$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65b8951-d432-31fc-9ca9-2816e935ba1e.roa File: e65b8951-d432-31fc-9ca9-2816e935ba1e.roa (raw, json) Hash identifier: p4hPqvZBNSjv6uqPhHbzS/vbaAo4FRXfnby/50hROZk= Subject key identifier: D4:29:13:31:09:CF:73:C2:07:1B:A0:E6:51:86:2D:36:69:06:C5:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36CEEF24C638E40EBE9060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65b8951-d432-31fc-9ca9-2816e935ba1e.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.56.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:ce:ef:24:c6:38:e4:0e:be:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=ff375f9e-c17c-4195-9492-874acdfd8a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:1e:b5:7f:ac:97:57:3a:18:3c:e4:71:fa: dd:62:1b:5c:4f:86:f6:a5:2d:08:fa:2d:cb:c3:34: e5:46:b3:2a:8f:14:52:5f:ef:a3:f6:d8:91:a6:4c: 76:2a:2a:41:d3:6e:88:68:2f:63:00:04:52:9b:71: 11:0a:31:9f:a8:c8:df:e7:16:9d:a7:91:0f:50:97: a5:57:6c:04:d5:fc:37:5f:a1:20:f4:30:91:3f:fa: ec:81:db:f9:37:42:19:c3:15:3a:17:08:3a:33:79: 58:31:d8:a3:49:45:a0:ee:b8:9d:96:ee:11:15:37: 95:02:e6:bf:c3:a8:dd:f5:2c:8d:08:e2:af:58:18: 49:7a:e8:59:4e:29:4f:05:78:1a:16:a6:16:80:14: 40:25:ad:d4:6c:66:fe:bb:c8:50:de:b8:7b:00:d8: 7d:54:06:78:10:c4:4d:99:fe:68:3b:ed:53:6f:c6: fa:81:1b:e4:ee:e2:f7:3b:2d:a8:7d:11:3d:fc:6a: 88:7d:92:cf:7f:c8:5d:ad:13:de:f9:c1:24:37:78: 43:69:e7:0b:e0:75:b8:6b:13:fe:42:ac:91:09:bb: de:25:41:3c:08:1e:c5:5d:06:f6:96:a4:bc:ab:ca: 1d:59:8b:af:cd:2e:22:4d:ce:83:33:2d:22:f4:e8: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:13:31:09:CF:73:C2:07:1B:A0:E6:51:86:2D:36:69:06:C5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65b8951-d432-31fc-9ca9-2816e935ba1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a5:9e:83:fc:7b:ba:73:81:de:42:0f:7e:c6:af:1b:89:47: a8:af:33:c1:bd:d3:a1:80:27:de:45:20:51:c8:a0:e4:c0:ac: d0:75:9c:e1:87:3f:ce:a0:9b:b0:2f:07:79:28:64:74:68:87: ef:6c:5d:ba:28:db:40:19:ce:80:ed:05:de:61:a8:d8:3b:b1: d6:1b:e5:e6:0a:c4:f3:58:ba:f3:a0:d3:f0:6f:68:c6:35:a0: 1d:8a:45:f3:12:b3:25:71:22:0f:39:6f:61:ff:14:b5:6d:6e: 4b:2a:f8:7f:f0:4a:b0:70:2c:f8:f2:29:6a:6a:21:13:e8:80: ad:7e:77:1a:e8:33:f9:60:d4:f8:30:70:c8:11:54:57:22:05: f7:c0:1b:9a:5e:cc:0d:58:97:be:71:0c:34:84:5d:23:95:1b: 3a:9f:75:a7:28:a8:9a:e7:9d:32:0c:1c:78:3e:e2:44:50:ee: 28:6d:69:71:e5:a8:f3:33:49:8d:a6:b9:7b:2f:3d:c5:81:c4: 6e:0b:04:4d:99:e0:75:8e:14:e1:74:7e:ed:71:06:be:2a:4c: 2e:96:29:b1:da:6d:5b:c3:79:6c:db:c3:a9:fc:52:93:38:9e: c8:b4:48:2b:a2:73:14:69:4c:3f:38:a2:d3:ac:84:4f:ef:23: cb:92:3a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNs7vJMY45A6+kGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmYzNzVmOWUtYzE3Yy00MTk1LTk0OTItODc0YWNkZmQ4YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLwetX+sl1c6GDzkcfrdYhtcT4b2pS0I+i3L wzTlRrMqjxRSX++j9tiRpkx2KipB026IaC9jAARSm3ERCjGfqMjf5xadp5EPUJel V2wE1fw3X6Eg9DCRP/rsgdv5N0IZwxU6Fwg6M3lYMdijSUWg7ridlu4RFTeVAua/ w6jd9SyNCOKvWBhJeuhZTilPBXgaFqYWgBRAJa3UbGb+u8hQ3rh7ANh9VAZ4EMRN mf5oO+1Tb8b6gRvk7uL3Oy2ofRE9/GqIfZLPf8hdrRPe+cEkN3hDaecL4HW4axP+ QqyRCbveJUE8CB7FXQb2lqS8q8odWYuvzS4iTc6DMy0i9Og6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQpEzEJz3PCBxug5lGGLTZpBsUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTY1Yjg5NTEtZDQzMi0z MWZjLTljYTktMjgxNmU5MzViYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFziMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGlnoP8e7pzgd5CD37GrxuJR6ivM8G906GAJ95FIFHIoOTArNB1nOGH P86gm7AvB3koZHRoh+9sXboo20AZzoDtBd5hqNg7sdYb5eYKxPNYuvOg0/BvaMY1 oB2KRfMSsyVxIg85b2H/FLVtbksq+H/wSrBwLPjyKWpqIRPogK1+dxroM/lg1Pgw cMgRVFciBffAG5pezA1Yl75xDDSEXSOVGzqfdacoqJrnnTIMHHg+4kRQ7ihtaXHl qPMzSY2muXsvPcWBxG4LBE2Z4HWOFOF0fu1xBr4qTC6WKbHabVvDeWzbw6n8UpM4 nsi0SCuicxRpTD84otOshE/vI8uSOvg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:37 2024 by rpki-client on console-ams.rpki-client.org