$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22985d6a-8843-33e5-9857-1ef9461ca265.roa File: 22985d6a-8843-33e5-9857-1ef9461ca265.roa (raw, json) Hash identifier: UO0ihdIbE0jCOeM/REYLwtguuZjviAV4nPRqLPyXw7k= Subject key identifier: 25:87:50:41:31:64:22:37:40:11:F0:13:D4:83:49:EB:6B:3B:F0:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A041538D4F63F8AB87B72880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22985d6a-8843-33e5-9857-1ef9461ca265.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.48.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:53:8d:4f:63:f8:ab:87:b7:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=79cb6754-c3fc-448c-8a75-e881ebffd567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:38:9a:a9:93:8a:46:67:8c:c2:c5:ac:dc: c0:fb:8c:77:81:69:10:0b:65:b2:64:67:98:9f:d9: 2b:14:8c:68:cc:f2:e7:10:db:3d:70:b1:93:08:30: 99:6f:99:61:93:54:e7:3b:4e:8e:6a:ae:0c:62:73: 26:40:6e:a6:e7:4c:60:b1:eb:5e:f5:ef:3d:78:e4: 99:9c:ad:83:fd:bb:9d:fe:ba:54:47:44:91:93:05: 9a:de:c5:ff:ff:a1:4e:b8:9b:61:b7:d3:82:08:40: 92:00:38:86:ba:78:e4:95:e5:c6:5e:8f:e0:5d:48: ce:09:1a:55:7a:2a:e7:c5:22:29:74:c4:06:3e:59: 22:2a:c5:67:f1:bd:46:99:a2:d0:83:66:6d:bf:95: 0c:a0:1e:ee:65:f8:71:9b:1c:3e:f3:2b:b2:c3:a0: ff:48:28:da:a1:17:ac:84:53:5b:43:20:61:36:33: ec:1c:68:2f:91:84:10:05:04:23:1b:e2:e4:c4:2e: d4:f8:61:dd:40:a5:6b:f1:ba:3a:3c:6c:ea:52:71: 10:76:dd:9c:3c:f9:ee:da:01:d0:11:ea:63:46:17: d3:03:0c:5f:14:17:eb:ba:77:9a:64:1a:96:3e:ee: 17:25:f3:c7:cf:ee:5d:1b:2a:80:70:57:32:ad:5d: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:87:50:41:31:64:22:37:40:11:F0:13:D4:83:49:EB:6B:3B:F0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22985d6a-8843-33e5-9857-1ef9461ca265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:50:59:88:10:65:a8:b0:16:ef:aa:b5:8b:73:84:fa:04:2c: f2:30:96:c9:88:58:7e:5b:86:6f:af:51:68:28:90:f7:47:60: 43:b5:cf:14:71:d8:19:8a:1d:40:96:ae:8f:18:52:27:47:2a: b1:fa:7a:bb:7e:60:a7:b4:de:28:9e:9b:92:72:63:8a:ad:b4: 65:f7:34:05:88:f6:da:15:e4:5b:98:04:fe:08:71:69:8d:71: 52:17:c8:d3:f6:18:bd:cd:0c:b7:4f:48:d0:5c:57:2e:4f:3f: 38:14:fb:7a:b6:39:d1:54:07:43:23:1c:ba:8a:64:c0:1c:90: f7:51:2f:71:01:c3:f4:7b:9a:79:d7:5e:0c:52:5f:fa:10:5c: f1:48:87:a1:51:0b:d8:89:f4:c2:84:e1:75:ad:6d:2f:84:8c: a2:a5:63:cf:a2:92:e3:44:d3:32:c3:3b:d4:13:81:e3:97:b1: 0a:fa:c0:b2:2e:3a:6a:5e:95:fc:64:be:ee:8e:9e:ea:0e:fd: 2d:63:82:4a:83:12:82:bf:2e:2f:f1:4d:2e:fe:cb:00:97:68: 95:30:b6:d4:46:92:36:28:2f:df:3f:19:eb:69:ab:80:e5:37: 08:4f:6c:17:fa:46:2a:32:e7:3e:58:49:f3:b9:e6:2b:2a:8d: 26:11:10:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVONT2P4q4e3KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk NzljYjY3NTQtYzNmYy00NDhjLThhNzUtZTg4MWViZmZkNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOo4mqmTikZnjMLFrNzA+4x3gWkQC2WyZGeY n9krFIxozPLnENs9cLGTCDCZb5lhk1TnO06Oaq4MYnMmQG6m50xgsete9e89eOSZ nK2D/bud/rpUR0SRkwWa3sX//6FOuJtht9OCCECSADiGunjkleXGXo/gXUjOCRpV eirnxSIpdMQGPlkiKsVn8b1GmaLQg2Ztv5UMoB7uZfhxmxw+8yuyw6D/SCjaoRes hFNbQyBhNjPsHGgvkYQQBQQjG+LkxC7U+GHdQKVr8bo6PGzqUnEQdt2cPPnu2gHQ EepjRhfTAwxfFBfruneaZBqWPu4XJfPHz+5dGyqAcFcyrV33qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWHUEExZCI3QBHwE9SDSetrO/AjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI5ODVkNmEtODg0My0z M2U1LTk4NTctMWVmOTQ2MWNhMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZQWYgQZaiwFu+qtYtzhPoELPIwlsmIWH5bhm+vUWgokPdHYEO1zxRx 2BmKHUCWro8YUidHKrH6ert+YKe03iiem5JyY4qttGX3NAWI9toV5FuYBP4IcWmN cVIXyNP2GL3NDLdPSNBcVy5PPzgU+3q2OdFUB0MjHLqKZMAckPdRL3EBw/R7mnnX XgxSX/oQXPFIh6FRC9iJ9MKE4XWtbS+EjKKlY8+ikuNE0zLDO9QTgeOXsQr6wLIu Ompelfxkvu6OnuoO/S1jgkqDEoK/Li/xTS7+ywCXaJUwttRGkjYoL98/Getpq4Dl NwhPbBf6Rioy5z5YSfO55isqjSYREOA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:21 2024 by rpki-client on console-fra.rpki-client.org