$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6b3a50-d6aa-30cf-b6c5-3c6bd5f79f6a.roa File: 1d6b3a50-d6aa-30cf-b6c5-3c6bd5f79f6a.roa (raw, json) Hash identifier: dGh0pVb38SEhtI6s7cpj4WR425/uXNIIzdWOWTaVAOM= Subject key identifier: 9B:FF:81:D7:02:30:7D:4D:D2:0E:B0:7A:0B:E8:01:AF:9C:C0:03:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36D17922B1B1F15535A0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6b3a50-d6aa-30cf-b6c5-3c6bd5f79f6a.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.59.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:d1:79:22:b1:b1:f1:55:35:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=bd08c3dc-90f2-41d5-afa0-820405a3a1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:d0:cc:cb:04:c1:0c:62:ec:12:d1:a2:be: 81:9e:19:49:87:25:6a:56:2b:3d:b3:23:f1:56:a8: 04:8f:c1:cd:33:38:b1:7d:7d:72:5c:b9:e7:36:ff: 4d:a7:c8:4c:2a:74:29:62:04:32:6e:de:f3:b3:c8: e7:ed:20:1b:0a:c3:ae:23:38:4d:df:d0:d2:0b:55: 1b:b7:ec:3c:13:10:34:6e:32:9c:a4:5d:a8:db:01: cc:2b:01:71:0f:a5:49:ee:ef:81:49:c2:2f:c4:2e: 2e:ea:b9:93:7d:e4:69:8a:4f:8a:21:ac:be:a4:ef: 47:a7:5f:eb:e6:a5:8f:d9:d6:c8:8c:7a:a5:91:e6: 1f:40:f0:a8:45:48:9e:9f:76:cc:7e:e4:20:68:df: 4b:9c:2b:c7:56:08:6c:9b:ec:1a:75:c8:3e:63:a1: 08:d4:6b:ff:4c:5a:3c:e6:5a:5a:4a:c5:46:fb:a0: 89:73:f3:51:e1:97:71:06:67:34:08:b2:41:af:40: 1b:54:71:8d:32:06:8f:37:ca:35:02:d9:dd:61:1b: 30:ae:9c:b6:e2:ad:bc:af:b0:2c:da:21:81:8c:93: d0:18:04:19:f3:b1:e8:3e:72:ba:61:68:c5:ad:38: de:21:cf:a8:83:3c:63:38:a4:ff:30:42:c4:13:0c: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FF:81:D7:02:30:7D:4D:D2:0E:B0:7A:0B:E8:01:AF:9C:C0:03:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6b3a50-d6aa-30cf-b6c5-3c6bd5f79f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f8:56:20:22:8c:36:26:82:5b:a5:74:13:a1:31:3f:b9:54: cd:8b:c2:80:a0:3f:75:ac:5b:92:9f:17:19:f0:a1:1c:54:52: 2d:8e:bc:13:41:a8:11:e3:d9:64:de:f4:25:a2:70:d4:df:f2: f0:44:07:f0:f7:0c:98:84:88:fd:20:af:66:c6:57:de:2a:a1: 80:fa:10:31:83:68:8a:b7:0c:f4:f6:44:f1:e8:fc:ea:ff:1b: 3e:ea:c5:cd:e3:12:7a:22:d3:c2:5d:78:e9:cc:c6:7b:a1:93: 57:6d:1e:0b:a4:37:61:97:b0:90:dd:3c:16:60:4b:e3:59:7c: 3b:63:12:89:54:3a:b9:10:4f:59:6f:8d:02:89:29:1e:9e:a5: 0c:93:b4:9d:00:d8:41:fd:c9:ee:d5:0a:3f:57:52:d9:b8:4a: af:69:99:bd:66:27:f4:d9:c3:1e:01:bb:ac:c9:c9:2f:fb:b3: b3:80:71:81:ae:37:b7:59:2d:81:f8:86:4a:c2:e9:4e:54:ea: c0:fb:93:c5:71:6d:b3:03:34:15:18:61:8c:1a:f1:a3:ba:a2: af:6e:53:da:e1:66:73:1b:74:84:18:7c:51:91:8d:df:3c:ef: a4:98:3f:e3:fb:1f:9a:fc:cd:98:16:69:96:7b:d1:84:be:89: bb:b2:0f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNtF5IrGx8VU1oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YmQwOGMzZGMtOTBmMi00MWQ1LWFmYTAtODIwNDA1YTNhMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/QzMsEwQxi7BLRor6BnhlJhyVqVis9syPx VqgEj8HNMzixfX1yXLnnNv9Np8hMKnQpYgQybt7zs8jn7SAbCsOuIzhN39DSC1Ub t+w8ExA0bjKcpF2o2wHMKwFxD6VJ7u+BScIvxC4u6rmTfeRpik+KIay+pO9Hp1/r 5qWP2dbIjHqlkeYfQPCoRUien3bMfuQgaN9LnCvHVghsm+wadcg+Y6EI1Gv/TFo8 5lpaSsVG+6CJc/NR4ZdxBmc0CLJBr0AbVHGNMgaPN8o1AtndYRswrpy24q28r7As 2iGBjJPQGAQZ87HoPnK6YWjFrTjeIc+ogzxjOKT/MELEEwweQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv/gdcCMH1N0g6wegvoAa+cwAMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ2YjNhNTAtZDZhYS0z MGNmLWI2YzUtM2M2YmQ1Zjc5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv4ViAijDYmgluldBOhMT+5VM2LwoCgP3WsW5KfFxnwoRxUUi2OvBNB qBHj2WTe9CWicNTf8vBEB/D3DJiEiP0gr2bGV94qoYD6EDGDaIq3DPT2RPHo/Or/ Gz7qxc3jEnoi08JdeOnMxnuhk1dtHgukN2GXsJDdPBZgS+NZfDtjEolUOrkQT1lv jQKJKR6epQyTtJ0A2EH9ye7VCj9XUtm4Sq9pmb1mJ/TZwx4Bu6zJyS/7s7OAcYGu N7dZLYH4hkrC6U5U6sD7k8VxbbMDNBUYYYwa8aO6oq9uU9rhZnMbdIQYfFGRjd88 76SYP+P7H5r8zZgWaZZ70YS+ibuyD1c= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:19 2024 by rpki-client on console-fra.rpki-client.org