$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa File: 2f98869a-afa1-3dca-b605-feee01eea043.roa (raw, json) Hash identifier: O2D4E97SJuVO7XoIK5hRBS5DPzYdxcDCHtyQFH1wtdI= Subject key identifier: 4C:D6:48:ED:A6:38:44:65:E1:7D:B5:84:2E:D8:03:E3:35:0B:38:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A5D6B6F0FBE7F5A151430BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.52.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b6:f0:fb:e7:f5:a1:51:43:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=a718f29e-c856-479c-bff4-325137a1809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:46:d1:c4:f3:5b:3a:95:25:97:4d:fa:35: bc:72:b7:71:2a:cf:80:5e:a6:73:1a:ff:ba:2d:35: cc:18:60:72:ee:65:59:e0:20:d2:f2:65:b3:82:ae: 62:7f:a6:9c:6e:a0:30:6a:39:c4:a6:bf:18:ca:0c: 93:a0:14:cd:29:93:b1:c0:63:d2:cb:80:49:5e:ec: fa:07:d3:39:3c:54:9d:be:e1:e6:4b:4b:3c:b9:29: f6:b8:4a:2e:fa:2a:f2:7d:62:a4:e8:a5:58:da:c0: fb:ac:1f:68:0f:91:78:95:b2:74:67:a8:4e:9c:0a: 4a:06:b8:ba:1b:16:4f:aa:18:ab:28:08:29:82:09: 57:18:9a:24:4b:21:4f:8a:46:ec:54:8d:8b:ac:6c: 99:bb:00:f3:b0:0a:8d:cf:ff:24:f9:26:18:bf:2a: ba:5a:87:38:b5:cc:44:8b:f8:10:6a:96:2a:ef:d0: 27:78:ef:08:72:e3:98:b7:73:d4:ce:c9:8f:33:fa: 4a:39:39:ad:d7:fc:34:b6:31:ed:fa:62:79:e5:2b: 03:6b:6f:d2:67:d8:07:eb:13:9e:63:32:dc:11:c4: e4:cd:f8:13:f3:7b:84:80:dc:fb:8e:3d:1d:c7:66: 36:d9:ed:9a:9b:b3:d1:6c:53:d1:14:3b:a9:e0:a8: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D6:48:ED:A6:38:44:65:E1:7D:B5:84:2E:D8:03:E3:35:0B:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:93:92:b9:2d:52:2c:3a:41:6c:4c:00:d1:9b:d7:34:d5:8c: d5:57:a1:b8:5a:f0:40:d9:df:3c:38:75:0e:6c:08:2d:d2:ee: 86:50:8e:d2:00:f7:c3:5e:60:78:55:64:43:42:13:b4:96:6d: d5:d5:9c:aa:e7:ae:55:47:db:e2:cc:a2:62:b3:c0:4d:26:73: 52:62:06:0c:ec:ac:c6:eb:76:17:79:c6:95:81:b2:9d:27:90: 23:04:99:67:76:b3:69:42:db:35:0f:18:a1:ec:cd:23:81:6c: 41:cb:2e:1c:22:37:0f:77:41:2a:93:42:b2:49:09:de:0c:a0: 34:95:1b:48:a7:2e:89:14:97:e9:2e:0a:e0:0d:a6:33:20:4f: b4:d9:b1:72:ca:a6:bf:c8:89:90:13:8a:d0:1d:b4:5c:b2:24: f3:df:c2:e3:5b:e0:a2:64:0f:30:df:ba:f7:ea:38:19:32:94: f5:7a:b1:9c:7d:e6:f9:d4:9e:ae:c5:8d:96:da:62:c9:f3:f8: 2c:5d:ed:f2:63:c2:70:9a:77:88:07:cb:44:65:a9:e7:39:6c: 84:29:9d:09:0b:76:ab:6c:87:28:86:40:b8:7d:d2:ab:cc:6e: 3b:01:04:33:a9:20:c7:c9:09:09:42:bc:4b:13:ab:5d:0f:09: 98:ea:c4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rbw++f1oVFDC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YTcxOGYyOWUtYzg1Ni00NzljLWJmZjQtMzI1MTM3YTE4MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBtG0cTzWzqVJZdN+jW8crdxKs+AXqZzGv+6 LTXMGGBy7mVZ4CDS8mWzgq5if6acbqAwajnEpr8YygyToBTNKZOxwGPSy4BJXuz6 B9M5PFSdvuHmS0s8uSn2uEou+iryfWKk6KVY2sD7rB9oD5F4lbJ0Z6hOnApKBri6 GxZPqhirKAgpgglXGJokSyFPikbsVI2LrGyZuwDzsAqNz/8k+SYYvyq6Woc4tcxE i/gQapYq79AneO8IcuOYt3PUzsmPM/pKOTmt1/w0tjHt+mJ55SsDa2/SZ9gH6xOe YzLcEcTkzfgT83uEgNz7jj0dx2Y22e2am7PRbFPRFDup4KjYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzWSO2mOERl4X21hC7YA+M1CzjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY5ODg2OWEtYWZhMS0z ZGNhLWI2MDUtZmVlZTAxZWVhMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGTkrktUiw6QWxMANGb1zTVjNVXobha8EDZ3zw4dQ5sCC3S7oZQjtIA 98NeYHhVZENCE7SWbdXVnKrnrlVH2+LMomKzwE0mc1JiBgzsrMbrdhd5xpWBsp0n kCMEmWd2s2lC2zUPGKHszSOBbEHLLhwiNw93QSqTQrJJCd4MoDSVG0inLokUl+ku CuANpjMgT7TZsXLKpr/IiZATitAdtFyyJPPfwuNb4KJkDzDfuvfqOBkylPV6sZx9 5vnUnq7FjZbaYsnz+Cxd7fJjwnCad4gHy0Rlqec5bIQpnQkLdqtshyiGQLh90qvM bjsBBDOpIMfJCQlCvEsTq10PCZjqxHs= -----END CERTIFICATE-----Generated at Mon Nov 25 20:20:02 2024 by rpki-client on console-fra.rpki-client.org