$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa File: 3acbdecf-2bad-355c-af51-3f889069c5ed.roa (raw, json) Hash identifier: vkyKrTXtAGdkf+Sk8X0qqHb9xpA86aMepmudNKrpmto= Subject key identifier: 32:A2:0C:7D:58:78:0C:48:64:22:88:4B:69:F3:02:8F:D7:26:46:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479D76EC6748059F633E438940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.43.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ec:67:48:05:9f:63:3e:43:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=90259681-6138-47a4-96f3-a550f348f419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:bb:8b:b0:39:ca:30:67:ef:6f:de:26:a2: 8a:6b:1b:a8:96:a6:d2:9f:99:39:1a:01:09:08:9c: c5:00:b2:b8:be:b9:2c:40:ba:48:75:97:0b:96:53: 05:6f:06:f2:74:77:09:37:91:81:19:bc:a1:2d:2d: 06:34:bd:72:ce:12:0e:ab:f3:37:a0:4a:37:a6:c0: 31:c0:b2:02:16:e1:07:40:dd:e9:9d:25:42:6d:d2: 39:1a:ba:83:d0:1b:e5:ec:4a:c8:a1:c6:83:33:a3: 15:99:30:fb:4a:fc:12:a5:de:54:c7:77:81:ef:7a: ff:02:e5:6c:75:9b:84:95:96:fa:5a:99:2a:4f:5e: 2c:66:aa:76:c7:e9:00:22:21:4d:d4:3f:23:76:85: e7:30:8c:b0:93:51:af:d1:24:1d:8f:f5:c3:55:a3: bd:74:f9:76:2c:23:49:c6:4f:11:88:2d:f4:d5:2f: 9e:4c:34:6a:4e:97:2c:8f:a9:ae:a1:65:ad:c9:3e: e7:15:f0:e8:d3:29:57:a3:7e:ca:0c:b8:3c:c1:34: 12:1f:09:1c:36:2f:8c:85:c8:f0:9e:10:d4:9b:7e: ad:ea:2c:c8:a6:10:d9:29:f5:56:b7:4f:43:4c:a9: c3:36:62:19:46:0a:41:37:cb:1c:77:9c:6e:9a:ca: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A2:0C:7D:58:78:0C:48:64:22:88:4B:69:F3:02:8F:D7:26:46:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acbdecf-2bad-355c-af51-3f889069c5ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e2:28:c0:e3:3a:fb:a9:ac:16:de:58:18:46:c7:d6:c6:95: ac:d6:f4:17:8c:f0:05:8b:81:6a:5d:99:0d:b1:79:05:49:ef: 9f:cd:12:d7:86:4a:e3:60:0c:b9:9a:f4:c7:1c:10:12:60:d6: 6a:fd:96:fb:17:36:af:9a:58:86:92:05:fc:9a:7d:7b:53:04: ce:5e:bb:2a:2a:84:05:5a:18:3d:5f:e1:b9:f6:e3:29:bb:07: 9e:ba:01:f2:39:12:9d:d6:3f:8a:cd:07:2c:64:7a:af:e8:76: 35:f8:a4:2b:ac:a5:c0:cd:22:26:59:b2:c6:92:83:5b:02:93: c8:d9:50:73:7c:19:07:3d:47:11:d7:b0:ae:8c:ba:b6:5a:fc: 73:9d:fb:a7:5a:c4:e3:cd:eb:77:42:55:45:8c:7f:90:60:74: 30:62:cf:fa:fa:93:2c:a4:56:4b:3e:d9:d7:ad:5e:d8:17:58: 06:87:e2:9e:6f:3b:8a:79:cb:5c:9c:f4:21:1d:69:dc:60:7c: 7b:b5:4a:74:3c:2a:ae:c4:3a:77:11:19:2f:91:a1:84:be:e2: 6a:f2:7f:e9:c2:37:b7:8b:25:42:ac:78:32:ad:41:33:cb:0c: 2d:07:97:f8:92:63:8b:ee:a5:3a:dc:6f:c9:51:6c:3b:11:8f: e1:06:8f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduxnSAWfYz5DiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk OTAyNTk2ODEtNjEzOC00N2E0LTk2ZjMtYTU1MGYzNDhmNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqS7i7A5yjBn72/eJqKKaxuolqbSn5k5GgEJ CJzFALK4vrksQLpIdZcLllMFbwbydHcJN5GBGbyhLS0GNL1yzhIOq/M3oEo3psAx wLICFuEHQN3pnSVCbdI5GrqD0Bvl7ErIocaDM6MVmTD7SvwSpd5Ux3eB73r/AuVs dZuElZb6WpkqT14sZqp2x+kAIiFN1D8jdoXnMIywk1Gv0SQdj/XDVaO9dPl2LCNJ xk8RiC301S+eTDRqTpcsj6muoWWtyT7nFfDo0ylXo37KDLg8wTQSHwkcNi+Mhcjw nhDUm36t6izIphDZKfVWt09DTKnDNmIZRgpBN8scd5xumsqgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKiDH1YeAxIZCKIS2nzAo/XJkZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjYmRlY2YtMmJhZC0z NTVjLWFmNTEtM2Y4ODkwNjljNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEziKMDjOvuprBbeWBhGx9bGlazW9BeM8AWLgWpdmQ2xeQVJ75/NEteG SuNgDLma9MccEBJg1mr9lvsXNq+aWIaSBfyafXtTBM5euyoqhAVaGD1f4bn24ym7 B566AfI5Ep3WP4rNByxkeq/odjX4pCuspcDNIiZZssaSg1sCk8jZUHN8GQc9RxHX sK6MurZa/HOd+6daxOPN63dCVUWMf5BgdDBiz/r6kyykVks+2detXtgXWAaH4p5v O4p5y1yc9CEdadxgfHu1SnQ8Kq7EOncRGS+RoYS+4mryf+nCN7eLJUKseDKtQTPL DC0Hl/iSY4vupTrcb8lRbDsRj+EGjzk= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:13 2024 by rpki-client on console-fra.rpki-client.org