 96:2c:bc:6d:c3:84:0a:bb:d2:80:50:98:12:99:31:b9:e5:f4: b2:7b:b9:dd:ad:aa:f2:c2:b0:83:e5:33:0d:6c:1d:07:c7:73: 98:0b:1b:d6:a1:43:7e:04:86:c2:9c:14:47:a0:a1:d8:cd:f0: c1:e3:f4:72:de:60:c9:1b:a0:92:65:9e:04:f6:eb:65:0a:9a: 6a:a3:15:d5:65:ff:82:db:4a:e0:96:f6:37:b5:1a:b3:5d:d5: 3d:6a:cd:ab:5a:33:8c:47:b7:3d:38:6a:30:07:ab:76:0f:2d: 20:a8:a7:2d:ef:67:4a:c2:2e:42:00:db:9f:81:c5:e3:36:c9: 17:a1:ba:ec:3d:1e:da:37:4b:a9:6f:45:ea:15:ad:c3:d7:56: 52:3a:39:fd:64:56:c8:04:62:4a:06:cc:ec:c0:27:02:83:df: ca:ab:71:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNFlbMV2/qcni4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZmI4YmI4OGItYjY2Zi00ZmY0LWE1Y2EtMzU5M2RiM2MxZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizHXIUBf+XpDCUpmckJ3M44veyIB23YTFczU I5mNTZnjt7m9gIPkXaQl/8sy9P5mtJaCrcF3Q0EnuNLlhwHuEcAdWlBXcl3u1dFM PmTSSbFSg0Bng5VwWIQxZIzisaAg7GIJrYnSmJ9mG1BzxBVjgCDBwgpOCCO8637l LSY3yYoOmWFSPS+DTq+PFBoxBRNKSgwdmzjr3eCdQ7BN7VEzMpd+ZTokFNg9gEjk L8eaRe+ovwJqpwo9GjY26M5Qng0IHIgxZjlmnPdPhiv730EhTrkAHedZJ6nGyfdz KCuMNB5+sucEi3D/TUUvDxZFanRkXXiu9bFV0XUe9QxCLGcO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg13BWc+ex9rLFDZv1FIpru9T0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzYWM4NWItMTZlMy0z ZThiLThlOGUtMTUyYmFjNDQxMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+fFoHOyuX2AoHR+je7by/T0f9/VELoHuZh9ORqK/2iGCvhs66xaMMQ bqpxibfU/V7IypyJ8dSpdjcJaZRhYwjPssTpCnczrA0WjvGNL7mW1OqWxdSRagM5 RJYsvG3DhAq70oBQmBKZMbnl9LJ7ud2tqvLCsIPlMw1sHQfHc5gLG9ahQ34EhsKc FEegodjN8MHj9HLeYMkboJJlngT262UKmmqjFdVl/4LbSuCW9je1GrNd1T1qzata M4xHtz04ajAHq3YPLSCopy3vZ0rCLkIA25+BxeM2yRehuuw9Hto3S6lvReoVrcPX VlI6Of1kVsgEYkoGzOzAJwKD38qrcSE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:07 2024 by rpki-client on console-ams.rpki-client.org