$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa File: 3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa (raw, json) Hash identifier: SKF9C+KEK8VsX15BWLuHvX0JK7EcLyJDUAse7qwduKA= Subject key identifier: B9:C5:B2:CF:48:59:A3:CB:72:94:CB:A7:2E:28:67:DF:CA:2F:A5:9E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFC7AFC139DE6E854C200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.39.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fc:7a:fc:13:9d:e6:e8:54:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=7164460d-08ce-44a1-9905-41e4ce835926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:9c:a7:27:2c:88:f9:4b:92:b2:bc:b4:17: 61:ae:ae:8c:7f:52:5e:da:07:5e:f4:c5:5b:8d:24: fc:6d:0c:1b:06:3d:95:79:49:70:8f:af:25:4d:46: 81:09:a1:32:b7:cb:97:ed:d7:3e:af:8a:63:ae:a1: 7d:e3:5e:6e:d5:35:3a:2c:09:83:01:ca:a1:c7:44: 3a:ea:11:c5:bc:9e:c0:26:72:fc:be:76:84:15:7e: 9c:12:1f:24:47:10:cf:54:fa:1e:de:d6:40:1f:15: 58:f4:49:25:00:2e:6d:40:7a:97:c0:4a:36:8b:7b: 16:81:34:d2:42:96:e9:8d:0c:fd:68:02:77:0c:b0: de:0d:38:b5:65:50:71:52:ad:da:bd:72:1c:7b:f5: a2:b9:76:16:27:4f:87:d1:f1:90:0e:cb:00:e9:31: 72:b4:44:da:bc:b0:82:00:61:93:f3:58:9a:28:70: 2c:27:3f:f0:e6:fa:37:59:1f:be:d2:53:61:bc:d6: fa:f2:05:60:61:f9:50:dd:82:4f:a7:3d:30:a6:de: b4:8a:15:80:4b:d6:60:d9:10:a2:ec:82:e7:88:f5: 44:9c:4e:55:cf:34:18:62:9b:f4:fb:cc:fb:be:09: 70:cc:de:a8:3e:e9:6a:43:e5:e3:56:7e:54:cd:f4: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:B2:CF:48:59:A3:CB:72:94:CB:A7:2E:28:67:DF:CA:2F:A5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c4:f1:ee:8d:89:56:ac:95:84:75:07:31:23:f8:45:a7:1a: 96:46:75:f8:4f:d7:d3:03:a9:95:87:3e:51:47:d2:7b:b5:11: 72:a8:cf:02:b0:f3:e3:5f:96:15:9b:c2:57:0a:34:ae:59:91: d4:b7:1d:db:40:27:ad:fb:75:c7:af:09:2a:2c:82:fa:61:c4: 2c:31:94:2a:4b:49:2d:09:98:05:c5:d6:7c:fb:38:63:f5:57: a6:83:22:07:5e:29:45:4a:89:09:9a:56:2c:74:26:d2:83:23: 8d:e9:ce:a8:50:04:94:6e:a4:c4:ce:38:29:86:90:1e:83:8f: 69:60:4e:3a:6c:78:82:2a:56:1d:e3:e4:49:0f:a0:84:62:42: 9b:6a:ad:00:ea:31:02:4b:fe:04:a7:e4:84:c9:19:0f:76:a3: 3c:29:a0:66:fe:45:b7:71:c8:c7:24:a0:cf:00:65:53:2a:e5: dd:17:08:bb:e6:03:7f:2e:24:85:36:57:e9:2f:5d:77:ed:39: a9:af:7d:f0:4c:df:25:db:23:96:5f:01:da:26:9f:d3:11:9a: 0b:89:dd:52:92:73:26:2f:71:0d:8b:6d:d5:44:23:51:a4:64: a8:c0:2e:3a:92:f3:38:00:00:0e:69:05:ad:36:80:c5:89:40: 90:44:c0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/x6/BOd5uhUwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NzE2NDQ2MGQtMDhjZS00NGExLTk5MDUtNDFlNGNlODM1OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqWcpycsiPlLkrK8tBdhrq6Mf1Je2gde9MVb jST8bQwbBj2VeUlwj68lTUaBCaEyt8uX7dc+r4pjrqF9415u1TU6LAmDAcqhx0Q6 6hHFvJ7AJnL8vnaEFX6cEh8kRxDPVPoe3tZAHxVY9EklAC5tQHqXwEo2i3sWgTTS QpbpjQz9aAJ3DLDeDTi1ZVBxUq3avXIce/WiuXYWJ0+H0fGQDssA6TFytETavLCC AGGT81iaKHAsJz/w5vo3WR++0lNhvNb68gVgYflQ3YJPpz0wpt60ihWAS9Zg2RCi 7ILniPVEnE5VzzQYYpv0+8z7vglwzN6oPulqQ+XjVn5UzfQCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnFss9IWaPLcpTLpy4oZ9/KL6WeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RkYjE1ZWYtZDhhOC0z NzI4LWE3NjQtNGRjYThiOTI2MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbE8e6NiVaslYR1BzEj+EWnGpZGdfhP19MDqZWHPlFH0nu1EXKozwKw 8+NflhWbwlcKNK5ZkdS3HdtAJ637dcevCSosgvphxCwxlCpLSS0JmAXF1nz7OGP1 V6aDIgdeKUVKiQmaVix0JtKDI43pzqhQBJRupMTOOCmGkB6Dj2lgTjpseIIqVh3j 5EkPoIRiQptqrQDqMQJL/gSn5ITJGQ92ozwpoGb+RbdxyMckoM8AZVMq5d0XCLvm A38uJIU2V+kvXXftOamvffBM3yXbI5ZfAdomn9MRmguJ3VKScyYvcQ2LbdVEI1Gk ZKjALjqS8zgAAA5pBa02gMWJQJBEwEk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:32 2024 by rpki-client on console-fra.rpki-client.org