$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa File: f39684af-ec3a-368b-8d03-50bb9d13205b.roa (raw, json) Hash identifier: 2ykBPD7aP660loqBfx2vUOQu6J5nse2fzP1FS+oKfBk= Subject key identifier: A4:30:92:EB:BF:11:0F:18:B7:59:A8:4C:6B:89:BB:CA:1A:9D:96:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475D40D6E0F4C96500B76A5130 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 16625 IP address blocks: 23.34.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d6:e0:f4:c9:65:00:b7:6a:51:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=ea83f15b-0905-4d0c-8efe-153ac78788bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:bb:17:0f:cd:14:da:38:20:51:88:f0:2a: 47:d7:08:b6:b3:24:2d:99:6a:6e:ad:d9:11:45:98: 64:a7:6f:5f:d3:3e:83:26:c9:cc:81:72:8c:17:cb: 6f:41:b4:61:4b:ee:47:f1:d4:38:dd:de:dd:a6:3e: de:f6:3f:a0:41:58:eb:f2:38:b3:c6:f5:f2:ee:63: 32:44:1a:0a:b7:48:16:46:bf:a6:76:6b:ad:ab:18: 8c:17:91:4d:65:7a:f3:a4:66:54:99:eb:e8:7f:e2: ec:46:e9:06:de:11:88:ec:ec:41:6a:0a:1f:5f:93: 7d:48:60:f1:b9:f6:56:4c:ab:8e:2a:b7:9e:5c:bf: ce:ff:29:77:a1:b5:b3:e9:43:65:2b:5b:64:94:bf: 32:a0:73:06:19:77:2e:19:23:7a:9c:a7:c4:ce:cb: 1b:57:ec:8f:41:a7:42:ec:ee:34:c3:82:81:61:39: 12:35:6a:d3:e9:b8:1d:df:77:3c:62:2d:ae:8f:47: 6f:86:96:9e:30:b2:a8:63:82:97:4c:08:e0:98:9c: e5:23:c1:34:c5:5a:fd:4a:84:fe:82:5e:7b:60:cd: 37:5f:62:09:9d:fe:bd:67:59:91:6e:46:22:76:2d: cb:4e:01:e4:f8:8c:47:0c:99:37:4e:b5:40:bf:e3: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:30:92:EB:BF:11:0F:18:B7:59:A8:4C:6B:89:BB:CA:1A:9D:96:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f39684af-ec3a-368b-8d03-50bb9d13205b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7a:97:41:8e:1a:ae:4b:7b:51:f0:87:17:a5:0b:d9:75:0e: 58:56:4c:e8:b0:b4:45:7a:68:a4:54:a7:ff:e3:af:b2:ef:57: 55:0c:b3:b8:05:6b:77:26:44:35:49:b9:07:a9:7c:65:1a:14: 46:05:c0:7f:93:a6:36:31:c8:4a:85:bc:93:e1:aa:3d:31:f1: bb:89:fc:ba:a2:36:66:41:2b:97:f8:0b:fc:d6:c9:a1:b1:7f: 63:3f:e8:6e:7d:42:e2:9c:fb:64:76:3b:3b:44:5f:e3:b5:45: 44:c8:0e:eb:69:b4:2f:79:2e:54:08:84:b4:e3:cf:3c:3d:f4: 97:b8:74:77:25:5b:48:14:41:3d:3a:8f:ad:39:a1:f5:5b:40: 26:de:88:f9:32:24:02:75:37:59:e9:e8:19:79:2e:e9:8f:77: f6:a3:7e:27:b6:b5:7a:51:fd:80:a5:1f:54:09:8d:5d:e4:14: 58:c9:2d:b4:f0:c6:90:7b:14:68:1f:7a:c9:6a:c1:0f:1f:77: c1:ab:54:e5:7d:2b:e2:ca:a3:94:01:ab:00:4c:5d:0b:ca:cd: 9e:ef:e1:2c:6a:20:a2:36:67:d7:18:a4:64:9f:8b:01:02:b7: 68:98:ba:fa:5f:0b:2e:ee:fe:f8:05:90:f2:26:d8:9d:98:ba: d4:3d:14:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNbg9MllALdqUTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWE4M2YxNWItMDkwNS00ZDBjLThlZmUtMTUzYWM3ODc4OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUO7Fw/NFNo4IFGI8CpH1wi2syQtmWpurdkR RZhkp29f0z6DJsnMgXKMF8tvQbRhS+5H8dQ43d7dpj7e9j+gQVjr8jizxvXy7mMy RBoKt0gWRr+mdmutqxiMF5FNZXrzpGZUmevof+LsRukG3hGI7OxBagofX5N9SGDx ufZWTKuOKreeXL/O/yl3obWz6UNlK1tklL8yoHMGGXcuGSN6nKfEzssbV+yPQadC 7O40w4KBYTkSNWrT6bgd33c8Yi2uj0dvhpaeMLKoY4KXTAjgmJzlI8E0xVr9SoT+ gl57YM03X2IJnf69Z1mRbkYidi3LTgHk+IxHDJk3TrVAv+PVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQwkuu/EQ8Yt1moTGuJu8oanZZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM5Njg0YWYtZWMzYS0z NjhiLThkMDMtNTBiYjlkMTMyMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER6l0GOGq5Le1HwhxelC9l1DlhWTOiwtEV6aKRUp//jr7LvV1UMs7gF a3cmRDVJuQepfGUaFEYFwH+TpjYxyEqFvJPhqj0x8buJ/LqiNmZBK5f4C/zWyaGx f2M/6G59QuKc+2R2OztEX+O1RUTIDutptC95LlQIhLTjzzw99Je4dHclW0gUQT06 j605ofVbQCbeiPkyJAJ1N1np6Bl5LumPd/ajfie2tXpR/YClH1QJjV3kFFjJLbTw xpB7FGgfeslqwQ8fd8GrVOV9K+LKo5QBqwBMXQvKzZ7v4SxqIKI2Z9cYpGSfiwEC t2iYuvpfCy7u/vgFkPIm2J2YutQ9FAM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:33:08 2024 by rpki-client on console-ams.rpki-client.org