$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa File: d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa (raw, json) Hash identifier: OSPpu9bcN+JCdvIzOJRl2wwfcFVrgHleCtFMEi0bwF0= Subject key identifier: 35:FD:35:5A:E4:73:CB:8F:74:25:57:F7:2E:28:4C:7A:D3:E2:16:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC0219B7792958ECD24680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.37.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:02:19:b7:79:29:58:ec:d2:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=919dd441-7181-418c-a074-c7293675fe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:38:f6:48:fd:35:5d:80:00:47:0c:e3:69: f9:2c:ce:72:14:36:c8:1d:70:53:59:38:10:0b:f8: f8:72:4b:ce:e6:58:bd:fe:80:57:fd:5d:17:4b:ec: de:c9:0e:5d:68:11:67:bb:fb:a0:52:f4:7b:d4:17: 8c:47:3c:b3:5c:48:6a:14:8d:5a:07:79:fc:68:83: 16:4d:f5:ae:d0:46:78:2e:c1:fe:9a:b6:79:6f:ea: bc:33:73:9c:c8:41:12:d2:e7:31:e2:64:23:24:bb: ec:39:b3:9e:99:a2:27:30:e2:64:7c:a5:39:f4:15: cd:85:c4:0f:7e:26:26:0b:a5:f3:c1:51:96:11:9d: 36:db:bd:36:40:cb:02:6f:8a:a9:cd:bc:16:eb:6f: ce:9d:9a:b4:29:05:4a:52:fb:d0:5b:91:0a:f8:d5: d4:1f:53:0a:a4:59:21:90:12:99:29:bc:ff:5b:0a: eb:cc:4a:7c:e4:59:84:7e:23:1d:65:f8:36:ee:f9: b9:bc:f6:51:71:a4:3b:fe:df:8f:06:3e:4c:b8:6f: b1:82:3c:d7:d1:48:56:e0:86:68:e3:f0:8d:65:b3: 9e:d4:07:7b:a4:19:28:c0:ad:26:04:70:6e:0b:14: 91:21:f5:e0:3b:b9:80:39:b7:67:23:5a:30:57:53: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FD:35:5A:E4:73:CB:8F:74:25:57:F7:2E:28:4C:7A:D3:E2:16:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:0c:1e:11:13:fb:33:7b:fc:22:3a:5c:4e:37:52:46:2d: e3:18:ac:ad:bb:bb:c1:2c:22:02:31:2f:88:ec:48:c7:a6:0b: 33:66:91:2d:eb:24:27:f9:49:f2:93:57:9c:5e:33:55:1d:81: 34:8e:ac:a8:5b:b6:e7:2b:90:3e:79:e4:eb:4d:9f:f4:07:ee: d7:c1:2c:7e:03:57:47:00:4f:4d:0c:63:8b:73:c8:34:b3:cd: e0:33:d2:58:a3:d9:c2:7f:eb:b9:f2:42:81:d9:77:0a:3a:7a: e3:7c:9d:6e:0a:24:00:90:0e:2c:fc:cf:fb:05:0c:da:ea:3a: ec:b9:47:55:0a:e2:7d:4e:3e:d2:f9:99:78:86:35:23:39:31: 52:3d:70:2e:2e:8e:b2:58:ba:5c:3b:eb:9e:04:70:a0:fc:ef: 56:77:31:66:d3:63:41:fd:91:f6:0e:f4:50:39:1c:fe:99:b0: eb:91:f7:a1:e6:a7:cf:d7:21:b9:f8:b9:2b:e2:3a:f0:42:e1: 67:b2:9e:ca:19:a9:76:c7:c5:93:db:af:0b:e5:0f:c6:ad:22: 42:7a:56:ce:8a:e6:cc:2f:5d:b6:94:27:6b:16:9e:e8:9f:8d: 93:e7:23:36:d5:98:16:17:77:f6:99:41:16:77:f3:9d:0e:93: 64:f8:cd:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearAIZt3kpWOzSRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk OTE5ZGQ0NDEtNzE4MS00MThjLWEwNzQtYzcyOTM2NzVmZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTY49kj9NV2AAEcM42n5LM5yFDbIHXBTWTgQ C/j4ckvO5li9/oBX/V0XS+zeyQ5daBFnu/ugUvR71BeMRzyzXEhqFI1aB3n8aIMW TfWu0EZ4LsH+mrZ5b+q8M3OcyEES0ucx4mQjJLvsObOemaInMOJkfKU59BXNhcQP fiYmC6XzwVGWEZ022702QMsCb4qpzbwW62/OnZq0KQVKUvvQW5EK+NXUH1MKpFkh kBKZKbz/WwrrzEp85FmEfiMdZfg27vm5vPZRcaQ7/t+PBj5MuG+xgjzX0UhW4IZo 4/CNZbOe1Ad7pBkowK0mBHBuCxSRIfXgO7mAObdnI1owV1NY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX9NVrkc8uPdCVX9y4oTHrT4hb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ5OTljOWUtYTFhMC0z YmY3LTk4ZWEtOTk1MDAzZGNkODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhuDB4RE/sze/wiOlxON1JGLeMYrK27u8EsIgIxL4jsSMemCzNmkS3r JCf5SfKTV5xeM1UdgTSOrKhbtucrkD555OtNn/QH7tfBLH4DV0cAT00MY4tzyDSz zeAz0lij2cJ/67nyQoHZdwo6euN8nW4KJACQDiz8z/sFDNrqOuy5R1UK4n1OPtL5 mXiGNSM5MVI9cC4ujrJYulw7654EcKD871Z3MWbTY0H9kfYO9FA5HP6ZsOuR96Hm p8/XIbn4uSviOvBC4WeynsoZqXbHxZPbrwvlD8atIkJ6Vs6K5swvXbaUJ2sWnuif jZPnIzbVmBYXd/aZQRZ3850Ok2T4zWY= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:42 2024 by rpki-client on console-fra.rpki-client.org