$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa File: a5d737ea-6630-3722-85dc-5d144ef4e777.roa (raw, json) Hash identifier: R+Q1iUmKqB1i0mfTwjMpqdQCgDwvANAsl0NQiu1GpBc= Subject key identifier: 1E:DE:D5:5E:DB:77:44:B5:DA:1C:F5:A9:7B:B6:51:5C:63:A1:31:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76EC5BE7C1CEF6FDF34880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.43.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ec:5b:e7:c1:ce:f6:fd:f3:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=53bb1467-9540-4d93-9a7e-79d243d28b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:0a:35:db:ac:40:64:d6:ad:47:82:05:7f: 9a:44:b9:a5:11:8c:86:79:6b:f9:8b:75:12:95:04: 93:36:46:f3:cc:85:13:32:ca:90:5f:f6:97:f9:1e: fc:72:14:d1:12:e3:84:00:a5:0f:7b:be:9e:95:b3: 3f:7a:aa:7f:7d:71:96:f0:78:25:7c:1c:ff:dc:75: 72:ef:88:57:9e:7b:19:54:55:90:e0:f1:a4:81:15: f1:57:b2:7b:5f:a2:fa:0d:bd:d4:b7:3d:a0:49:b6: c0:f6:f6:81:06:d1:6a:06:79:c9:70:15:0e:00:c2: 3a:1f:86:51:74:4a:13:16:dc:d3:7e:da:92:88:5b: 5c:16:d8:56:cc:2f:31:23:06:91:c7:a7:70:c0:5d: 63:eb:44:05:c3:61:46:e2:7f:d5:fc:0d:47:c7:c5: eb:20:af:21:d2:1c:c8:52:98:4e:39:fe:fc:c0:e2: 3f:9d:ab:3e:3b:50:c6:b9:37:1f:65:8f:87:d7:88: a4:20:0d:8b:e8:38:f4:13:37:25:94:d5:af:bb:2b: 09:b1:62:d8:a3:be:44:c8:78:06:9f:c0:50:de:65: 5a:98:e1:fe:f6:e0:1e:6a:bc:37:dd:d6:47:b9:08: 83:81:f3:01:48:62:f4:1d:18:b5:03:c8:62:02:18: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DE:D5:5E:DB:77:44:B5:DA:1C:F5:A9:7B:B6:51:5C:63:A1:31:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:9c:75:7e:2d:25:1c:0e:b3:6d:a1:d4:fc:6c:82:4e:2e: d7:f2:f1:64:b5:66:72:52:d6:3c:31:fb:db:e0:ac:c7:0d:d2: 04:b3:21:95:21:c1:b4:25:43:df:d6:47:be:e4:e1:f1:40:92: 6a:98:b7:de:f0:a0:c1:89:2f:28:76:8f:71:53:6a:a1:b5:01: 50:51:66:a7:da:09:d2:f6:69:3a:90:8b:85:5f:c3:e0:34:49: b0:af:e6:52:d7:d9:79:96:f3:04:62:12:f1:b3:a9:3c:c6:c9: 2b:5e:21:73:e5:56:03:8e:02:13:d6:35:f1:88:e8:61:79:42: 11:6b:cd:81:b0:4b:3d:41:ca:ea:f0:e8:56:ca:ce:49:5c:b2: 97:83:f3:26:9f:dc:7c:28:39:a5:58:40:6b:2a:b2:57:96:f1: bc:25:3b:ce:30:37:49:ae:46:64:65:24:bd:6b:0f:24:f9:7c: ae:6f:99:dd:b7:69:dc:82:68:1c:b5:4d:b9:58:8c:d7:67:c0: f3:3a:cd:23:1b:78:82:bc:42:88:53:d0:01:c1:29:7c:4c:67: f2:f3:dc:36:f9:a1:61:c1:f6:00:13:09:cb:22:b9:f6:f5:87: e2:d9:db:b6:75:11:45:82:58:e6:0c:86:0c:90:88:69:d3:1c: 06:9a:b7:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduxb58HO9v3zSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NTNiYjE0NjctOTU0MC00ZDkzLTlhN2UtNzlkMjQzZDI4YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNkKNdusQGTWrUeCBX+aRLmlEYyGeWv5i3US lQSTNkbzzIUTMsqQX/aX+R78chTREuOEAKUPe76elbM/eqp/fXGW8HglfBz/3HVy 74hXnnsZVFWQ4PGkgRXxV7J7X6L6Db3Utz2gSbbA9vaBBtFqBnnJcBUOAMI6H4ZR dEoTFtzTftqSiFtcFthWzC8xIwaRx6dwwF1j60QFw2FG4n/V/A1Hx8XrIK8h0hzI UphOOf78wOI/nas+O1DGuTcfZY+H14ikIA2L6Dj0EzcllNWvuysJsWLYo75EyHgG n8BQ3mVamOH+9uAearw33dZHuQiDgfMBSGL0HRi1A8hiAhhO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7e1V7bd0S12hz1qXu2UVxjoTGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVkNzM3ZWEtNjYzMC0z NzIyLTg1ZGMtNWQxNDRlZjRlNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJvnHV+LSUcDrNtodT8bIJOLtfy8WS1ZnJS1jwx+9vgrMcN0gSzIZUh wbQlQ9/WR77k4fFAkmqYt97woMGJLyh2j3FTaqG1AVBRZqfaCdL2aTqQi4Vfw+A0 SbCv5lLX2XmW8wRiEvGzqTzGySteIXPlVgOOAhPWNfGI6GF5QhFrzYGwSz1Byurw 6FbKzklcspeD8yaf3HwoOaVYQGsqsleW8bwlO84wN0muRmRlJL1rDyT5fK5vmd23 adyCaBy1TblYjNdnwPM6zSMbeIK8QohT0AHBKXxMZ/Lz3Db5oWHB9gATCcsiufb1 h+LZ27Z1EUWCWOYMhgyQiGnTHAaat6E= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:11 2024 by rpki-client on console-ams.rpki-client.org