$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1ba19d3-0395-3c58-a5e3-4846b4fb09a3.roa File: e1ba19d3-0395-3c58-a5e3-4846b4fb09a3.roa (raw, json) Hash identifier: 72L7yMHw9OEUKXoIb6CyZjDiy7Cy6VjzoN0GUrx9J5A= Subject key identifier: 73:44:78:F3:5E:DC:11:96:90:32:89:BF:17:27:2E:A0:8F:12:53:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478F813170D5B8D40F81899100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1ba19d3-0395-3c58-a5e3-4846b4fb09a3.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 16625 IP address blocks: 23.33.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:31:70:d5:b8:d4:0f:81:89:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=306bce0a-1f20-4945-975f-c233da2bde98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:70:51:21:cc:ea:08:8b:62:fc:4b:c7:bf: 85:d9:b1:a1:0e:12:94:6a:30:5c:d8:c1:02:9d:29: 78:dc:c8:fc:34:c2:7e:1d:2c:c6:f2:22:eb:ee:c8: c3:4c:05:eb:b8:57:7b:fb:af:23:26:15:7d:0e:ed: 70:17:b5:0f:f7:d2:9a:73:28:bd:94:49:98:69:3c: 8d:0b:d9:1b:fc:01:8e:25:30:f9:2e:ef:60:71:98: 47:3b:5b:d6:93:85:e8:2c:2d:eb:06:a0:36:d4:24: 51:69:c0:97:02:95:56:05:f3:5a:a8:22:df:ae:53: 45:fa:1f:6c:1f:01:f2:c5:57:0b:ca:92:34:69:b6: 43:ac:a2:70:25:7b:7d:ff:4e:a4:07:f6:f4:04:74: 55:ae:b8:fd:97:aa:6a:7e:c0:2c:76:ef:21:5f:d6: 37:ba:8d:76:84:55:cd:01:c5:89:c4:af:3d:f9:84: f5:5a:ae:4a:01:9b:59:04:9c:83:56:7f:b7:c7:ad: 11:3e:80:23:8f:89:33:27:e7:5b:5b:3e:f1:eb:69: 85:e9:f2:46:a5:b5:97:1c:63:7f:72:08:07:66:3a: 84:86:a9:1e:61:c2:fa:a9:33:3f:58:c8:97:3d:95: 47:da:a1:b6:06:28:8d:df:1f:39:2d:72:a9:1a:3b: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:44:78:F3:5E:DC:11:96:90:32:89:BF:17:27:2E:A0:8F:12:53:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1ba19d3-0395-3c58-a5e3-4846b4fb09a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8a:19:31:ae:1e:10:18:a7:a5:91:82:9e:45:19:ef:c8:57: 97:3c:63:34:e9:64:d7:ee:9f:2e:de:56:cf:08:f2:06:55:1f: 0c:1d:45:40:7f:ff:f2:f3:db:69:5f:f7:98:a0:df:f3:15:1d: 98:a4:c2:9e:82:bc:46:70:42:2c:66:29:ea:c0:40:3f:55:0c: df:d1:2b:dd:49:5e:4b:2d:7e:ae:81:8e:de:80:3a:b9:57:58: 88:b8:c2:f0:85:5a:8c:99:7a:66:47:bf:35:65:f2:96:cf:ce: 33:2a:36:ce:32:e8:48:b7:b6:e6:f7:61:9e:b7:07:37:5b:73: de:ca:e6:80:9c:9b:f5:d6:0f:fa:7b:a0:db:d5:74:b6:ad:22: 57:ec:3f:13:2b:b3:dd:e4:ab:d4:21:2e:9e:35:16:b7:ab:30: f0:01:0e:eb:36:50:ee:b0:43:c3:2e:90:1b:d3:43:14:2a:85: b6:0b:d7:2b:e8:b3:cc:c2:76:37:9a:c9:ce:88:68:f1:e6:f1: b2:a3:62:0e:bb:5c:74:cc:60:1e:bb:d2:fc:83:2c:c9:39:3e: 60:3c:40:31:b8:8b:bb:20:87:28:d0:46:58:99:00:8e:1f:46: 33:5d:c6:e5:7e:8d:57:5b:12:ac:f9:61:39:60:3b:37:cd:10: b5:df:a8:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgTFw1bjUD4GJkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk MzA2YmNlMGEtMWYyMC00OTQ1LTk3NWYtYzIzM2RhMmJkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBwUSHM6giLYvxLx7+F2bGhDhKUajBc2MEC nSl43Mj8NMJ+HSzG8iLr7sjDTAXruFd7+68jJhV9Du1wF7UP99Kacyi9lEmYaTyN C9kb/AGOJTD5Lu9gcZhHO1vWk4XoLC3rBqA21CRRacCXApVWBfNaqCLfrlNF+h9s HwHyxVcLypI0abZDrKJwJXt9/06kB/b0BHRVrrj9l6pqfsAsdu8hX9Y3uo12hFXN AcWJxK89+YT1Wq5KAZtZBJyDVn+3x60RPoAjj4kzJ+dbWz7x62mF6fJGpbWXHGN/ cggHZjqEhqkeYcL6qTM/WMiXPZVH2qG2BiiN3x85LXKpGjtjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNEePNe3BGWkDKJvxcnLqCPElOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFiYTE5ZDMtMDM5NS0z YzU4LWE1ZTMtNDg0NmI0ZmIwOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaKGTGuHhAYp6WRgp5FGe/IV5c8YzTpZNfuny7eVs8I8gZVHwwdRUB/ //Lz22lf95ig3/MVHZikwp6CvEZwQixmKerAQD9VDN/RK91JXkstfq6Bjt6AOrlX WIi4wvCFWoyZemZHvzVl8pbPzjMqNs4y6Ei3tub3YZ63Bzdbc97K5oCcm/XWD/p7 oNvVdLatIlfsPxMrs93kq9QhLp41FrerMPABDus2UO6wQ8MukBvTQxQqhbYL1yvo s8zCdjeayc6IaPHm8bKjYg67XHTMYB670vyDLMk5PmA8QDG4i7sghyjQRliZAI4f RjNdxuV+jVdbEqz5YTlgOzfNELXfqOM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:44 2024 by rpki-client on console-fra.rpki-client.org