$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa File: d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa (raw, json) Hash identifier: MIWzmR9STeX9IPYhmsjgeuZgvoO4l4Cjcxpw24PAmuE= Subject key identifier: 65:61:9B:D8:BC:76:18:79:3A:28:4A:C2:19:F4:03:92:43:71:1A:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF66E6128C3214C1AAA89C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.34.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6e:61:28:c3:21:4c:1a:aa:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=3b98a647-0c37-4c2e-9229-d28c5d9eb6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:2e:29:15:71:91:c2:97:53:20:46:f2:3d: 07:c1:38:3c:b3:25:33:bd:a6:a4:c5:b3:1d:17:42: 60:68:90:83:b9:b6:a6:7f:ab:2d:82:65:ab:37:8c: 0e:3c:58:f0:d1:03:a8:a8:4d:9c:16:e3:54:d0:50: 06:84:15:83:10:b1:0b:d1:e9:2c:b0:d7:db:0c:a9: ae:73:29:41:c9:0f:9a:05:75:ca:3f:cf:da:68:4e: 09:0f:bf:61:3a:e9:9a:85:54:20:4d:11:15:84:74: b1:87:0c:83:60:b2:09:89:db:1e:b1:14:5d:5d:e4: fd:10:fe:6e:c5:41:d2:56:38:b8:f2:a0:ba:0c:c7: 8b:e9:1f:95:ca:17:0f:de:2b:7a:3f:4d:e7:d3:fd: 8a:b1:01:5a:fa:68:e9:15:c4:f7:5e:35:b0:bb:f3: d5:ac:71:bf:a0:de:91:4e:14:a4:94:17:d7:71:81: 08:0e:11:9e:a7:cd:df:90:12:d3:f0:1a:61:5e:d0: 60:c1:51:c8:08:93:77:22:51:2e:6d:6a:8b:4e:49: a9:6a:16:d1:4e:4a:fa:cc:92:ca:31:fc:73:94:ae: 25:61:09:4d:86:e7:91:df:45:2a:77:08:bb:ea:6e: fe:64:68:cd:a2:71:c6:ba:f1:7c:bd:5c:af:01:d6: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:61:9B:D8:BC:76:18:79:3A:28:4A:C2:19:F4:03:92:43:71:1A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1c:f2:30:3f:24:48:cf:3d:66:87:36:2a:0e:a6:d6:fb:d7: d1:16:a1:63:7b:aa:67:f3:c6:c8:56:55:e9:38:e3:be:01:f0: fc:97:f3:43:55:f7:5c:e3:35:4a:4a:9a:8b:bd:13:55:f3:1e: f5:38:7c:de:76:fd:4a:a1:40:1b:04:bd:0a:22:fc:94:a3:95: 32:13:8b:ab:2f:29:24:fe:82:03:b3:30:1c:36:aa:50:61:e8: 15:02:d4:8e:d4:e6:06:dc:ac:ab:8f:4b:be:d8:07:88:23:ab: b3:35:30:4c:78:26:fc:a9:3e:fb:f3:44:d8:82:72:7e:e6:76: 3a:e5:ac:4b:d2:67:a1:10:c9:6f:1b:30:12:b3:0a:9b:be:3a: e6:1d:6a:cd:0d:d3:95:93:69:78:74:46:a7:94:0c:63:43:80: 75:21:56:43:a4:ab:2c:cc:98:66:dd:b0:1f:ad:ec:9b:92:23: 58:79:72:c5:e6:58:19:5b:75:a5:04:b0:e6:74:25:9d:7e:83: 7c:c6:c6:43:a7:86:45:b6:7d:78:ff:19:48:c1:cd:56:f9:86: 62:98:58:79:20:be:cb:f6:bb:2f:5b:04:d7:f9:17:d5:08:bb: ce:7d:d1:d3:72:15:85:87:7f:c1:68:15:b7:3b:03:d6:02:ee: b8:0a:8f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79m5hKMMhTBqqicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk M2I5OGE2NDctMGMzNy00YzJlLTkyMjktZDI4YzVkOWViNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBUuKRVxkcKXUyBG8j0HwTg8syUzvaakxbMd F0JgaJCDubamf6stgmWrN4wOPFjw0QOoqE2cFuNU0FAGhBWDELEL0ekssNfbDKmu cylByQ+aBXXKP8/aaE4JD79hOumahVQgTREVhHSxhwyDYLIJidsesRRdXeT9EP5u xUHSVji48qC6DMeL6R+VyhcP3it6P03n0/2KsQFa+mjpFcT3XjWwu/PVrHG/oN6R ThSklBfXcYEIDhGep83fkBLT8BphXtBgwVHICJN3IlEubWqLTkmpahbRTkr6zJLK MfxzlK4lYQlNhueR30Uqdwi76m7+ZGjNonHGuvF8vVyvAdafLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVhm9i8dhh5OihKwhn0A5JDcRpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDA3OTMyMDktZDA3NC0z MTA3LWE2NWItYmM2YzBmM2VhOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsc8jA/JEjPPWaHNioOptb719EWoWN7qmfzxshWVek4474B8PyX80NV 91zjNUpKmou9E1XzHvU4fN52/UqhQBsEvQoi/JSjlTITi6svKST+ggOzMBw2qlBh 6BUC1I7U5gbcrKuPS77YB4gjq7M1MEx4JvypPvvzRNiCcn7mdjrlrEvSZ6EQyW8b MBKzCpu+OuYdas0N05WTaXh0RqeUDGNDgHUhVkOkqyzMmGbdsB+t7JuSI1h5csXm WBlbdaUEsOZ0JZ1+g3zGxkOnhkW2fXj/GUjBzVb5hmKYWHkgvsv2uy9bBNf5F9UI u8590dNyFYWHf8FoFbc7A9YC7rgKj7Y= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:28 2024 by rpki-client on console-ams.rpki-client.org