$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa File: 06069c65-6665-3b99-bfd7-150c1baa88b4.roa (raw, json) Hash identifier: k+j743Ly3kRKBh0zEehqneHWxzIDYUMG2V7GrCuI7Mg= Subject key identifier: 5A:B8:0E:F9:63:1C:01:D5:A4:39:64:A4:B1:A3:7C:F5:EB:CB:BD:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5BA8A6472716A35C910700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.43.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:a8:a6:47:27:16:a3:5c:91:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=eaa395b3-5ee8-468f-b88f-c1093a5f871a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4f:26:68:cf:83:3b:c7:a1:41:03:67:a5:e6: 49:88:c1:38:df:b6:e8:9e:8f:1a:4d:37:86:05:3f: 20:f2:9b:f8:e1:79:6f:fc:db:ce:67:39:77:8f:5b: 0d:7d:e1:98:31:a6:3e:96:82:43:d5:0b:5b:e5:d0: 82:9b:b3:10:84:b3:07:23:be:ab:43:c0:3a:f4:de: d7:0b:ab:3c:e4:4e:47:80:47:6a:b0:df:a7:c3:20: 9b:43:ac:ed:3c:bd:2b:dd:b1:fc:13:af:b7:0e:ba: 2c:62:d3:cf:07:15:da:c1:0f:7d:7b:71:c5:12:37: b9:36:c0:62:af:6e:46:fa:b7:1a:bb:26:0a:94:9e: 15:d2:3b:2b:4a:8a:d6:a1:3d:79:30:19:92:81:e7: 63:c3:fe:6b:bc:87:29:84:56:73:01:d8:61:ed:0e: d0:31:62:0b:14:cf:aa:b7:40:c9:1a:f1:69:3f:40: ae:05:ac:42:44:7b:7c:ac:68:41:65:87:10:de:ef: cd:40:2f:34:26:84:df:05:77:cb:38:67:97:8f:a3: 7a:68:40:07:a8:57:92:b8:11:26:90:73:6d:5f:f9: b8:64:79:86:cb:6e:bc:63:ec:50:68:6a:b5:44:70: 4a:38:5e:cc:57:b3:c2:dd:8d:b7:f5:3a:ca:60:2f: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:0E:F9:63:1C:01:D5:A4:39:64:A4:B1:A3:7C:F5:EB:CB:BD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:78:03:0d:01:73:82:b4:e0:59:f0:7e:22:b6:92:f7:d0:e0: aa:0a:5f:a8:86:b3:64:43:64:c0:12:d9:24:51:21:f2:97:be: 19:13:88:3b:5f:d6:74:6a:7e:b3:a1:ef:7d:5e:ae:20:a3:3e: 95:6b:74:8a:a3:f8:02:42:50:84:0a:53:0f:bf:5c:56:2b:c0: db:0d:22:5f:6a:f2:f1:4d:14:22:ad:c0:af:72:47:f6:2b:df: f3:af:b1:54:b2:7e:80:40:7d:82:ab:34:6b:ca:0d:ce:4c:8c: 2f:45:7f:7a:1c:7c:27:38:0d:00:15:d7:4f:6f:7d:81:f6:bb: 9b:8d:a9:69:92:dc:72:8b:d8:7c:77:14:d1:a4:d8:4f:08:f8: a6:81:28:e1:dd:42:f5:ba:18:3a:97:6b:f1:09:c2:6a:cf:84: 27:f4:99:a0:55:47:c8:ab:cf:67:5f:98:33:65:27:2d:0a:a0: fb:29:21:a8:7b:4f:89:db:c8:f3:e7:25:1a:f6:44:b2:f4:0a: b1:e2:d7:a4:92:99:f3:fc:3f:8a:57:7b:ca:64:44:73:78:a4: ee:e3:42:1e:bf:29:b1:79:48:06:6f:d0:60:df:9d:2d:13:10: 32:52:ab:29:02:b0:b8:3d:45:5c:36:90:56:2a:45:b7:f6:5e: 3c:5a:4e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6imRycWo1yRBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk ZWFhMzk1YjMtNWVlOC00NjhmLWI4OGYtYzEwOTNhNWY4NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk8maM+DO8ehQQNnpeZJiME437bono8aTTeG BT8g8pv44Xlv/NvOZzl3j1sNfeGYMaY+loJD1Qtb5dCCm7MQhLMHI76rQ8A69N7X C6s85E5HgEdqsN+nwyCbQ6ztPL0r3bH8E6+3DrosYtPPBxXawQ99e3HFEje5NsBi r25G+rcauyYKlJ4V0jsrSorWoT15MBmSgedjw/5rvIcphFZzAdhh7Q7QMWILFM+q t0DJGvFpP0CuBaxCRHt8rGhBZYcQ3u/NQC80JoTfBXfLOGeXj6N6aEAHqFeSuBEm kHNtX/m4ZHmGy268Y+xQaGq1RHBKOF7MV7PC3Y239TrKYC9Z4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq4DvljHAHVpDlkpLGjfPXry71jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDYwNjljNjUtNjY2NS0z Yjk5LWJmZDctMTUwYzFiYWE4OGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh4Aw0Bc4K04FnwfiK2kvfQ4KoKX6iGs2RDZMAS2SRRIfKXvhkTiDtf 1nRqfrOh731eriCjPpVrdIqj+AJCUIQKUw+/XFYrwNsNIl9q8vFNFCKtwK9yR/Yr 3/OvsVSyfoBAfYKrNGvKDc5MjC9Ff3ocfCc4DQAV109vfYH2u5uNqWmS3HKL2Hx3 FNGk2E8I+KaBKOHdQvW6GDqXa/EJwmrPhCf0maBVR8irz2dfmDNlJy0KoPspIah7 T4nbyPPnJRr2RLL0CrHi16SSmfP8P4pXe8pkRHN4pO7jQh6/KbF5SAZv0GDfnS0T EDJSqykCsLg9RVw2kFYqRbf2XjxaTlc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:09 2024 by rpki-client on console-fra.rpki-client.org