$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa File: 3454a8c0-e93d-3329-adaa-f853757f636f.roa (raw, json) Hash identifier: oRlAMKkbwz4AMCQcRnIzRMhlDqAiPvSsIB/cXCAuz8w= Subject key identifier: 95:E8:40:17:B3:C4:D4:AC:B1:95:5F:26:58:40:28:71:98:12:49:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B101799EEDD806B145F41580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 24319 IP address blocks: 23.200.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:79:9e:ed:d8:06:b1:45:f4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=3c5c965a-1c7f-456c-8d90-3badd3fd5ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:52:10:b9:0d:7c:46:ad:68:ad:13:df:82: 06:5f:aa:27:64:08:5f:df:b0:70:4f:0a:03:6e:23: da:47:bc:90:62:05:83:56:f6:e5:be:c6:aa:7d:42: d8:79:c5:c8:96:4c:14:e0:2d:12:0e:53:77:52:09: 10:3c:2e:46:1b:26:1d:01:3c:d6:c6:90:92:86:ff: 25:6e:4c:55:be:a5:0b:bb:ea:84:1a:62:3e:7a:1f: 8c:1b:65:18:c6:c5:94:a5:ea:ba:35:75:b5:a7:fb: 29:9b:79:0f:63:33:3f:f3:f4:e3:fe:11:e9:69:3f: b1:22:9d:ac:a3:f8:8d:70:9e:c1:98:2b:ef:24:27: 19:18:79:c6:2a:0f:b7:05:d6:ca:83:d9:62:9e:e5: 1e:d5:c7:d7:05:51:42:11:27:be:d2:80:56:c6:2f: ed:ed:3d:32:1d:6d:a7:5b:08:ac:bf:fc:ea:e4:17: c1:f6:6a:79:72:7b:90:1a:b8:94:9d:35:a4:74:d5: 3f:89:c8:1d:89:8d:dc:49:17:f4:fc:eb:c3:fb:d0: ae:42:b0:b8:47:be:31:61:0c:99:bd:a1:d1:eb:be: 8e:1e:70:79:1b:41:05:29:04:04:a2:d5:0e:a3:80: d3:10:a5:a9:68:98:fd:1c:72:3b:47:df:2f:5a:08: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:40:17:B3:C4:D4:AC:B1:95:5F:26:58:40:28:71:98:12:49:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3454a8c0-e93d-3329-adaa-f853757f636f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d7:10:01:b9:9c:fc:63:56:19:60:77:a7:78:69:ec:ac:4d: 44:f4:fa:66:a7:d4:f5:07:3a:ed:71:88:cd:f7:48:65:91:80: 44:fd:ba:f3:af:06:51:12:af:cb:e0:02:4a:f6:02:3d:b7:8e: d3:ee:66:62:f6:3f:23:ee:5d:d7:44:57:4d:42:33:42:5d:7a: 4d:47:5d:c5:00:64:1e:b2:61:e4:47:19:e6:54:ec:fc:f7:16: d3:09:27:8d:86:c7:1c:df:bc:ea:ec:1e:02:2d:c2:b8:12:28: 46:56:f3:8a:bd:47:07:2d:4c:d9:fc:c9:ad:d5:30:d4:a8:cd: 13:69:27:14:d1:a8:58:b0:98:1d:90:ad:87:fc:73:64:df:49: 5e:a0:bd:78:8c:10:2f:63:4a:63:36:bb:2c:6c:d1:6c:60:4f: 5e:05:90:f4:b8:81:8c:c7:17:8f:0d:68:04:c9:35:ef:c5:c7: 26:26:a4:ce:d8:5f:44:9a:88:7e:71:dc:2e:0a:dc:28:50:b8: 65:e2:e3:52:6d:4a:cb:96:fe:22:a5:62:d7:69:5d:94:5d:ea: 4f:dc:f8:00:71:e6:97:5f:17:35:0c:36:ef:31:fa:18:4d:70: 97:2c:75:9f:13:4c:40:81:24:25:39:4b:98:b4:41:a6:c3:83: 7e:c3:dc:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAXme7dgGsUX0FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk M2M1Yzk2NWEtMWM3Zi00NTZjLThkOTAtM2JhZGQzZmQ1YWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmNSELkNfEataK0T34IGX6onZAhf37BwTwoD biPaR7yQYgWDVvblvsaqfULYecXIlkwU4C0SDlN3UgkQPC5GGyYdATzWxpCShv8l bkxVvqULu+qEGmI+eh+MG2UYxsWUpeq6NXW1p/spm3kPYzM/8/Tj/hHpaT+xIp2s o/iNcJ7BmCvvJCcZGHnGKg+3BdbKg9linuUe1cfXBVFCESe+0oBWxi/t7T0yHW2n Wwisv/zq5BfB9mp5cnuQGriUnTWkdNU/icgdiY3cSRf0/OvD+9CuQrC4R74xYQyZ vaHR676OHnB5G0EFKQQEotUOo4DTEKWpaJj9HHI7R98vWgjS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXoQBezxNSssZVfJlhAKHGYEknsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ1NGE4YzAtZTkzZC0z MzI5LWFkYWEtZjg1Mzc1N2Y2MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7XEAG5nPxjVhlgd6d4aeysTUT0+man1PUHOu1xiM33SGWRgET9uvOv BlESr8vgAkr2Aj23jtPuZmL2PyPuXddEV01CM0Jdek1HXcUAZB6yYeRHGeZU7Pz3 FtMJJ42GxxzfvOrsHgItwrgSKEZW84q9RwctTNn8ya3VMNSozRNpJxTRqFiwmB2Q rYf8c2TfSV6gvXiMEC9jSmM2uyxs0WxgT14FkPS4gYzHF48NaATJNe/FxyYmpM7Y X0SaiH5x3C4K3ChQuGXi41JtSsuW/iKlYtdpXZRd6k/c+ABx5pdfFzUMNu8x+hhN cJcsdZ8TTECBJCU5S5i0QabDg37D3DE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:26:44 2024 by rpki-client on console-fra.rpki-client.org