$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa File: d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa (raw, json) Hash identifier: axbV/1lBzxY/6r7a6p2yyBwX+IY+KbGLPGwgXWZH5q4= Subject key identifier: 3D:4C:29:72:41:5C:65:40:21:85:65:5C:F4:66:56:73:0D:D4:20:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFE8A6AADC800D70451E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 35994 IP address blocks: 23.40.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fe:8a:6a:ad:c8:00:d7:04:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=57f69e99-5d8d-4193-b943-2fefb690ca39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:84:ab:9e:84:3c:9d:6b:73:1a:95:38:72:2b: d8:a9:05:f6:ff:b1:f4:69:da:5e:cd:41:78:1d:b8: 30:66:94:c9:e9:d6:5f:34:c2:45:63:cb:63:44:1f: f2:ca:c9:38:8b:6b:bf:09:80:3d:76:48:9f:2c:4e: d5:56:65:46:77:ed:46:92:f1:5b:bb:a3:9b:72:1d: f2:88:b4:41:48:de:7b:c8:66:fc:47:0b:e5:2e:f9: b6:68:76:fe:ed:5e:fd:5f:75:bb:ef:19:63:63:2d: 48:1d:f9:12:5e:87:8a:d5:bd:77:b8:0a:2e:8d:ae: cd:f3:f2:3d:2b:13:a5:db:0f:ef:9e:fd:3b:53:ff: b4:a6:a2:d9:26:90:4b:26:20:f9:ce:7f:aa:22:36: 90:34:2b:88:42:55:34:97:a8:98:87:db:a6:73:47: 5b:b9:15:a1:67:49:a9:bb:4c:74:ae:cd:9f:d4:a8: 2f:c9:97:c5:b0:24:2f:14:d4:a2:33:c8:47:93:0b: 6b:cb:f8:05:9a:74:47:01:39:55:99:01:da:6e:dd: 7a:a9:24:24:ec:27:3a:27:b8:55:a1:5c:96:02:28: a9:68:1b:d9:82:7c:0c:e4:4d:30:c9:eb:af:6a:a7: e5:73:c5:ca:b1:79:ab:c2:4e:11:1e:1a:51:7e:1f: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4C:29:72:41:5C:65:40:21:85:65:5C:F4:66:56:73:0D:D4:20:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:84:24:38:41:06:05:f3:d1:3d:bc:60:d7:15:fc:fa:96:89: 77:3e:c7:3f:55:16:72:e9:67:e5:33:f6:ac:9b:be:d6:89:e5: 0c:b1:cc:0f:a8:e4:b0:6b:2f:00:bf:53:b3:a5:84:e3:92:64: 11:a8:cb:83:8f:69:00:e9:a0:04:08:46:10:c0:dc:68:ce:ce: b5:c8:db:20:6f:0c:3d:2c:75:6b:56:fc:c0:7b:09:9a:f0:ce: a7:92:70:d7:3e:57:62:6d:1e:f6:2c:ef:b2:2f:7c:d4:d5:bd: 2f:03:ab:2f:8c:06:34:c3:07:df:18:5f:53:40:19:38:20:a1: 86:9e:28:dd:36:b5:4d:3b:01:de:88:1e:51:26:43:c2:0d:b6: bc:5e:01:ca:e5:94:6e:2c:d4:22:6e:ce:d2:85:f2:ce:6e:43: bb:51:b3:1e:ba:46:ef:6a:44:e8:a7:c0:04:fa:4d:de:bc:bf: e1:6c:21:31:be:fe:fa:b7:41:97:4f:05:dc:db:e0:d2:96:97: e8:df:19:b6:61:a8:1c:72:b4:44:bf:4b:93:62:af:cb:f4:b6: b8:02:4c:68:0f:a8:43:93:27:ef:1d:b1:2a:14:45:35:04:ee: 10:03:3d:c7:e2:52:5c:26:83:46:af:0f:1f:3d:4c:fd:22:aa: 37:ec:f7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/6Kaq3IANcEUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NTdmNjllOTktNWQ4ZC00MTkzLWI5NDMtMmZlZmI2OTBjYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4SrnoQ8nWtzGpU4civYqQX2/7H0adpezUF4 HbgwZpTJ6dZfNMJFY8tjRB/yysk4i2u/CYA9dkifLE7VVmVGd+1GkvFbu6Obch3y iLRBSN57yGb8RwvlLvm2aHb+7V79X3W77xljYy1IHfkSXoeK1b13uAouja7N8/I9 KxOl2w/vnv07U/+0pqLZJpBLJiD5zn+qIjaQNCuIQlU0l6iYh9umc0dbuRWhZ0mp u0x0rs2f1KgvyZfFsCQvFNSiM8hHkwtry/gFmnRHATlVmQHabt16qSQk7Cc6J7hV oVyWAiipaBvZgnwM5E0wyeuvaqflc8XKsXmrwk4RHhpRfh/MgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1MKXJBXGVAIYVlXPRmVnMN1CAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZmOTUxZWQtMjFlNy0z NDZhLTgwYTYtM2M5MjFhYzhlYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICEJDhBBgXz0T28YNcV/PqWiXc+xz9VFnLpZ+Uz9qybvtaJ5QyxzA+o 5LBrLwC/U7OlhOOSZBGoy4OPaQDpoAQIRhDA3GjOzrXI2yBvDD0sdWtW/MB7CZrw zqeScNc+V2JtHvYs77IvfNTVvS8Dqy+MBjTDB98YX1NAGTggoYaeKN02tU07Ad6I HlEmQ8INtrxeAcrllG4s1CJuztKF8s5uQ7tRsx66Ru9qROinwAT6Td68v+FsITG+ /vq3QZdPBdzb4NKWl+jfGbZhqBxytES/S5Nir8v0trgCTGgPqEOTJ+8dsSoURTUE 7hADPcfiUlwmg0avDx89TP0iqjfs914= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:28 2024 by rpki-client on console-ams.rpki-client.org