$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa File: ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa (raw, json) Hash identifier: Y6V6417D8eFCJle/+4cOJDFuP5YRDLO63WSqi3uXPsM= Subject key identifier: AA:3E:1C:F1:00:A9:65:39:99:C2:6C:F7:38:14:D7:32:7C:AA:12:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24DF113247F7C6CC495400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.223.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:df:11:32:47:f7:c6:cc:49:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=4132e549-d99b-4c80-b1ff-ec43dff6f95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4e:8c:5a:d0:e8:8b:80:d1:15:2a:74:4f:9a: 54:92:81:5c:62:bb:0a:22:dd:bb:ea:b1:60:23:73: 6b:3c:45:ca:0a:4e:0f:6d:a9:d2:59:6c:e3:88:c1: c5:d0:68:d3:82:c7:b2:95:a0:5a:b3:34:21:69:ba: 29:11:b0:3d:3c:cc:85:38:18:a1:df:17:a3:f5:35: 67:77:52:b4:5c:b0:da:33:dc:30:e5:fd:c2:2c:25: b2:c9:01:01:e2:bb:f9:17:f2:fb:4c:af:b0:80:6b: 6e:7a:dc:ec:28:1c:8b:00:76:2f:38:05:97:ec:98: f7:e7:a2:d9:56:28:50:ac:f3:02:24:0e:15:89:ce: 88:14:2e:8f:ff:34:3a:3a:36:06:23:25:f1:f9:49: cb:32:ac:1b:bf:31:5d:52:75:81:1b:2b:3b:ad:d6: 1b:6b:e7:68:7e:a7:3f:3f:6d:90:80:c7:63:1f:87: 3e:2f:cb:48:77:df:7a:c9:61:88:b2:04:05:e8:f4: 6a:69:7b:ce:7b:1d:59:45:81:6d:12:32:4b:e8:f8: d6:92:21:30:05:8c:d3:9a:34:b7:16:76:a5:7d:7d: 82:32:b6:04:23:60:d8:3c:54:77:b1:c8:ea:aa:ae: bb:db:49:dd:fd:e6:65:13:03:52:2d:de:31:54:57: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3E:1C:F1:00:A9:65:39:99:C2:6C:F7:38:14:D7:32:7C:AA:12:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:33:14:28:2f:b7:d9:ba:54:5a:0f:71:d3:37:52:85:1a:20: bc:2c:bc:6e:62:3e:20:91:42:f4:2d:1f:4f:cb:84:c4:09:4a: 83:31:e0:ed:36:74:42:f3:0e:71:a4:e4:4f:a5:f4:53:3b:b6: fe:58:24:78:a8:98:27:8f:b2:5f:7b:8e:db:72:9d:31:e1:d4: c4:c8:59:35:3d:d5:7d:40:44:c3:00:65:27:5f:ad:7a:01:87: 48:ab:be:94:be:18:0f:4f:51:03:4d:05:4c:63:b6:a2:00:99: 95:19:dd:f7:2e:a3:3f:1f:6c:22:e3:2a:44:db:68:5c:d3:d2: 24:d3:ae:c2:a2:03:eb:49:c5:b1:1f:a6:39:01:6b:43:de:45: d5:39:e2:4d:c1:f4:7b:e4:2f:5a:ba:2f:bf:57:00:35:f8:78: 39:45:48:e4:ec:da:1f:c6:e6:91:20:2d:e9:ab:1d:75:d7:f0: d1:0e:3c:3d:b7:f0:b8:8d:a3:9f:df:83:c1:5c:98:2d:84:09: a9:02:76:a5:0f:34:0d:37:64:4d:f7:6c:fb:18:db:49:44:f9: e2:3d:0d:c7:e3:61:82:66:72:01:ec:f6:c9:cf:b0:f9:0e:ae: 77:f8:41:c5:c7:1d:32:cc:9c:83:67:f2:8d:7b:59:df:35:10: 0a:d6:72:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJN8RMkf3xsxJVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NDEzMmU1NDktZDk5Yi00YzgwLWIxZmYtZWM0M2RmZjZmOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg06MWtDoi4DRFSp0T5pUkoFcYrsKIt276rFg I3NrPEXKCk4PbanSWWzjiMHF0GjTgseylaBaszQhabopEbA9PMyFOBih3xej9TVn d1K0XLDaM9ww5f3CLCWyyQEB4rv5F/L7TK+wgGtuetzsKByLAHYvOAWX7Jj356LZ VihQrPMCJA4Vic6IFC6P/zQ6OjYGIyXx+UnLMqwbvzFdUnWBGys7rdYba+dofqc/ P22QgMdjH4c+L8tId996yWGIsgQF6PRqaXvOex1ZRYFtEjJL6PjWkiEwBYzTmjS3 FnalfX2CMrYEI2DYPFR3scjqqq6720nd/eZlEwNSLd4xVFfvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo+HPEAqWU5mcJs9zgU1zJ8qhLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY0YTFlNWEtYTEzZi0z YTQ4LWI4ZTMtZDYyOTgxNTE1M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACszFCgvt9m6VFoPcdM3UoUaILwsvG5iPiCRQvQtH0/LhMQJSoMx4O02 dELzDnGk5E+l9FM7tv5YJHiomCePsl97jttynTHh1MTIWTU91X1ARMMAZSdfrXoB h0irvpS+GA9PUQNNBUxjtqIAmZUZ3fcuoz8fbCLjKkTbaFzT0iTTrsKiA+tJxbEf pjkBa0PeRdU54k3B9HvkL1q6L79XADX4eDlFSOTs2h/G5pEgLemrHXXX8NEOPD23 8LiNo5/fg8FcmC2ECakCdqUPNA03ZE33bPsY20lE+eI9DcfjYYJmcgHs9snPsPkO rnf4QcXHHTLMnINn8o17Wd81EArWcjg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:49 2024 by rpki-client on console-ams.rpki-client.org