$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa File: aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa (raw, json) Hash identifier: CNuvYt8cS7Zxpo5bJ8Ftf7WUYiN9SBXrqKjmZxTs1UQ= Subject key identifier: B4:F7:71:80:FB:9F:60:E6:1B:8A:8C:96:2C:C7:99:D9:DF:F9:99:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5BA4E981DC76CCC3D25900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 23693 IP address blocks: 23.41.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:a4:e9:81:dc:76:cc:c3:d2:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=246da7e9-f355-4b0a-9caa-d109ea1280a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:92:30:80:18:39:d4:ef:b6:11:f3:f6:b0: a2:4e:cb:e3:87:64:d6:b0:d7:e6:33:d4:d5:41:5e: 10:fc:ea:cb:70:88:01:3d:97:68:fc:38:7b:8f:47: a4:aa:51:31:0e:14:75:01:76:b2:bd:5e:7e:27:93: bf:46:e7:53:d0:62:c6:ed:1e:68:46:d4:31:67:e2: 8d:42:f7:02:31:8e:f4:fc:6d:4e:94:db:c8:82:e1: 24:e6:45:21:99:37:df:cd:f3:b3:bd:ae:8e:1f:c6: 91:76:7b:53:41:77:52:af:82:90:a4:e6:9f:02:60: 00:d6:f1:3d:15:a9:ca:b4:d3:8d:1f:5e:68:33:37: 0e:21:4b:4e:51:0b:88:de:07:ad:ee:9c:f1:ff:40: 5c:00:18:e4:c5:9f:c2:cb:6a:a0:c9:a8:b3:6c:d0: a6:04:e0:55:cb:4f:50:a6:96:b9:36:bc:3a:31:f5: d5:6d:8d:02:24:25:22:fc:f9:98:91:44:2c:5f:42: a7:bf:57:aa:3d:21:e0:1e:b5:34:ef:37:53:0d:a1: 98:fa:80:85:d0:d4:38:a4:73:05:d7:7b:15:97:e1: 0e:34:de:42:68:2b:b9:98:bf:c5:fc:ab:f1:c3:af: f5:92:ea:b5:a2:bb:3f:fd:c0:d5:92:66:79:b6:2b: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F7:71:80:FB:9F:60:E6:1B:8A:8C:96:2C:C7:99:D9:DF:F9:99:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1f:d9:a9:48:13:d9:57:69:70:de:99:ec:85:3e:06:d2:f2: 24:aa:0c:b6:bb:f6:84:53:70:86:9e:b2:d0:10:84:16:03:02: ea:98:14:72:8d:58:84:af:39:b8:38:b2:3e:bf:e7:e4:0b:45: 89:f6:d5:74:11:32:4d:48:a5:7a:9e:e1:fe:85:a7:30:e1:f9: 6a:92:1c:e5:2c:9d:c6:73:76:ae:54:dc:22:4c:cc:2b:2f:31: 91:da:89:e5:bb:ee:02:28:4c:cd:20:14:57:4d:81:04:fe:cd: 45:18:47:2c:6a:5f:90:1a:f1:8a:5c:db:6e:6b:9b:ed:6e:1b: ee:5c:f2:b0:d1:c0:f1:15:72:47:fd:66:61:6b:60:77:da:15: 0b:cc:b1:1c:69:43:80:39:08:f6:cb:8c:95:28:56:94:03:00: 27:f9:45:ec:d3:b1:aa:12:32:aa:77:5b:75:09:fa:18:16:c6: 59:2c:a7:d1:d2:81:5b:12:79:a9:6a:3a:28:fb:67:08:9f:d2: 83:24:ca:ce:a3:f1:c5:6c:26:50:98:26:d4:e0:05:04:d1:ad: 1e:f7:d5:9d:6f:3c:4f:87:11:5a:b3:a9:64:21:c1:d6:1f:ea: 17:0d:e2:bd:25:2c:a4:02:d1:02:b3:bb:a9:5f:8d:af:1a:0f: 9a:db:1f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6Tpgdx2zMPSWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk MjQ2ZGE3ZTktZjM1NS00YjBhLTljYWEtZDEwOWVhMTI4MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP6SMIAYOdTvthHz9rCiTsvjh2TWsNfmM9TV QV4Q/OrLcIgBPZdo/Dh7j0ekqlExDhR1AXayvV5+J5O/RudT0GLG7R5oRtQxZ+KN QvcCMY70/G1OlNvIguEk5kUhmTffzfOzva6OH8aRdntTQXdSr4KQpOafAmAA1vE9 FanKtNONH15oMzcOIUtOUQuI3get7pzx/0BcABjkxZ/Cy2qgyaizbNCmBOBVy09Q ppa5Nrw6MfXVbY0CJCUi/PmYkUQsX0Knv1eqPSHgHrU07zdTDaGY+oCF0NQ4pHMF 13sVl+EONN5CaCu5mL/F/Kvxw6/1kuq1ors//cDVkmZ5tivD4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT3cYD7n2DmG4qMlizHmdnf+Zn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwZjE3YzctY2FkNi0z N2E4LWFlNWYtZjhlNzgwZjIzNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkf2alIE9lXaXDemeyFPgbS8iSqDLa79oRTcIaestAQhBYDAuqYFHKN WISvObg4sj6/5+QLRYn21XQRMk1IpXqe4f6FpzDh+WqSHOUsncZzdq5U3CJMzCsv MZHaieW77gIoTM0gFFdNgQT+zUUYRyxqX5Aa8Ypc225rm+1uG+5c8rDRwPEVckf9 ZmFrYHfaFQvMsRxpQ4A5CPbLjJUoVpQDACf5RezTsaoSMqp3W3UJ+hgWxlksp9HS gVsSealqOij7Zwif0oMkys6j8cVsJlCYJtTgBQTRrR731Z1vPE+HEVqzqWQhwdYf 6hcN4r0lLKQC0QKzu6lfja8aD5rbHwQ= -----END CERTIFICATE-----Generated at Tue Nov 26 05:30:58 2024 by rpki-client on console-ams.rpki-client.org