$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa File: a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa (raw, json) Hash identifier: C9bKeRbWBnhC5hFhvXLw8lPmuYUXewPFC+8ut+kWIaM= Subject key identifier: BC:6A:9D:0E:DC:67:87:2A:94:93:7D:FF:9A:E3:32:5C:34:C7:C8:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76D263970B278ED8773A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:d2:63:97:0b:27:8e:d8:77:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=0d77fd8c-1426-4fb2-9023-dc9a758bbcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:f6:72:f8:8a:74:78:50:4e:ba:5a:18:d0: 02:bb:cf:97:77:d9:ce:1b:b1:bf:25:e9:d5:59:ec: 66:d0:21:d0:e7:da:34:f8:d7:66:7d:9b:f8:9c:19: ff:8c:92:35:19:cb:8f:4b:f0:fa:2d:b2:ad:ea:99: 80:56:06:ec:79:e7:dc:f1:a5:04:c8:da:16:2f:b5: e1:0f:49:f4:a6:c3:51:7f:80:ed:27:c8:ca:01:29: fd:29:97:ec:e4:7d:f6:3e:b0:74:c6:0c:bf:0d:c2: b0:c7:db:b5:ca:5e:f5:f0:04:9c:df:c3:c0:46:f4: da:12:8f:dd:74:1b:f0:4f:5d:f7:5e:19:2f:e0:ab: b2:66:6c:20:b0:6b:d2:f7:f0:6f:90:28:57:33:ec: 1b:a4:42:f0:b7:b4:cc:e2:07:9c:c8:ec:95:ce:2f: 23:b5:3e:77:e6:34:58:3a:68:97:85:4e:52:64:98: 66:01:ac:11:05:31:7e:a2:e3:3a:fd:67:48:ca:db: 05:91:90:3f:b5:17:d0:95:7f:49:51:c9:4d:da:ab: ab:55:83:6e:a8:08:2e:ee:4b:45:e4:63:15:66:a6: de:70:4f:3f:f1:ec:88:9b:c1:c2:11:aa:2b:8d:15: 70:13:9b:fa:c5:20:b6:b8:4f:8a:05:97:6e:34:be: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6A:9D:0E:DC:67:87:2A:94:93:7D:FF:9A:E3:32:5C:34:C7:C8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:84:9b:98:40:fe:25:89:7c:b7:f0:65:fe:88:8b:35:1e: 99:a5:12:6e:7e:b3:41:24:c4:06:e4:4e:f3:74:22:0b:9f:1a: 5b:91:5a:89:21:53:ae:af:a9:7a:22:43:85:33:d0:4f:1f:c7: 14:4f:2f:63:4c:5b:18:a2:0d:1d:33:e9:72:29:7d:ab:6a:f2: 83:37:8c:f4:7c:01:72:77:ef:45:c2:eb:03:1e:1f:bc:02:9c: 5f:87:9d:2f:3c:a7:e3:fe:0e:3b:32:28:60:b1:a7:67:2e:ec: f6:0a:14:e7:54:aa:09:da:a0:3a:bf:4e:4f:54:6b:98:f3:76: a9:a6:3c:98:a6:e5:3a:0d:8d:a7:3f:1d:37:27:09:de:71:47: e4:a1:a6:9d:e6:e9:9a:83:18:37:4d:cc:fb:59:bb:02:a7:86: 74:10:1d:50:af:6a:e2:33:1e:0e:51:a0:a1:27:50:b0:e5:e5: 7d:21:e6:29:b8:6a:68:7b:6b:ec:0f:81:ee:a6:bc:03:89:b8: 58:91:2b:5b:c1:58:20:b6:dd:25:ac:a2:3c:e7:63:b1:a6:5b: d0:4e:74:47:20:6f:89:70:da:d9:58:e0:91:22:01:70:17:88: d4:93:2b:d4:cc:53:95:1d:45:ce:33:a2:55:95:1d:31:64:fe: 9b:ac:13:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddtJjlwsnjth3OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MGQ3N2ZkOGMtMTQyNi00ZmIyLTkwMjMtZGM5YTc1OGJiY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pz2cviKdHhQTrpaGNACu8+Xd9nOG7G/JenV Wexm0CHQ59o0+NdmfZv4nBn/jJI1GcuPS/D6LbKt6pmAVgbseefc8aUEyNoWL7Xh D0n0psNRf4DtJ8jKASn9KZfs5H32PrB0xgy/DcKwx9u1yl718ASc38PARvTaEo/d dBvwT133Xhkv4KuyZmwgsGvS9/BvkChXM+wbpELwt7TM4gecyOyVzi8jtT535jRY OmiXhU5SZJhmAawRBTF+ouM6/WdIytsFkZA/tRfQlX9JUclN2qurVYNuqAgu7ktF 5GMVZqbecE8/8eyIm8HCEaorjRVwE5v6xSC2uE+KBZduNL4b+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxqnQ7cZ4cqlJN9/5rjMlw0x8hpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlZjkxOWQtMDNlOS0z MDZiLTk0MjctM2FlMjFjZmJmMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJKhJuYQP4liXy38GX+iIs1HpmlEm5+s0EkxAbkTvN0IgufGluRWokh U66vqXoiQ4Uz0E8fxxRPL2NMWxiiDR0z6XIpfatq8oM3jPR8AXJ370XC6wMeH7wC nF+HnS88p+P+DjsyKGCxp2cu7PYKFOdUqgnaoDq/Tk9Ua5jzdqmmPJim5ToNjac/ HTcnCd5xR+Shpp3m6ZqDGDdNzPtZuwKnhnQQHVCvauIzHg5RoKEnULDl5X0h5im4 amh7a+wPge6mvAOJuFiRK1vBWCC23SWsojznY7GmW9BOdEcgb4lw2tlY4JEiAXAX iNSTK9TMU5UdRc4zolWVHTFk/pusE1w= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:10 2024 by rpki-client on console-ams.rpki-client.org