$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa File: dbaf8ec5-3327-3455-b442-c52264f96c65.roa (raw, json) Hash identifier: kgw0Tk3aCBWHKTF+L/cZdWBctnLxK9RIi4dVdcqjyvI= Subject key identifier: 74:EF:E1:D6:0E:6A:91:FF:28:60:22:26:DD:CB:59:91:3C:03:09:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478F81321B1037FC173E7BA900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 18403 IP address blocks: 23.33.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:32:1b:10:37:fc:17:3e:7b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=3b61c08a-3c80-4677-a24a-842182c028f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:ac:ce:5d:b7:40:0f:3c:f6:44:b7:64:56: 6e:e8:84:ef:81:e7:c1:b0:46:27:f5:d6:f1:15:5a: 74:54:c8:06:c7:ff:b9:9b:67:b0:12:f8:fd:8a:af: fd:f7:c4:93:fd:20:53:ee:a1:11:65:2f:13:f9:95: 20:82:96:d2:78:9c:3b:89:8d:58:bd:b2:6d:01:35: d0:5c:dc:26:17:8a:6c:3e:9c:cf:d1:b9:cc:27:0a: 5e:30:2e:64:3f:29:9f:7c:64:4e:e9:48:d4:c0:37: c9:9d:88:86:e0:85:01:ff:b9:fe:6d:ae:bb:ee:0b: 0f:2f:c7:82:ec:fb:9e:ef:9e:fa:3e:b0:d4:b1:1f: 6e:bf:c6:cb:37:ab:48:b2:77:9f:e2:65:0d:d8:5b: 50:22:d0:26:fe:ef:78:29:42:51:08:da:cd:d2:9b: 61:4c:77:cd:81:e3:48:f4:41:72:76:b3:c2:23:e9: d2:ab:47:42:98:f6:32:95:eb:64:9e:54:08:58:15: d0:90:d2:4e:bb:3f:c9:02:3b:b8:02:f6:49:56:cd: b9:27:72:f5:d9:82:7e:8d:81:90:61:00:80:d0:c6: 15:21:b9:49:c0:54:39:f6:d0:fa:ca:87:2b:7c:39: 94:6f:07:97:a4:98:84:61:19:87:25:90:53:8d:2b: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EF:E1:D6:0E:6A:91:FF:28:60:22:26:DD:CB:59:91:3C:03:09:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c9:99:bc:c9:05:ae:44:34:b2:ab:06:92:1f:9e:fa:3b:60: e5:bf:a9:fa:a7:60:b6:88:4a:ef:42:5d:ba:fb:69:a7:b9:21: 37:a2:3b:98:f5:f3:0d:1c:fa:18:b1:9a:e9:35:76:d0:b7:e8: e2:2e:15:2d:73:d3:16:1d:dd:38:81:33:ef:a7:e0:ad:0f:74: 7d:eb:65:56:66:bf:9b:12:dc:32:c6:aa:77:d5:c6:37:71:66: 98:2c:de:c7:fa:57:96:24:34:11:d9:f2:d7:5f:ed:f9:92:1f: 36:85:1f:cf:1c:6a:c4:b0:54:53:0a:e4:85:87:24:f6:5b:c6: 9f:f7:42:85:e4:30:62:b6:40:7d:79:c6:91:4b:7e:d0:4d:c1: b0:a1:72:86:98:04:5b:f2:e0:49:3e:24:68:ad:f0:f4:a1:3c: ed:da:87:f8:03:07:65:47:79:8b:61:50:4a:74:c1:b1:f9:81: 82:bf:1a:f3:8d:50:26:6f:1b:a3:ff:0d:37:f0:22:c5:89:bc: 11:f4:77:19:71:a7:c3:ae:7b:1e:53:62:23:2b:9a:3b:4d:0b: 89:63:cf:15:98:25:bf:47:68:ba:61:f6:82:3d:82:45:4e:1d: 8b:46:f2:c7:75:71:25:87:66:82:e0:97:94:a5:99:42:16:3e: c0:87:0c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgTIbEDf8Fz57qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk M2I2MWMwOGEtM2M4MC00Njc3LWEyNGEtODQyMTgyYzAyOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsqszl23QA889kS3ZFZu6ITvgefBsEYn9dbx FVp0VMgGx/+5m2ewEvj9iq/998ST/SBT7qERZS8T+ZUggpbSeJw7iY1YvbJtATXQ XNwmF4psPpzP0bnMJwpeMC5kPymffGRO6UjUwDfJnYiG4IUB/7n+ba677gsPL8eC 7Pue7576PrDUsR9uv8bLN6tIsnef4mUN2FtQItAm/u94KUJRCNrN0pthTHfNgeNI 9EFydrPCI+nSq0dCmPYyletknlQIWBXQkNJOuz/JAju4AvZJVs25J3L12YJ+jYGQ YQCA0MYVIblJwFQ59tD6yocrfDmUbweXpJiEYRmHJZBTjSuSiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTv4dYOapH/KGAiJt3LWZE8AwmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhZjhlYzUtMzMyNy0z NDU1LWI0NDItYzUyMjY0Zjk2YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXJmbzJBa5ENLKrBpIfnvo7YOW/qfqnYLaISu9CXbr7aae5ITeiO5j1 8w0c+hixmuk1dtC36OIuFS1z0xYd3TiBM++n4K0PdH3rZVZmv5sS3DLGqnfVxjdx Zpgs3sf6V5YkNBHZ8tdf7fmSHzaFH88casSwVFMK5IWHJPZbxp/3QoXkMGK2QH15 xpFLftBNwbChcoaYBFvy4Ek+JGit8PShPO3ah/gDB2VHeYthUEp0wbH5gYK/GvON UCZvG6P/DTfwIsWJvBH0dxlxp8Ouex5TYiMrmjtNC4ljzxWYJb9HaLph9oI9gkVO HYtG8sd1cSWHZoLgl5SlmUIWPsCHDAo= -----END CERTIFICATE-----Generated at Mon Nov 25 22:17:41 2024 by rpki-client on console-fra.rpki-client.org