$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa File: ab51a240-8131-3703-947d-48e02f0ce40d.roa (raw, json) Hash identifier: L7PG52D2q+uJfrp6ob29E/RviqJ6KbVQzsOPVgunxX0= Subject key identifier: 31:59:97:27:88:46:9A:28:3E:25:51:CB:73:CB:E9:69:5D:0D:A9:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A041568A3526622F0205A500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.47.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:56:8a:35:26:62:2f:02:05:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=e818d1da-0ba0-41c9-908d-55ec140be7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:e3:76:a8:32:8c:19:cd:58:2f:f7:6d:44: 5f:40:30:a3:71:7e:cd:ff:61:91:f2:76:eb:8d:4f: 47:bf:cb:a2:bd:86:b7:b1:73:db:0c:31:b1:5d:c4: c7:64:5d:fb:fa:08:58:26:83:71:7c:ea:9c:ac:69: 42:0a:cd:bc:04:7a:4b:9a:98:83:b2:7b:e8:61:89: a4:11:bd:32:6f:b9:a1:60:5a:d5:88:79:3c:2f:4c: 87:90:21:19:92:75:79:e6:2f:3e:f8:b5:27:5c:94: 45:86:6f:4b:fe:6e:78:66:9a:cb:ae:77:10:21:c7: 23:6f:12:7d:e5:00:7a:02:be:2c:8f:1a:db:e3:10: e4:6c:41:8b:43:d2:30:0b:84:68:f1:03:bd:db:fe: c7:d1:46:97:41:61:3e:4e:2d:36:b6:96:ff:1c:56: fc:b3:c7:9e:ac:4d:1e:64:46:e1:41:68:fa:c4:bd: 83:0c:3e:dd:ff:52:41:9c:8a:d0:25:3d:40:d6:25: af:47:0c:53:40:be:23:95:fc:7c:1b:f6:70:b7:9b: 96:0d:6e:a4:df:f9:27:29:61:4f:1d:26:d4:b4:52: 54:50:72:bb:97:ee:c8:02:d8:18:ec:25:80:62:75: 9f:a1:4b:75:4c:d4:7c:73:d0:40:fa:7b:f8:5c:f3: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:59:97:27:88:46:9A:28:3E:25:51:CB:73:CB:E9:69:5D:0D:A9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4e:ba:e7:6f:97:42:e6:4b:a0:01:f3:20:51:cb:ad:8c:e3: b2:18:c6:f7:c7:fc:3c:0f:d1:55:e0:ea:84:82:df:d0:fe:6d: cf:2c:34:ac:8c:79:91:3c:cf:71:07:82:ec:48:e3:e8:7b:f0: d8:5a:5f:68:cf:53:b7:58:76:bc:84:01:f8:94:a6:f3:72:05: 1e:8b:00:67:ce:e1:99:e3:bf:a3:42:f2:70:81:f2:f8:ff:8f: 3b:4f:2e:50:c1:a3:58:65:4e:4f:34:5b:da:07:90:b8:50:32: e2:89:45:7e:a8:9b:49:6e:1c:2d:05:62:fa:29:79:58:f1:df: 95:08:24:2c:4f:61:be:3a:50:e0:ed:76:93:9e:5b:12:99:a7: 46:ba:c2:e6:f8:ad:97:23:00:46:3b:60:64:9b:da:0f:51:91: 3a:fb:8b:ed:7f:86:08:79:03:09:cf:38:d2:65:4e:bd:25:66: 74:dd:31:6d:37:8a:21:a7:93:0e:89:a2:0b:fd:b9:cf:b8:ad: f7:ea:58:7d:fc:91:20:97:0b:2d:31:7e:3a:89:09:95:84:09: 69:cb:86:c3:a0:4c:6c:b6:35:a3:3f:16:a3:36:97:ef:9c:eb: 9a:e1:82:e0:bc:b5:c6:d3:64:da:cb:0f:cd:13:e1:8d:93:28: fe:57:04:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVaKNSZiLwIFpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk ZTgxOGQxZGEtMGJhMC00MWM5LTkwOGQtNTVlYzE0MGJlN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYPjdqgyjBnNWC/3bURfQDCjcX7N/2GR8nbr jU9Hv8uivYa3sXPbDDGxXcTHZF37+ghYJoNxfOqcrGlCCs28BHpLmpiDsnvoYYmk Eb0yb7mhYFrViHk8L0yHkCEZknV55i8++LUnXJRFhm9L/m54ZprLrncQIccjbxJ9 5QB6Ar4sjxrb4xDkbEGLQ9IwC4Ro8QO92/7H0UaXQWE+Ti02tpb/HFb8s8eerE0e ZEbhQWj6xL2DDD7d/1JBnIrQJT1A1iWvRwxTQL4jlfx8G/Zwt5uWDW6k3/knKWFP HSbUtFJUUHK7l+7IAtgY7CWAYnWfoUt1TNR8c9BA+nv4XPNPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFZlyeIRpooPiVRy3PL6WldDak4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI1MWEyNDAtODEzMS0z NzAzLTk0N2QtNDhlMDJmMGNlNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy/dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlOuudvl0LmS6AB8yBRy62M47IYxvfH/DwP0VXg6oSC39D+bc8sNKyM eZE8z3EHguxI4+h78NhaX2jPU7dYdryEAfiUpvNyBR6LAGfO4Znjv6NC8nCB8vj/ jztPLlDBo1hlTk80W9oHkLhQMuKJRX6om0luHC0FYvopeVjx35UIJCxPYb46UODt dpOeWxKZp0a6wub4rZcjAEY7YGSb2g9RkTr7i+1/hgh5AwnPONJlTr0lZnTdMW03 iiGnkw6Jogv9uc+4rffqWH38kSCXCy0xfjqJCZWECWnLhsOgTGy2NaM/FqM2l++c 65rhguC8tcbTZNrLD80T4Y2TKP5XBNM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:25 2024 by rpki-client on console-fra.rpki-client.org