$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa File: aa87476e-6587-32f8-9e25-ff671f5c947a.roa (raw, json) Hash identifier: 85cXsdG/nHxn57rlLJWwe70WFTe9R04LqTVtYPQ0b8Q= Subject key identifier: 78:5D:BC:F0:77:85:8C:1E:34:DF:21:8E:95:6B:E4:AE:EE:CD:FF:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B1017AD1BC44F175D26CFAAE Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.195.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:7a:d1:bc:44:f1:75:d2:6c:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=97aaa999-6d87-43e0-a944-43efb17b9b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:da:19:ad:2c:59:c6:56:b0:e3:33:49:43: de:ed:b2:e2:5e:9d:56:f0:cc:74:24:fb:bb:bf:66: 62:26:e8:88:f8:cd:f8:09:b3:df:51:08:e2:1e:ec: 38:42:2d:bd:11:4c:fb:05:ce:a3:5c:89:e3:ff:34: c5:0d:25:40:97:90:81:b4:70:a7:cb:21:e6:ca:d8: 6f:a4:9d:0d:73:b0:56:f9:b7:f9:30:8b:6f:fa:b5: 04:6e:cf:06:27:a8:37:62:a2:06:da:1f:63:a2:5e: 33:1a:31:12:a3:4b:f6:b7:2e:1a:e2:8c:be:22:a3: 94:70:ca:dc:71:0b:dc:39:25:18:3f:20:e7:bd:9b: 9c:4b:75:76:bb:24:20:3d:f6:38:ac:a4:34:ec:31: 67:e9:4e:1b:f6:a5:ef:f4:17:b9:a6:82:bb:0e:12: de:4a:c5:c2:66:5e:8c:50:72:2f:6c:e9:c2:0d:e7: 71:3e:40:a1:cc:d6:44:8f:5d:92:58:43:35:b1:ab: 64:c2:9d:80:d4:ea:89:b9:ef:87:0b:15:7d:35:5e: d0:5d:d4:c4:65:45:83:43:db:46:55:16:48:a9:2f: 10:ed:90:a8:68:d9:5e:c8:28:97:23:3d:ab:34:9a: 62:1c:e7:8b:29:20:8c:18:f5:08:81:3e:10:57:78: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:BC:F0:77:85:8C:1E:34:DF:21:8E:95:6B:E4:AE:EE:CD:FF:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0b:56:0a:85:55:1e:b7:d3:3e:ab:90:8e:50:d6:d0:15:f0: 80:46:70:00:fd:ac:b8:d3:c5:7b:ab:5f:0c:c1:0d:1c:91:91: e1:5d:dc:c5:17:ca:14:7a:c2:75:e5:23:72:22:04:fb:3f:cd: 8c:34:80:20:8a:24:92:6e:62:0f:9e:42:d7:16:9a:68:e5:1f: 8e:9f:73:2b:b3:b5:85:6c:75:b8:68:77:1d:0d:dd:03:d5:1f: 61:31:42:b9:a3:4b:78:ef:bf:b5:c0:9e:40:68:d8:d5:48:73: 1b:d8:9f:c1:d1:e4:b6:64:9e:9b:ce:14:0c:f0:6b:e4:01:cc: 0f:7e:18:ea:ef:58:a3:b5:b8:a5:3b:34:b3:83:6e:c0:c5:c3: 28:a5:d3:6b:f4:ad:7d:d9:b4:3d:d8:e5:f5:06:d8:57:fd:8f: b3:62:4c:62:ed:cf:41:50:1b:e9:63:6e:f2:18:b3:5c:52:1e: 02:cb:e1:90:6f:6a:e8:63:b4:2b:46:15:5f:a5:dd:24:93:08: 9e:7b:04:dc:a8:61:7f:44:73:10:4c:9d:a8:7e:29:7d:3f:9b: 4e:cf:d3:72:4b:ba:ae:2f:f7:0e:1f:07:61:63:60:c4:ff:de: 9e:88:97:eb:07:b8:e2:aa:a6:67:08:ca:68:93:c8:82:fc:e1: 3b:c5:bf:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAXrRvETxddJs+q4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk OTdhYWE5OTktNmQ4Ny00M2UwLWE5NDQtNDNlZmIxN2I5YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tzaGa0sWcZWsOMzSUPe7bLiXp1W8Mx0JPu7 v2ZiJuiI+M34CbPfUQjiHuw4Qi29EUz7Bc6jXInj/zTFDSVAl5CBtHCnyyHmythv pJ0Nc7BW+bf5MItv+rUEbs8GJ6g3YqIG2h9jol4zGjESo0v2ty4a4oy+IqOUcMrc cQvcOSUYPyDnvZucS3V2uyQgPfY4rKQ07DFn6U4b9qXv9Be5poK7DhLeSsXCZl6M UHIvbOnCDedxPkChzNZEj12SWEM1satkwp2A1OqJue+HCxV9NV7QXdTEZUWDQ9tG VRZIqS8Q7ZCoaNleyCiXIz2rNJpiHOeLKSCMGPUIgT4QV3jt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhdvPB3hYweNN8hjpVr5K7uzf/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzQ3NmUtNjU4Ny0z MmY4LTllMjUtZmY2NzFmNWM5NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHELVgqFVR630z6rkI5Q1tAV8IBGcAD9rLjTxXurXwzBDRyRkeFd3MUX yhR6wnXlI3IiBPs/zYw0gCCKJJJuYg+eQtcWmmjlH46fcyuztYVsdbhodx0N3QPV H2ExQrmjS3jvv7XAnkBo2NVIcxvYn8HR5LZknpvOFAzwa+QBzA9+GOrvWKO1uKU7 NLODbsDFwyil02v0rX3ZtD3Y5fUG2Ff9j7NiTGLtz0FQG+ljbvIYs1xSHgLL4ZBv auhjtCtGFV+l3SSTCJ57BNyoYX9EcxBMnah+KX0/m07P03JLuq4v9w4fB2FjYMT/ 3p6Il+sHuOKqpmcIymiTyIL84TvFvyY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:13 2024 by rpki-client on console-ams.rpki-client.org