$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa File: 215471b5-2100-3f40-ae75-911f05bd076e.roa (raw, json) Hash identifier: yMZKsLpLu1gnfLZ9JASwynIvi95vH2el1VNPIT2arFo= Subject key identifier: 74:3E:3B:A0:AA:09:F4:32:DA:84:80:95:2B:F4:F5:C4:5C:82:F5:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A0FC7DE7F5692D364ABEE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 20940 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:fc:7d:e7:f5:69:2d:36:4a:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=5791a21a-93f2-43c4-b2ee-0e11c9a1ffe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:e2:9a:2f:a1:28:93:0a:27:7f:c9:0d:9a: 75:97:df:5c:bb:f6:1e:f3:b2:5d:e6:97:a5:5f:42: 36:49:f8:85:36:39:0d:f6:da:56:57:f9:33:4b:5d: 3b:67:72:fc:ca:ea:4f:fd:e0:b6:88:8c:e4:e2:a9: fc:42:0c:fa:87:cc:56:67:88:53:d8:d6:74:03:aa: f5:35:80:38:df:9b:a0:d2:61:ca:19:2b:4e:3d:1b: f5:09:94:f8:f7:ad:3e:de:2b:97:95:e1:2e:48:bb: 79:b4:f2:f2:7b:da:66:5c:e9:bf:1b:ee:3d:06:09: c5:0f:83:b5:5e:2d:0a:94:a8:ec:08:45:c8:af:e5: 64:95:af:ef:bc:7e:c2:cc:1d:0f:f0:36:87:c9:0a: 2d:28:37:f0:ba:2a:5a:54:a6:87:04:8e:93:54:fc: 39:32:fc:b7:4c:69:68:ca:93:c8:50:7f:a5:de:68: a2:0b:35:d2:fc:b6:53:48:bc:51:e5:9c:ea:bb:93: 36:7b:ed:06:b2:85:1c:3a:bc:0b:24:35:35:68:17: 56:24:0a:12:c5:92:bc:77:04:e9:9a:78:f0:35:5e: 09:ba:ce:32:31:ed:0a:71:ef:6c:a2:1f:c6:9d:a7: 30:a9:59:95:30:98:4b:e1:72:66:7f:d7:67:67:12: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3E:3B:A0:AA:09:F4:32:DA:84:80:95:2B:F4:F5:C4:5C:82:F5:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5c:ed:fb:50:47:ed:53:27:71:cc:fb:af:0f:2d:0f:9a:d7: 1f:e6:1d:d7:e3:70:c9:34:a9:7f:5d:cf:0d:ac:ac:85:53:56: 36:fc:4f:62:dd:90:01:d0:e4:c9:fe:96:59:37:2e:6f:a2:b1: 99:9b:77:a6:51:fd:b6:de:0c:46:7f:2b:28:b4:6f:54:3d:9a: 9a:e7:d0:55:6d:81:36:9c:0a:cc:24:b7:81:96:68:2e:13:f9: 3c:1c:10:db:55:46:0e:3c:53:e2:72:02:13:21:6e:d0:a4:40: a0:ce:51:7c:46:c5:a7:7e:81:17:5c:48:9a:10:ee:68:e0:c4: 82:bb:f5:47:78:c3:d5:ba:fa:2f:22:a8:2a:ac:f0:32:64:27: 01:2a:08:cb:1d:5d:7b:0c:a7:9e:a1:85:05:1f:90:f0:84:1b: c7:38:0c:04:f6:8e:f9:33:cf:3b:4d:4a:59:f5:48:81:60:80: 00:75:18:56:c7:52:05:cc:09:8c:fc:0f:5d:37:7d:cb:d5:58: 87:9f:de:15:8f:33:e0:9a:95:d5:24:fa:8c:9f:dd:36:1b:cd: 97:5b:14:86:ad:3e:e4:b1:21:14:03:f3:a6:20:51:eb:b9:d7: 29:b5:67:be:9c:50:52:69:92:7d:a5:24:3a:6e:9a:80:17:95: d3:e8:da:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPx95/VpLTZKvuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk NTc5MWEyMWEtOTNmMi00M2M0LWIyZWUtMGUxMWM5YTFmZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnenimi+hKJMKJ3/JDZp1l99cu/Ye87Jd5pel X0I2SfiFNjkN9tpWV/kzS107Z3L8yupP/eC2iIzk4qn8Qgz6h8xWZ4hT2NZ0A6r1 NYA435ug0mHKGStOPRv1CZT4960+3iuXleEuSLt5tPLye9pmXOm/G+49BgnFD4O1 Xi0KlKjsCEXIr+Vkla/vvH7CzB0P8DaHyQotKDfwuipaVKaHBI6TVPw5Mvy3TGlo ypPIUH+l3miiCzXS/LZTSLxR5Zzqu5M2e+0GsoUcOrwLJDU1aBdWJAoSxZK8dwTp mnjwNV4Jus4yMe0Kce9soh/GnacwqVmVMJhL4XJmf9dnZxISgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ+O6CqCfQy2oSAlSv09cRcgvVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE1NDcxYjUtMjEwMC0z ZjQwLWFlNzUtOTExZjA1YmQwNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9c7ftQR+1TJ3HM+68PLQ+a1x/mHdfjcMk0qX9dzw2srIVTVjb8T2Ld kAHQ5Mn+llk3Lm+isZmbd6ZR/bbeDEZ/Kyi0b1Q9mprn0FVtgTacCswkt4GWaC4T +TwcENtVRg48U+JyAhMhbtCkQKDOUXxGxad+gRdcSJoQ7mjgxIK79Ud4w9W6+i8i qCqs8DJkJwEqCMsdXXsMp56hhQUfkPCEG8c4DAT2jvkzzztNSln1SIFggAB1GFbH UgXMCYz8D103fcvVWIef3hWPM+CaldUk+oyf3TYbzZdbFIatPuSxIRQD86YgUeu5 1ym1Z76cUFJpkn2lJDpumoAXldPo2j0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:06 2024 by rpki-client on console-ams.rpki-client.org