$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa File: b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa (raw, json) Hash identifier: Y7yCXWh+amePuK+EIRHhheL8XJKXvYl51Z+hvU+X4/k= Subject key identifier: C8:84:50:DD:87:1A:38:01:FD:42:D8:98:15:2C:28:00:66:07:52:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584714CADAF8874AB723195D9E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa Signing time: Mon 02 Sep 2024 14:04:51 +0000 ROA not before: Mon 02 Sep 2024 14:04:51 +0000 ROA not after: Sun 01 Dec 2024 15:04:51 +0000 asID: 20940 IP address blocks: 23.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:14:ca:da:f8:87:4a:b7:23:19:5d:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 14:04:51 2024 GMT Not After : Dec 1 15:04:51 2024 GMT Subject: CN=5b83ae58-0c30-48d7-ab94-d8387ff16967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:c5:07:47:63:38:a2:4e:05:25:bd:19:e2: 23:65:e2:49:d0:1c:19:a9:53:ff:8e:e4:ee:04:d8: f2:be:ae:00:21:ba:de:35:e1:2b:d4:f4:a6:48:e0: e1:18:fc:8c:b3:48:b5:d8:cf:6f:24:5d:e3:29:5a: 5b:fa:f1:2f:78:fe:0f:13:6e:80:a4:1c:3a:eb:37: 0f:d2:48:4f:4d:22:a5:2a:e7:7a:b4:ac:62:c8:54: e6:43:4e:73:33:aa:4e:49:f9:cc:65:83:5f:c4:ed: 4b:d2:57:00:20:c2:31:8f:86:9f:ea:4c:53:48:1b: 6b:30:17:5c:aa:cd:0c:85:c9:6e:05:08:a7:c9:17: fe:52:ec:19:8f:e9:53:35:63:cd:a0:45:17:f3:27: 8d:61:cf:49:0b:10:c1:70:76:be:64:46:98:93:cf: f0:ab:1e:9b:ce:62:de:cf:09:43:ea:f5:c0:a3:91: aa:72:5e:f1:f8:e2:63:3d:2a:6d:78:49:9d:6d:2f: b0:a2:83:d0:9f:54:dc:0b:de:a2:87:06:de:e0:9d: af:0d:52:c8:0e:09:e4:45:68:dd:a3:c6:2a:53:c2: e7:19:ac:23:36:99:5c:c1:83:d6:06:cf:fb:8f:16: f9:5e:56:1b:ee:00:82:4c:25:43:73:2e:2f:c7:3a: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:50:DD:87:1A:38:01:FD:42:D8:98:15:2C:28:00:66:07:52:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b3:e7:8b:ca:f6:d2:4e:b4:47:f1:30:a7:d7:fa:a2:0f:d3: 9e:ae:ad:89:ea:a1:9d:16:61:a1:e5:d4:ae:d8:78:2b:1d:3c: 26:19:e9:e8:a1:26:92:25:7a:2f:d1:b2:03:87:c4:a1:7b:e0: 7d:ab:06:fc:22:c5:0d:c3:36:91:e6:a3:7f:e2:a0:99:90:3a: 07:cc:a1:a5:d2:4f:d1:54:ec:5a:1e:2c:18:3a:30:b8:ec:0b: bb:b1:ce:0a:35:ce:0f:23:01:59:ef:3e:48:08:c9:58:97:61: 08:66:50:00:30:42:0f:d3:31:a1:a9:a5:b7:1d:d5:1d:63:8b: 0c:07:5a:b6:8f:df:e2:ca:9d:64:7f:62:ff:39:df:8f:be:66: 52:b8:e5:ed:12:25:07:17:17:dc:d1:48:86:29:50:18:08:eb: a6:0e:33:a2:08:9f:ea:72:6b:71:2b:0e:84:83:cb:5d:6a:a9: 2b:f9:b7:72:da:07:f0:69:94:de:a0:53:99:a9:a6:3f:92:c8: b6:a1:80:91:68:eb:e9:db:29:a0:8e:96:0a:b1:02:3f:c5:56: ff:e2:c7:91:71:49:64:7d:df:db:70:02:75:72:dc:b6:cf:39: cc:35:9b:b5:8b:3f:9e:16:46:66:b6:cf:5b:bf:48:fa:a4:b2: 47:33:4a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcUytr4h0q3IxldnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkwMjE0MDQ1MVoXDTI0MTIwMTE1MDQ1MVowLzEtMCsGA1UEAxMk NWI4M2FlNTgtMGMzMC00OGQ3LWFiOTQtZDgzODdmZjE2OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUbFB0djOKJOBSW9GeIjZeJJ0BwZqVP/juTu BNjyvq4AIbreNeEr1PSmSODhGPyMs0i12M9vJF3jKVpb+vEveP4PE26ApBw66zcP 0khPTSKlKud6tKxiyFTmQ05zM6pOSfnMZYNfxO1L0lcAIMIxj4af6kxTSBtrMBdc qs0MhcluBQinyRf+UuwZj+lTNWPNoEUX8yeNYc9JCxDBcHa+ZEaYk8/wqx6bzmLe zwlD6vXAo5Gqcl7x+OJjPSpteEmdbS+wooPQn1TcC96ihwbe4J2vDVLIDgnkRWjd o8YqU8LnGawjNplcwYPWBs/7jxb5XlYb7gCCTCVDcy4vxzpyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiEUN2HGjgB/ULYmBUsKABmB1JGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBjNjZjYmEtYTFmYS0z ZmViLTliYWUtMWM2YTBkNzM3YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKz54vK9tJOtEfxMKfX+qIP056urYnqoZ0WYaHl1K7YeCsdPCYZ6eih JpIlei/RsgOHxKF74H2rBvwixQ3DNpHmo3/ioJmQOgfMoaXST9FU7FoeLBg6MLjs C7uxzgo1zg8jAVnvPkgIyViXYQhmUAAwQg/TMaGppbcd1R1jiwwHWraP3+LKnWR/ Yv8534++ZlK45e0SJQcXF9zRSIYpUBgI66YOM6IIn+pya3ErDoSDy11qqSv5t3La B/BplN6gU5mppj+SyLahgJFo6+nbKaCOlgqxAj/FVv/ix5FxSWR939twAnVy3LbP Ocw1m7WLP54WRma2z1u/SPqkskczStI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:27 2024 by rpki-client on console-fra.rpki-client.org