$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ba46c97-94f5-385d-aa31-6a893f91d43a.roa File: 0ba46c97-94f5-385d-aa31-6a893f91d43a.roa (raw, json) Hash identifier: qkR7wurNjoaP0q6KML74IXqjRJJTqUFJSx1egq0KWMg= Subject key identifier: 21:76:77:31:7B:A6:64:FF:3F:1B:1B:0E:1D:05:B5:18:83:0F:03:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36D3AFA8329C80FC68BE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ba46c97-94f5-385d-aa31-6a893f91d43a.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.60.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:d3:af:a8:32:9c:80:fc:68:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=f9bf4092-e725-4762-a778-ae055034058b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:c0:d5:f3:90:63:ed:d7:83:2e:8e:d1:9b: b2:1c:59:a6:98:83:d3:69:51:7d:f8:97:5f:3e:3a: 14:d8:79:bd:32:d3:c0:74:fc:92:d3:d3:04:0b:5e: 1f:f9:83:03:44:bf:c3:71:af:cf:0a:57:37:b1:57: f6:00:7a:ff:0d:58:2c:ad:a2:5a:ca:09:93:9f:65: 47:56:d9:0a:35:d1:50:07:0c:de:a2:ad:c1:a0:9f: cb:15:85:1e:a5:42:76:e2:45:6e:b0:22:c4:ad:4f: ad:49:43:f2:2b:11:5b:41:75:d1:5d:94:a2:33:17: 25:0a:b1:48:bf:bf:7c:51:18:a8:c1:52:dc:16:58: 34:62:53:50:2e:a5:98:d6:59:76:bb:0e:ee:dd:a0: 63:17:db:dc:66:0c:8f:13:61:18:25:ac:a2:ea:a7: ed:12:17:41:47:8d:ea:de:7a:09:19:e2:f4:04:15: d6:5b:e5:f1:f7:7b:c3:30:b0:4e:d7:7f:f5:34:ba: b5:6f:0c:6a:ad:d4:39:14:5b:7e:64:93:c3:4c:e0: 5b:68:b7:50:04:63:09:b6:eb:20:45:c6:47:93:1e: f4:72:e7:e2:85:d3:3b:2d:c5:92:09:d1:29:c7:81: c3:cd:4e:56:3e:7e:c0:4c:06:15:7e:4b:f9:b7:dd: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:77:31:7B:A6:64:FF:3F:1B:1B:0E:1D:05:B5:18:83:0F:03:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ba46c97-94f5-385d-aa31-6a893f91d43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ce:a1:18:67:53:02:42:b5:3e:07:52:ff:f1:83:0d:e9:b1: 1a:b0:04:12:d2:72:a8:5c:bf:5a:8d:95:7b:98:c7:ea:aa:ec: dc:2f:41:fc:f6:d7:52:84:63:fe:6c:b2:e3:cc:de:b2:25:59: e2:0c:13:99:9e:b8:f0:f3:e9:8c:b8:0f:68:cb:a5:af:35:7a: be:57:76:91:ec:ea:2a:74:63:3e:9a:2d:5c:aa:2e:1b:24:ef: 5e:f0:68:79:c7:81:d6:0d:06:e2:2c:ff:f8:6a:36:00:37:3c: 1d:cc:c8:92:0f:29:5b:03:c0:fe:03:6a:90:4e:7b:ec:df:13: 5a:f5:73:53:c5:e0:1c:7b:fb:6b:d9:5b:4a:aa:70:9a:46:08: a6:eb:65:ac:0d:26:e4:4a:4e:a9:72:31:46:b8:72:bb:8c:e5: 2d:17:21:e9:86:11:12:de:c5:98:be:90:97:b8:f6:13:e1:c2: 83:9f:27:af:fa:0e:02:e1:34:f5:7f:5b:41:ab:5e:54:12:46: da:22:4a:e9:0a:d3:f1:c8:a2:49:89:37:d9:54:ff:9b:74:d1: 36:c4:75:52:eb:e4:5d:b5:44:df:bd:fc:cc:d4:ca:36:26:5e: f4:d2:2e:4f:a8:4e:a8:4b:dd:10:aa:67:fa:c2:af:5b:12:67: 49:03:1f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNtOvqDKcgPxovgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjliZjQwOTItZTcyNS00NzYyLWE3NzgtYWUwNTUwMzQwNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0TA1fOQY+3Xgy6O0ZuyHFmmmIPTaVF9+Jdf PjoU2Hm9MtPAdPyS09MEC14f+YMDRL/Dca/PClc3sVf2AHr/DVgsraJaygmTn2VH VtkKNdFQBwzeoq3BoJ/LFYUepUJ24kVusCLErU+tSUPyKxFbQXXRXZSiMxclCrFI v798URiowVLcFlg0YlNQLqWY1ll2uw7u3aBjF9vcZgyPE2EYJayi6qftEhdBR43q 3noJGeL0BBXWW+Xx93vDMLBO13/1NLq1bwxqrdQ5FFt+ZJPDTOBbaLdQBGMJtusg RcZHkx70cufihdM7LcWSCdEpx4HDzU5WPn7ATAYVfkv5t932JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF2dzF7pmT/PxsbDh0FtRiDDwNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJhNDZjOTctOTRmNS0z ODVkLWFhMzEtNmE4OTNmOTFkNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvOoRhnUwJCtT4HUv/xgw3psRqwBBLScqhcv1qNlXuYx+qq7NwvQfz2 11KEY/5ssuPM3rIlWeIME5meuPDz6Yy4D2jLpa81er5XdpHs6ip0Yz6aLVyqLhsk 717waHnHgdYNBuIs//hqNgA3PB3MyJIPKVsDwP4DapBOe+zfE1r1c1PF4Bx7+2vZ W0qqcJpGCKbrZawNJuRKTqlyMUa4cruM5S0XIemGERLexZi+kJe49hPhwoOfJ6/6 DgLhNPV/W0GrXlQSRtoiSukK0/HIokmJN9lU/5t00TbEdVLr5F21RN+9/MzUyjYm XvTSLk+oTqhL3RCqZ/rCr1sSZ0kDH3U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:11 2024 by rpki-client on console-fra.rpki-client.org