$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8182e59-dac1-35e0-9469-2fca9b6a4da7.roa File: b8182e59-dac1-35e0-9469-2fca9b6a4da7.roa (raw, json) Hash identifier: V5BbLuTzZq7B6JmJn77TU4xZUku8lzWcxOA/TjLoTw0= Subject key identifier: A7:7E:33:CA:02:8E:25:93:98:82:61:FB:67:70:82:D8:B9:CF:69:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474850A992DDD50DB36F765C6E Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8182e59-dac1-35e0-9469-2fca9b6a4da7.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 24319 IP address blocks: 23.35.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:a9:92:dd:d5:0d:b3:6f:76:5c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=875d5df6-5511-4bfa-8221-94e32e26830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:39:66:51:8e:59:ac:5d:19:9b:62:64:6d: cd:67:96:dd:97:a3:95:3f:37:86:88:8c:92:3b:97: 63:2f:0c:da:20:d6:b5:2e:cc:e6:6e:98:b8:32:49: a9:76:b8:4a:20:b7:73:3b:08:5f:6d:81:0f:37:2f: 60:d0:94:86:64:aa:c4:54:73:1c:c6:c1:de:c8:7a: 2d:f4:d4:94:15:85:c3:08:81:ca:da:da:36:6d:ca: d5:a2:b7:09:fa:d4:b1:f2:97:6e:a4:38:48:b7:f5: 89:1a:7f:be:f6:f3:4b:5d:0d:76:a5:f1:22:6c:71: f4:b3:03:2c:14:cd:56:a7:04:d1:64:14:33:80:ff: cf:cc:f9:a6:bf:20:84:07:74:c4:5a:ac:14:ea:6c: 70:b8:73:a7:37:00:1b:c1:9d:e1:8f:62:72:e5:77: 16:3f:14:ae:02:67:1b:b4:19:c8:ba:e5:38:58:63: c2:6b:a6:a5:86:e8:17:01:8c:d0:60:0a:4e:16:d7: d8:39:68:98:ba:90:54:a3:85:b4:5b:ba:10:9a:87: 6b:fa:f4:2e:70:dd:ea:36:98:ff:f9:ca:81:21:c0: 77:58:42:3a:e2:c2:1a:56:28:64:96:7b:7c:14:1a: a3:e3:ec:a1:a6:2a:cc:23:b8:a1:e8:56:45:c0:f9: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:33:CA:02:8E:25:93:98:82:61:FB:67:70:82:D8:B9:CF:69:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8182e59-dac1-35e0-9469-2fca9b6a4da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:55:c6:87:bd:33:9a:6d:ff:24:61:37:e2:89:ba:fa:08:b3: 22:4a:e6:7e:71:0e:08:30:39:de:c1:41:e1:ff:14:22:c8:16: a6:07:c9:68:20:92:14:1d:22:ea:80:17:f0:e4:6d:fe:68:35: c8:e1:90:91:d4:82:81:7b:28:c6:c4:3d:5b:ae:22:f8:d8:c8: 02:81:70:ca:55:51:ad:70:c6:b1:fe:e4:83:63:7a:8c:f4:39: 62:93:39:3b:73:eb:7e:94:cb:e3:36:33:49:d9:bc:09:84:b7: 4e:01:9d:74:12:86:ee:cb:1b:49:85:e4:02:b2:8c:f5:59:73: 2b:47:3c:74:78:e4:3f:75:fe:51:fb:46:c1:f9:b4:7d:ca:1d: b8:a5:c3:76:e8:be:d0:73:f4:eb:9e:07:c7:25:21:b6:bb:cf: fc:81:df:46:44:22:b9:eb:37:da:5b:0e:0b:4c:d6:15:38:79: bb:18:2a:c4:15:3b:62:25:f7:13:d8:9e:3c:1b:da:36:98:5c: 5e:67:54:87:c9:58:58:99:bf:70:59:c9:24:6e:c8:bd:88:1e: ac:1c:93:93:63:41:27:46:4e:8c:55:39:0c:b4:1f:90:e7:b0: e5:2d:dd:24:a1:0d:36:23:3c:48:bf:0c:4f:aa:6e:b4:3f:10: c0:e4:89:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUKmS3dUNs292XG4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk ODc1ZDVkZjYtNTUxMS00YmZhLTgyMjEtOTRlMzJlMjY4MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2og5ZlGOWaxdGZtiZG3NZ5bdl6OVPzeGiIyS O5djLwzaINa1Lszmbpi4MkmpdrhKILdzOwhfbYEPNy9g0JSGZKrEVHMcxsHeyHot 9NSUFYXDCIHK2to2bcrVorcJ+tSx8pdupDhIt/WJGn++9vNLXQ12pfEibHH0swMs FM1WpwTRZBQzgP/PzPmmvyCEB3TEWqwU6mxwuHOnNwAbwZ3hj2Jy5XcWPxSuAmcb tBnIuuU4WGPCa6alhugXAYzQYApOFtfYOWiYupBUo4W0W7oQmodr+vQucN3qNpj/ +cqBIcB3WEI64sIaVihklnt8FBqj4+yhpirMI7ih6FZFwPnayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd+M8oCjiWTmIJh+2dwgti5z2k6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjgxODJlNTktZGFjMS0z NWUwLTk0NjktMmZjYTliNmE0ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyPbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZVxoe9M5pt/yRhN+KJuvoIsyJK5n5xDggwOd7BQeH/FCLIFqYHyWgg khQdIuqAF/Dkbf5oNcjhkJHUgoF7KMbEPVuuIvjYyAKBcMpVUa1wxrH+5INjeoz0 OWKTOTtz636Uy+M2M0nZvAmEt04BnXQShu7LG0mF5AKyjPVZcytHPHR45D91/lH7 RsH5tH3KHbilw3bovtBz9OueB8clIba7z/yB30ZEIrnrN9pbDgtM1hU4ebsYKsQV O2Il9xPYnjwb2jaYXF5nVIfJWFiZv3BZySRuyL2IHqwck5NjQSdGToxVOQy0H5Dn sOUt3SShDTYjPEi/DE+qbrQ/EMDkiWY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:36 2024 by rpki-client on console-fra.rpki-client.org