$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c633913-4dc1-3026-b6b6-0b19c12e26c4.roa File: 3c633913-4dc1-3026-b6b6-0b19c12e26c4.roa (raw, json) Hash identifier: X1p95HaRSCnHtD8y9ft7R2YN8nS5AfPM1EvuEWOEIgA= Subject key identifier: 71:A6:9E:EE:F8:39:24:A9:79:6A:5E:9A:F8:9C:83:58:AC:FC:85:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473E6501EE2E628B76280E5D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c633913-4dc1-3026-b6b6-0b19c12e26c4.roa Signing time: Tue 17 Sep 2024 11:43:35 +0000 ROA not before: Tue 17 Sep 2024 11:43:35 +0000 ROA not after: Mon 16 Dec 2024 12:43:35 +0000 asID: 16625 IP address blocks: 23.215.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3e:65:01:ee:2e:62:8b:76:28:0e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 11:43:35 2024 GMT Not After : Dec 16 12:43:35 2024 GMT Subject: CN=0fd56ff6-e0ab-41c3-b367-13a61529b8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:af:da:d1:0b:83:fb:7e:46:5a:4f:7a:26: 88:24:e8:7f:4c:4e:a3:cb:95:a8:e9:79:8e:c4:c2: 86:a4:99:c7:cb:7d:b0:ed:db:b6:b2:71:24:bb:7f: ce:b1:c0:4c:e6:a3:33:73:53:e0:42:e0:df:73:00: 36:44:ad:8d:cf:17:f2:d8:d4:a9:06:c6:cf:79:95: 83:4d:1b:97:0c:0c:7d:33:b8:80:3e:5e:81:a0:71: 55:b3:63:d7:33:33:0a:55:a2:4f:11:9b:d5:09:3d: da:ec:be:56:17:f1:06:a5:f9:e5:4e:83:f5:f6:37: 26:27:7e:c1:ad:a5:5b:4b:5c:df:da:59:51:01:25: fb:68:aa:df:9c:a9:d9:79:c8:27:67:83:18:a8:28: 69:ef:cb:9e:c4:18:4f:51:48:07:4c:99:c1:66:93: a1:22:9f:34:53:45:88:18:4e:f5:4b:1d:15:0d:38: c5:48:38:29:aa:73:6a:ff:10:88:e4:db:18:90:e4: fb:d4:c7:36:54:86:02:1d:36:df:fe:fe:b2:35:4a: 00:a3:d6:d3:0c:ba:a2:59:8a:dd:49:c9:20:9c:0a: e8:93:77:2e:a7:49:1b:d5:8d:3a:15:3f:07:84:88: a3:25:64:34:0f:a6:89:d2:9f:48:13:6e:64:18:21: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:9E:EE:F8:39:24:A9:79:6A:5E:9A:F8:9C:83:58:AC:FC:85:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c633913-4dc1-3026-b6b6-0b19c12e26c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:32:96:01:f5:35:eb:0f:a9:76:43:67:2f:39:f0:39:cb:96: c0:29:77:c9:be:82:fb:62:9a:36:47:b7:b9:e2:64:c3:3c:e9: 03:be:a6:70:37:95:44:f2:d6:fe:0d:75:e5:bc:f2:e0:b1:1e: dd:d5:19:0c:f0:2f:df:d3:78:47:19:24:e8:91:b1:d9:0f:95: 25:61:f4:57:40:cd:50:9f:24:ae:b3:fb:5d:df:25:66:87:02: 3e:b4:03:e5:b7:01:d8:aa:d4:07:89:6b:4e:71:2b:9c:2c:6d: 81:82:79:52:1c:b1:8a:6b:57:7d:16:f7:6c:79:03:24:98:ae: 30:8f:25:bc:8b:66:c6:8f:59:ce:e6:70:f1:24:b8:b2:8b:d4: 48:e2:d4:cf:5e:a8:ad:ca:97:df:e3:90:c7:3a:8f:a4:1b:62: fd:9a:7b:04:b0:61:75:aa:32:91:88:7e:d5:29:db:ce:a0:32: 3f:ad:a0:59:55:2a:e0:8a:e9:f6:35:95:6a:18:c5:1a:fa:7a: fa:c6:61:0c:51:4b:01:00:6f:9d:8c:f4:96:bd:8d:fc:6d:54: ae:26:a9:1d:5b:de:cf:5a:54:29:67:29:9b:bb:22:0e:a4:3f: 41:c9:1c:e0:1b:a3:97:5d:08:94:3f:14:35:a5:5c:b1:2f:4a: cc:ee:c0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc+ZQHuLmKLdigOXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNzExNDMzNVoXDTI0MTIxNjEyNDMzNVowLzEtMCsGA1UEAxMk MGZkNTZmZjYtZTBhYi00MWMzLWIzNjctMTNhNjE1MjliOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTiv2tELg/t+RlpPeiaIJOh/TE6jy5Wo6XmO xMKGpJnHy32w7du2snEku3/OscBM5qMzc1PgQuDfcwA2RK2Nzxfy2NSpBsbPeZWD TRuXDAx9M7iAPl6BoHFVs2PXMzMKVaJPEZvVCT3a7L5WF/EGpfnlToP19jcmJ37B raVbS1zf2llRASX7aKrfnKnZecgnZ4MYqChp78uexBhPUUgHTJnBZpOhIp80U0WI GE71Sx0VDTjFSDgpqnNq/xCI5NsYkOT71Mc2VIYCHTbf/v6yNUoAo9bTDLqiWYrd SckgnArok3cup0kb1Y06FT8HhIijJWQ0D6aJ0p9IE25kGCHw9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGmnu74OSSpeWpemvicg1is/IVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M2MzM5MTMtNGRjMS0z MDI2LWI2YjYtMGIxOWMxMmUyNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9esMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0ylgH1NesPqXZDZy858DnLlsApd8m+gvtimjZHt7niZMM86QO+pnA3 lUTy1v4NdeW88uCxHt3VGQzwL9/TeEcZJOiRsdkPlSVh9FdAzVCfJK6z+13fJWaH Aj60A+W3Adiq1AeJa05xK5wsbYGCeVIcsYprV30W92x5AySYrjCPJbyLZsaPWc7m cPEkuLKL1Eji1M9eqK3Kl9/jkMc6j6QbYv2aewSwYXWqMpGIftUp286gMj+toFlV KuCK6fY1lWoYxRr6evrGYQxRSwEAb52M9Ja9jfxtVK4mqR1b3s9aVClnKZu7Ig6k P0HJHOAbo5ddCJQ/FDWlXLEvSszuwJM= -----END CERTIFICATE-----Generated at Mon Nov 25 20:20:14 2024 by rpki-client on console-fra.rpki-client.org