$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbf2a9fb-c4f6-3211-8428-8081750b9562.roa File: cbf2a9fb-c4f6-3211-8428-8081750b9562.roa (raw, json) Hash identifier: xym3TZlyoILsdcblrV7HyNnyZLTLY9ngMiHI6mzeCJI= Subject key identifier: 4A:33:E9:55:7C:65:16:05:7E:25:B0:60:AE:9C:B8:E3:0E:18:B4:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC0581607967B50D5E16C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbf2a9fb-c4f6-3211-8428-8081750b9562.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.40.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:05:81:60:79:67:b5:0d:5e:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=0d667f3a-bee9-44ba-98fe-4877ad1e7e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:85:72:07:79:27:a8:48:ef:20:c9:53:33: e3:e9:78:45:9c:33:45:15:e9:91:2c:d4:c8:36:56: de:ab:7f:a0:1b:05:4d:66:44:12:b1:08:81:37:be: 72:20:dc:f7:01:52:51:c7:43:2a:3b:f0:18:6c:f6: ff:1f:45:bf:97:1e:4c:3f:27:c4:09:24:94:ba:81: e6:0a:27:10:da:ac:53:f6:04:cd:56:84:cc:51:ff: 42:09:b4:93:98:37:0c:79:53:e7:4a:68:f9:d1:f0: 5d:9a:fc:fa:2f:a3:d1:41:fd:b5:09:71:ba:6d:5e: 94:b1:0f:3c:e3:1a:d4:aa:21:5f:28:80:95:05:ba: 77:88:f0:02:32:d3:41:73:0d:c7:18:a6:98:ce:00: d9:c0:4e:7f:51:f7:95:76:8b:03:e9:fd:5b:00:47: 42:a1:8e:aa:3b:5e:65:8f:86:d5:c4:1f:b4:28:29: a4:08:ce:8f:f7:bf:f0:13:db:66:a0:04:43:24:27: 50:c2:04:60:dc:b0:71:40:93:5f:f5:13:07:27:60: 1e:22:2e:05:8d:74:c3:ec:a3:e9:27:b9:75:ef:6c: 9f:18:9b:ba:76:6b:f7:71:55:f4:90:1c:d0:9a:4c: 21:f7:ba:da:7c:0b:1e:ec:18:87:0c:53:39:e2:12: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:E9:55:7C:65:16:05:7E:25:B0:60:AE:9C:B8:E3:0E:18:B4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbf2a9fb-c4f6-3211-8428-8081750b9562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:50:77:07:02:ef:07:de:3c:14:70:e8:90:88:84:50:1f:c5: 3c:47:1b:d7:1d:e8:92:1b:7b:55:6a:1d:36:86:57:ee:f3:04: 71:38:c0:36:fe:e9:1c:00:a5:7b:51:4d:5d:09:8b:85:02:48: 7d:9e:75:7b:37:c6:77:40:af:4e:1b:fe:eb:71:2c:f2:2f:30: fc:80:60:ff:a4:26:3c:ac:78:3b:c9:52:87:aa:33:c7:f0:43: 5a:61:a9:64:a4:21:82:98:b4:b5:56:cd:a8:fa:51:db:9a:86: dc:0d:69:5f:45:b9:5b:43:0f:0f:ef:f2:a3:0e:ec:83:02:95: 68:52:46:2a:b6:34:09:2e:83:c8:f8:a7:21:57:cb:e3:56:20: 7a:ca:08:a7:cf:ce:fb:1f:4d:30:a7:c0:9e:cf:8c:24:98:98: 3f:af:62:e1:e8:61:f4:2a:0c:f3:8e:25:59:4d:18:51:58:e5: f9:b5:c4:42:30:d1:9e:db:ce:16:5c:6c:4a:b0:db:a5:07:b7: ed:11:64:9c:42:35:87:ef:6b:70:c2:ce:a9:b0:df:87:5c:ca: 7c:20:f1:80:b0:41:60:78:95:27:eb:57:bb:de:bd:c9:1a:f5: 4a:f3:37:0b:52:f7:78:49:a9:a5:63:4a:31:f4:43:4d:c9:eb: 6f:32:49:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearAWBYHlntQ1eFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MGQ2NjdmM2EtYmVlOS00NGJhLTk4ZmUtNDg3N2FkMWU3ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSaFcgd5J6hI7yDJUzPj6XhFnDNFFemRLNTI Nlbeq3+gGwVNZkQSsQiBN75yINz3AVJRx0MqO/AYbPb/H0W/lx5MPyfECSSUuoHm CicQ2qxT9gTNVoTMUf9CCbSTmDcMeVPnSmj50fBdmvz6L6PRQf21CXG6bV6UsQ88 4xrUqiFfKICVBbp3iPACMtNBcw3HGKaYzgDZwE5/UfeVdosD6f1bAEdCoY6qO15l j4bVxB+0KCmkCM6P97/wE9tmoARDJCdQwgRg3LBxQJNf9RMHJ2AeIi4FjXTD7KPp J7l172yfGJu6dmv3cVX0kBzQmkwh97rafAse7BiHDFM54hL7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoz6VV8ZRYFfiWwYK6cuOMOGLRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JmMmE5ZmItYzRmNi0z MjExLTg0MjgtODA4MTc1MGI5NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFygpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFQdwcC7wfePBRw6JCIhFAfxTxHG9cd6JIbe1VqHTaGV+7zBHE4wDb+ 6RwApXtRTV0Ji4UCSH2edXs3xndAr04b/utxLPIvMPyAYP+kJjyseDvJUoeqM8fw Q1phqWSkIYKYtLVWzaj6UduahtwNaV9FuVtDDw/v8qMO7IMClWhSRiq2NAkug8j4 pyFXy+NWIHrKCKfPzvsfTTCnwJ7PjCSYmD+vYuHoYfQqDPOOJVlNGFFY5fm1xEIw 0Z7bzhZcbEqw26UHt+0RZJxCNYfva3DCzqmw34dcynwg8YCwQWB4lSfrV7vevcka 9UrzNwtS93hJqaVjSjH0Q03J628ySUI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:26 2024 by rpki-client on console-ams.rpki-client.org