$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa File: ec7cf623-8608-3308-aed9-15c7038a2a6a.roa (raw, json) Hash identifier: twBR0bf5uOH4kFk1DVl0bFDbGssNHgvWjUcuD7l1NFk= Subject key identifier: A1:BC:EF:01:BC:65:83:F5:03:1D:06:C9:59:EF:30:3A:03:54:D3:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC038D982FFE425AD19280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.38.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:03:8d:98:2f:fe:42:5a:d1:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=ac2bce9c-6242-4c47-b443-e569559d9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:01:35:a4:4d:42:e6:9d:69:77:83:25:39: 47:6f:d5:75:08:69:70:9d:6f:be:a1:f6:31:f7:d3: 82:0e:ab:16:50:02:3e:03:ad:05:93:f4:80:88:ba: ab:05:d2:94:7a:a8:49:57:fe:d1:d6:c3:02:c1:26: c3:0a:4e:5e:6b:94:32:a2:d4:2d:81:38:f3:e1:97: 59:de:14:1c:79:f1:ac:e0:da:34:36:02:dd:34:64: 16:9e:08:ec:00:5d:a4:c9:ea:36:30:4b:ad:2a:db: 21:0e:ca:80:04:72:d0:0f:a9:81:15:51:d9:85:6c: 31:cd:ce:9a:1c:01:24:37:0b:39:8d:57:5c:e4:f1: 8c:91:0e:0a:fd:9e:33:d0:63:e9:aa:94:71:9f:9d: 4d:a2:b5:e3:57:0b:23:af:35:ea:69:ff:2a:52:2d: 88:24:8a:f0:80:58:a4:e6:1b:b6:f1:4f:05:13:8a: 68:43:a1:13:a7:83:9e:97:1a:cb:02:d2:74:50:ec: c0:76:64:8a:cf:4b:a3:c3:2c:8b:ac:23:c2:2c:78: 75:87:c4:e4:f2:dc:c0:e5:aa:d7:6c:e3:06:3c:9f: 19:a8:12:99:22:d1:a0:f4:f2:b7:89:45:f9:9f:d9: 0f:20:6f:bb:4c:0c:ee:72:68:fb:76:01:b1:0e:01: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BC:EF:01:BC:65:83:F5:03:1D:06:C9:59:EF:30:3A:03:54:D3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:55:19:cd:13:ac:d0:ab:1e:c5:47:af:57:da:f0:85:d7:68: 11:e4:a9:34:78:df:df:6f:aa:69:ac:5e:46:8b:a8:81:cc:65: eb:60:12:f9:24:84:b1:c2:ce:c4:de:cc:b2:3e:b1:e8:91:1c: 0b:4a:23:aa:57:14:a7:90:cb:bd:51:38:01:57:cb:ec:06:cf: 90:01:2c:28:1a:7b:c7:3c:29:76:de:e2:93:e9:88:29:37:09: 11:18:7f:a7:90:f5:64:8f:55:cb:f0:25:35:f9:de:7e:9f:d6: 02:33:d9:01:53:0c:00:58:22:dc:01:53:80:6d:b0:9a:5f:b3: ee:3a:77:9f:d7:83:6f:ac:02:79:39:0b:7b:42:80:79:20:8c: a6:56:c9:e7:6f:ac:45:cc:d3:cd:b3:c9:88:57:ec:bd:ab:45: 7a:88:0d:a8:32:67:b6:e0:64:37:5b:81:e5:0a:3f:28:f7:2e: c7:1e:70:1f:ca:23:a2:45:ce:c7:68:9f:2d:19:c4:8c:3f:0a: 0d:90:69:b6:9b:70:97:6b:28:d4:4b:aa:8f:a4:ea:f2:26:b5: 0d:34:37:a9:c5:d1:23:5e:87:ea:79:b9:c7:94:a7:58:08:de: 00:0c:42:5c:10:e8:ae:00:ae:7b:87:89:f2:42:66:52:0a:f9: 13:72:f3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearAONmC/+QlrRkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk YWMyYmNlOWMtNjI0Mi00YzQ3LWI0NDMtZTU2OTU1OWQ5OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6EBNaRNQuadaXeDJTlHb9V1CGlwnW++ofYx 99OCDqsWUAI+A60Fk/SAiLqrBdKUeqhJV/7R1sMCwSbDCk5ea5QyotQtgTjz4ZdZ 3hQcefGs4No0NgLdNGQWngjsAF2kyeo2MEutKtshDsqABHLQD6mBFVHZhWwxzc6a HAEkNws5jVdc5PGMkQ4K/Z4z0GPpqpRxn51NorXjVwsjrzXqaf8qUi2IJIrwgFik 5hu28U8FE4poQ6ETp4OelxrLAtJ0UOzAdmSKz0ujwyyLrCPCLHh1h8Tk8tzA5arX bOMGPJ8ZqBKZItGg9PK3iUX5n9kPIG+7TAzucmj7dgGxDgEUpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG87wG8ZYP1Ax0GyVnvMDoDVNPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM3Y2Y2MjMtODYwOC0z MzA4LWFlZDktMTVjNzAzOGEyYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFya8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtVGc0TrNCrHsVHr1fa8IXXaBHkqTR4399vqmmsXkaLqIHMZetgEvkk hLHCzsTezLI+seiRHAtKI6pXFKeQy71ROAFXy+wGz5ABLCgae8c8KXbe4pPpiCk3 CREYf6eQ9WSPVcvwJTX53n6f1gIz2QFTDABYItwBU4BtsJpfs+46d5/Xg2+sAnk5 C3tCgHkgjKZWyedvrEXM082zyYhX7L2rRXqIDagyZ7bgZDdbgeUKPyj3LscecB/K I6JFzsdony0ZxIw/Cg2QababcJdrKNRLqo+k6vImtQ00N6nF0SNeh+p5uceUp1gI 3gAMQlwQ6K4ArnuHifJCZlIK+RNy8yQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:52 2024 by rpki-client on console-fra.rpki-client.org