$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa File: b5a8e509-04b3-37ee-8feb-39c2c941784b.roa (raw, json) Hash identifier: EV5/qkUFLZCTdxtcDjDhckhBKRyNJZofH0l59a4/iAQ= Subject key identifier: 71:3A:08:80:F0:76:60:A4:99:5E:46:D2:3C:3F:2E:E6:69:3D:28:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478F8138F7FA605C953D334940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 20940 IP address blocks: 23.33.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:38:f7:fa:60:5c:95:3d:33:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=a9515bca-4489-48dd-ab7f-d3d7b83df7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:eb:6a:93:82:fa:31:0d:f1:86:38:10:1e: bd:5f:f2:cd:7d:7f:8f:79:31:f1:19:1b:06:52:f7: 1f:08:1f:5c:83:c9:87:fa:94:44:6d:6c:84:24:53: 49:38:fe:28:25:04:e0:d9:d3:21:84:63:11:67:72: e8:e0:5e:ef:3e:8b:95:0c:15:6f:50:b5:2e:2e:e8: e8:63:6a:77:eb:46:96:e8:01:6d:a8:d9:4d:7a:a3: d4:18:7f:af:01:2d:3e:f2:70:7d:76:d4:b2:24:ad: ae:d9:51:46:f3:28:76:4a:ca:19:36:7a:07:50:87: 75:ad:6b:db:c0:46:5a:26:43:09:c6:2d:e9:b2:4f: 73:37:e7:4d:43:1f:c4:63:51:c6:7d:45:27:d7:06: 82:21:5b:0b:63:9a:d9:9f:08:ac:6c:f1:06:c4:39: c1:c1:7d:64:57:dd:ba:a9:56:38:a2:a0:b3:57:e6: 36:d9:be:c6:f4:f0:04:a4:ff:6b:34:6f:25:5b:cb: 0c:77:2f:ff:49:4b:f2:89:34:5d:7d:53:32:de:fa: 37:a7:3f:0a:55:4d:ff:ba:b4:e3:d0:4a:ce:0d:6c: b0:66:32:73:4a:bb:e9:69:c8:e6:c7:c6:34:17:a4: ad:20:ad:53:8a:9c:92:2a:c4:42:79:19:c5:cf:3c: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3A:08:80:F0:76:60:A4:99:5E:46:D2:3C:3F:2E:E6:69:3D:28:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:55:fe:cd:b6:e7:cd:35:42:e2:da:b1:d1:68:24:f2:fc:78: 54:86:61:33:ac:60:66:64:b3:44:dc:cc:b5:32:c2:3d:a5:53: 39:12:4e:c0:c3:2b:95:00:fc:2c:c2:98:1e:00:2e:7c:0f:21: 69:41:1a:ce:78:18:ee:04:74:cf:67:1e:86:68:a1:48:02:16: c9:ef:fa:97:74:13:5b:a3:bf:3e:61:7b:44:44:3b:47:0c:90: 55:c4:3c:f3:72:fa:ff:ea:c8:c4:4d:1e:7b:c4:64:be:f8:2f: 92:cb:20:1e:6b:e7:c2:28:f0:17:25:fb:02:78:af:38:99:13: 51:87:fe:e1:b5:7a:96:a6:77:be:0f:17:de:16:8b:7e:b5:ac: de:b1:06:11:71:13:47:8f:f3:ec:3f:1f:02:fa:ac:9c:3b:51: b2:6f:1e:44:ff:c0:11:fe:9d:16:28:15:ca:f1:cd:bc:49:f6: 86:23:77:d5:05:d2:b1:ba:ce:7f:b6:7a:5c:32:96:ee:ed:26: 7b:f5:48:71:03:31:18:af:e8:16:9c:d6:5c:dc:35:90:ed:40: ae:c6:1d:c9:22:01:4c:ae:bd:1d:c7:ee:d1:f7:98:7a:5b:6e: cb:4f:f0:41:42:28:a5:05:c9:61:7a:5c:ef:42:4f:0a:bc:d5: a0:5a:f5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgTj3+mBclT0zSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk YTk1MTViY2EtNDQ4OS00OGRkLWFiN2YtZDNkN2I4M2RmN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFjrapOC+jEN8YY4EB69X/LNfX+PeTHxGRsG UvcfCB9cg8mH+pREbWyEJFNJOP4oJQTg2dMhhGMRZ3Lo4F7vPouVDBVvULUuLujo Y2p360aW6AFtqNlNeqPUGH+vAS0+8nB9dtSyJK2u2VFG8yh2SsoZNnoHUId1rWvb wEZaJkMJxi3psk9zN+dNQx/EY1HGfUUn1waCIVsLY5rZnwisbPEGxDnBwX1kV926 qVY4oqCzV+Y22b7G9PAEpP9rNG8lW8sMdy//SUvyiTRdfVMy3vo3pz8KVU3/urTj 0ErODWywZjJzSrvpacjmx8Y0F6StIK1TipySKsRCeRnFzzxmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE6CIDwdmCkmV5G0jw/LuZpPSgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjVhOGU1MDktMDRiMy0z N2VlLThmZWItMzljMmM5NDE3ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1V/s225801QuLasdFoJPL8eFSGYTOsYGZks0TczLUywj2lUzkSTsDD K5UA/CzCmB4ALnwPIWlBGs54GO4EdM9nHoZooUgCFsnv+pd0E1ujvz5he0REO0cM kFXEPPNy+v/qyMRNHnvEZL74L5LLIB5r58Io8Bcl+wJ4rziZE1GH/uG1epamd74P F94Wi361rN6xBhFxE0eP8+w/HwL6rJw7UbJvHkT/wBH+nRYoFcrxzbxJ9oYjd9UF 0rG6zn+2elwylu7tJnv1SHEDMRiv6Bac1lzcNZDtQK7GHckiAUyuvR3H7tH3mHpb bstP8EFCKKUFyWF6XO9CTwq81aBa9VA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:29 2024 by rpki-client on console-fra.rpki-client.org