$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa File: bd33f4d9-4929-38ef-8538-0f044f0be78d.roa (raw, json) Hash identifier: ISVYElV6/ahllBrq8SMiGBGH7MB13TWZpvg3Vh4Sb1k= Subject key identifier: 27:F0:A4:03:D0:1F:2F:ED:E2:1C:E5:88:F4:A2:A2:FA:CA:AD:C3:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76EF8E726E7626B20C3E50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.44.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ef:8e:72:6e:76:26:b2:0c:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=8bd467e8-0a5c-4d8a-9870-1e88d682bb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:71:a7:4b:27:77:97:9e:72:c0:bd:ff:e2: f3:ea:f7:21:1d:f3:a0:9a:b5:e3:8c:a8:1d:f0:5f: 94:82:56:c6:24:0f:e1:63:58:8d:03:f4:2a:2b:5b: f0:fa:58:57:03:7d:f9:5d:33:7c:87:09:3c:c6:32: e7:ec:48:ed:c4:36:cd:e3:e9:0c:64:14:65:a4:4b: 55:1d:9f:bf:af:03:06:46:e3:7a:17:f7:00:32:dc: 3f:78:f6:a9:d5:75:8c:f0:7a:98:07:2d:73:cb:e5: ba:22:b5:e7:f5:ab:f5:5a:22:88:50:87:67:b6:13: ae:91:4a:b5:a4:ed:46:1b:65:bc:fc:34:d4:96:a9: ab:b3:5f:f5:1b:6d:34:36:83:a9:d9:70:8e:54:85: 4f:e5:40:7f:d7:30:af:5e:f4:5d:f9:0a:bd:0c:06: 7f:2f:0e:e1:ec:d0:1b:c3:40:b7:0e:f5:12:31:51: e5:04:71:ac:15:cf:67:eb:b3:85:2f:b8:a7:9d:f6: 91:15:47:63:9f:20:0f:11:cd:44:2b:b3:a0:8d:a6: 37:d5:c6:af:2b:94:b5:15:6a:a0:22:b6:25:42:be: e0:52:be:50:9c:8a:f0:c7:4f:63:1e:f5:54:0d:f0: 41:cc:28:51:79:5a:b5:35:bc:d3:30:a0:d4:f9:f6: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F0:A4:03:D0:1F:2F:ED:E2:1C:E5:88:F4:A2:A2:FA:CA:AD:C3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a9:f1:63:f9:53:69:df:72:31:b8:07:3a:f3:a2:6a:ca:93: 51:f6:84:e2:85:dc:61:9e:7e:e2:f2:ad:61:ea:37:7c:36:a1: f5:55:ad:c4:f9:08:a3:c0:c1:7d:41:03:b3:90:94:53:c3:74: 02:d1:b5:aa:a0:0d:83:73:4d:a6:1c:d8:f0:b9:45:af:d5:9e: 68:44:7a:27:b0:60:a7:f7:63:56:4f:eb:6e:4c:68:9e:aa:d4: e0:53:7b:4c:90:b6:a4:b1:8e:9b:66:14:96:7e:40:1f:f1:35: d5:f8:b6:f6:bd:a3:84:34:10:f5:56:c6:e6:97:90:8a:9c:5f: 80:55:ad:80:2c:c4:8c:1f:2a:bf:ac:64:49:57:77:e9:3d:65: 6e:d5:ec:ff:cd:c1:c6:8d:f7:20:92:63:59:89:fc:71:67:0b: d2:9c:c9:cb:8a:aa:63:e0:3f:a4:ac:44:99:13:f1:f1:ab:e0: 37:dc:ee:e1:28:0f:06:93:bd:ec:14:78:73:be:fa:f0:87:04: 0d:ca:70:dd:13:ce:68:16:e9:74:98:d0:7f:ac:eb:d7:b2:4b: 01:ee:1f:4c:b1:a1:41:c0:46:45:72:48:b9:ce:13:e6:77:1d: 19:0c:a6:9c:3b:62:36:5a:77:ac:95:8e:4e:25:dc:ae:84:ab: 52:83:79:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddu+Ocm52JrIMPlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk OGJkNDY3ZTgtMGE1Yy00ZDhhLTk4NzAtMWU4OGQ2ODJiYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM5xp0snd5eecsC9/+Lz6vchHfOgmrXjjKgd 8F+UglbGJA/hY1iNA/QqK1vw+lhXA335XTN8hwk8xjLn7EjtxDbN4+kMZBRlpEtV HZ+/rwMGRuN6F/cAMtw/ePap1XWM8HqYBy1zy+W6IrXn9av1WiKIUIdnthOukUq1 pO1GG2W8/DTUlqmrs1/1G200NoOp2XCOVIVP5UB/1zCvXvRd+Qq9DAZ/Lw7h7NAb w0C3DvUSMVHlBHGsFc9n67OFL7innfaRFUdjnyAPEc1EK7OgjaY31cavK5S1FWqg IrYlQr7gUr5QnIrwx09jHvVUDfBBzChReVq1NbzTMKDU+fZyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfwpAPQHy/t4hzliPSiovrKrcNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQzM2Y0ZDktNDkyOS0z OGVmLTg1MzgtMGYwNDRmMGJlNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGp8WP5U2nfcjG4BzrzomrKk1H2hOKF3GGefuLyrWHqN3w2ofVVrcT5 CKPAwX1BA7OQlFPDdALRtaqgDYNzTaYc2PC5Ra/VnmhEeiewYKf3Y1ZP625MaJ6q 1OBTe0yQtqSxjptmFJZ+QB/xNdX4tva9o4Q0EPVWxuaXkIqcX4BVrYAsxIwfKr+s ZElXd+k9ZW7V7P/NwcaN9yCSY1mJ/HFnC9KcycuKqmPgP6SsRJkT8fGr4Dfc7uEo DwaTvewUeHO++vCHBA3KcN0TzmgW6XSY0H+s69eySwHuH0yxoUHARkVySLnOE+Z3 HRkMppw7YjZad6yVjk4l3K6Eq1KDeYI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:20 2024 by rpki-client on console-ams.rpki-client.org