$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa File: 128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa (raw, json) Hash identifier: YndYYHR6CvNYnCt56PIKDZ/FoO7+MBI8OhVZ2geld5A= Subject key identifier: F4:D2:4C:E8:82:ED:EB:47:E2:8F:9B:B7:07:4E:4D:F9:1C:5F:A3:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76ECADC66FFE8D50B25900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.43.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ec:ad:c6:6f:fe:8d:50:b2:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=584fa1fa-6b7a-4880-a77a-d34bc144e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:7a:a5:e9:36:5e:51:eb:5d:71:ef:a6:85: 20:fa:31:6e:e0:db:e2:22:02:12:7f:d0:fb:c7:f0: aa:76:93:56:ea:a4:84:95:eb:1e:78:47:c6:35:e9: 1d:ff:db:0f:68:73:02:ef:2b:ce:14:9f:45:27:f5: 0e:93:2c:53:d4:d5:ea:3a:e8:00:f9:ba:0c:98:80: e0:1c:ee:e3:a1:81:73:07:d3:10:3c:81:a7:5d:4f: 8c:22:ad:66:db:0f:be:5c:57:a7:8f:9c:b1:86:2c: 3f:1a:fb:0a:1d:10:39:0c:7b:14:9f:d4:d0:71:29: b9:b3:bb:71:f2:46:95:52:b0:7c:3c:73:10:74:a3: 51:e7:87:4e:f3:6f:d8:5b:7c:39:5c:8f:c4:27:b6: b4:24:0b:c9:63:66:f6:1b:1b:24:a9:73:c1:44:a5: 55:50:ae:cc:3a:cb:a3:b5:5f:ff:f4:dc:62:f7:96: 86:34:b9:84:06:86:55:42:4f:16:b1:64:24:13:af: 38:76:d1:d0:a8:14:26:93:e0:c3:c7:75:ea:f9:54: 67:f7:e6:c5:4a:67:70:da:0a:f9:d3:73:c7:c9:ac: 3f:46:45:3c:bc:f0:53:2b:c7:41:4a:0e:4f:c6:92: 6b:a6:a3:b6:ed:c2:a5:0d:70:6a:b6:1f:e8:d6:d0: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D2:4C:E8:82:ED:EB:47:E2:8F:9B:B7:07:4E:4D:F9:1C:5F:A3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/128cc7a7-e456-3883-a8ab-1b1f7a3f9709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c2:41:08:8b:bb:10:5c:0f:a6:5a:9e:50:03:dc:fa:d9:02: ff:5f:cd:c3:2c:4d:1e:7a:c5:0e:2e:77:1e:20:eb:86:b0:41: 52:70:69:4b:dc:4c:90:64:c3:1b:51:d6:48:e9:7b:aa:3f:e3: e5:cd:84:ae:f7:7b:e1:05:43:9e:fb:15:cf:15:57:4c:b0:f2: 8c:45:12:c1:c0:b5:59:b7:03:05:61:66:e8:1c:6b:84:40:e5: dc:de:ec:cb:7a:fc:73:e2:e0:65:7b:a0:f9:3e:49:27:36:f2: 25:00:5c:91:13:46:85:2c:70:e8:ed:7b:0d:59:58:54:8a:6f: ef:93:60:f5:c5:cd:36:8a:e7:88:b5:92:46:ff:24:71:a2:84: f3:91:f9:7f:62:54:0a:2a:29:c5:3c:41:95:d9:88:67:3d:bb: 4b:03:d9:a5:bd:20:db:9b:eb:dd:86:e2:58:c1:53:53:99:0d: 97:fe:46:a7:eb:15:1c:b4:17:52:49:8b:ff:29:14:bb:a3:ff: 0c:cb:e8:35:ec:e7:92:25:b8:c2:b2:28:b6:9b:98:8a:70:57: 7d:e1:7d:2c:4e:a5:02:5d:bb:11:40:3b:b4:44:f5:c6:ce:d9: b0:94:a7:33:b5:17:53:0d:7b:54:de:f0:c6:8e:2b:de:3a:16: 95:53:ee:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduytxm/+jVCyWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NTg0ZmExZmEtNmI3YS00ODgwLWE3N2EtZDM0YmMxNDRlM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Z6pek2XlHrXXHvpoUg+jFu4NviIgISf9D7 x/CqdpNW6qSEleseeEfGNekd/9sPaHMC7yvOFJ9FJ/UOkyxT1NXqOugA+boMmIDg HO7joYFzB9MQPIGnXU+MIq1m2w++XFenj5yxhiw/GvsKHRA5DHsUn9TQcSm5s7tx 8kaVUrB8PHMQdKNR54dO82/YW3w5XI/EJ7a0JAvJY2b2GxskqXPBRKVVUK7MOsuj tV//9Nxi95aGNLmEBoZVQk8WsWQkE684dtHQqBQmk+DDx3Xq+VRn9+bFSmdw2gr5 03PHyaw/RkU8vPBTK8dBSg5PxpJrpqO27cKlDXBqth/o1tC71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTSTOiC7etH4o+btwdOTfkcX6MwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI4Y2M3YTctZTQ1Ni0z ODgzLWE4YWItMWIxZjdhM2Y5NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7CQQiLuxBcD6ZanlAD3PrZAv9fzcMsTR56xQ4udx4g64awQVJwaUvc TJBkwxtR1kjpe6o/4+XNhK73e+EFQ577Fc8VV0yw8oxFEsHAtVm3AwVhZugca4RA 5dze7Mt6/HPi4GV7oPk+SSc28iUAXJETRoUscOjtew1ZWFSKb++TYPXFzTaK54i1 kkb/JHGihPOR+X9iVAoqKcU8QZXZiGc9u0sD2aW9INub692G4ljBU1OZDZf+Rqfr FRy0F1JJi/8pFLuj/wzL6DXs55IluMKyKLabmIpwV33hfSxOpQJduxFAO7RE9cbO 2bCUpzO1F1MNe1Te8MaOK946FpVT7jI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:28 2024 by rpki-client on console-ams.rpki-client.org