$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa File: 4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa (raw, json) Hash identifier: o6dEHwuDMhy7nPGa9EdpcOnlrM7VRtcTjPZmQgV7Zr8= Subject key identifier: 51:44:D6:21:54:7F:8F:56:9A:9C:A5:56:27:46:4C:B2:A9:94:48:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CDFDBB6E974FA3827D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.222.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cd:fd:bb:6e:97:4f:a3:82:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=29032226-0b7f-4608-ba28-15e4bc7888e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:6a:f7:5b:4b:e4:e8:d0:46:ea:61:68:74: 2e:2e:5c:4b:ac:48:c2:25:00:a3:7d:e5:ee:5a:bb: b0:60:b6:92:1e:ba:ea:db:fa:5a:30:bc:77:ce:cc: fa:33:98:d4:7c:d0:a0:a3:b5:da:ae:84:08:19:70: b1:b7:16:f4:02:55:ea:97:73:5c:d2:80:41:92:f2: 90:7e:a5:b1:8c:f3:ec:18:14:dc:bf:4f:a7:80:bc: 65:4a:5f:d6:bb:34:04:80:46:c5:ec:da:a4:8e:66: 67:00:04:7e:6c:90:09:95:ab:4a:96:1a:93:44:15: a2:09:d6:1a:9c:91:76:90:e6:3b:97:2b:4d:94:69: fa:fd:a1:cc:92:76:90:1f:f8:c3:f5:60:7a:6c:ea: c8:5a:40:37:cb:51:bb:f9:7a:58:d4:ff:2f:e2:fe: 43:8f:39:c9:a1:80:5c:d7:05:9d:f2:a0:cf:8e:08: f8:9a:78:d6:a9:ad:08:70:1a:e2:8c:d1:4b:47:a5: 4e:42:87:16:f4:3c:94:a3:12:03:32:39:97:11:47: c3:2c:4a:b7:cd:1b:dd:25:9c:2d:1c:ba:f9:e0:41: 08:3c:20:28:da:85:49:06:04:d4:b3:57:de:d4:bf: 63:09:01:27:1c:cc:cd:31:08:36:9b:9f:67:39:50: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:44:D6:21:54:7F:8F:56:9A:9C:A5:56:27:46:4C:B2:A9:94:48:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ef:d5:a6:c6:27:71:b5:7f:d7:8f:33:1f:d0:93:e1:56:4f: 56:c3:08:4e:8d:f2:a7:37:27:59:c4:df:31:e8:95:04:c2:1f: f5:6a:cb:8a:2a:e2:98:27:89:bd:0f:58:44:b7:c6:cb:21:fd: 53:8b:f8:2a:75:f7:8d:92:67:96:49:22:17:a3:17:cc:86:0d: 3f:30:78:a0:11:fe:07:4c:f3:39:80:e2:53:30:1d:c3:80:14: f0:02:6a:de:46:e4:75:14:ed:a2:51:dc:b3:61:38:fb:0e:91: 27:97:eb:dc:7b:96:57:e2:e9:86:5e:0e:0e:ca:5e:ff:2b:25: 0f:0e:dd:91:25:0a:85:de:92:71:0c:0f:3c:2a:00:21:5a:4f: f6:37:ed:8d:49:f3:a6:a4:64:8a:73:fd:76:f0:36:3c:b4:68: cf:e6:b1:9f:8e:15:82:f1:25:ba:f1:ef:29:1e:9a:92:50:38: 5c:5a:da:d0:5f:a4:70:5b:28:fc:16:71:95:83:8d:ea:1d:be: b2:4e:6d:24:7b:3c:1c:79:e2:f0:88:a1:5b:9d:cd:26:a1:0e: ae:ba:6e:f3:e7:5b:86:1a:1f:4f:b7:ca:db:03:6a:0c:fe:21: 5c:89:f6:04:de:d5:35:2e:91:d6:ff:0f:e3:68:40:b0:0f:b0: e1:2f:91:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJM39u26XT6OCfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MjkwMzIyMjYtMGI3Zi00NjA4LWJhMjgtMTVlNGJjNzg4OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtVq91tL5OjQRuphaHQuLlxLrEjCJQCjfeXu WruwYLaSHrrq2/paMLx3zsz6M5jUfNCgo7XaroQIGXCxtxb0AlXql3Nc0oBBkvKQ fqWxjPPsGBTcv0+ngLxlSl/WuzQEgEbF7NqkjmZnAAR+bJAJlatKlhqTRBWiCdYa nJF2kOY7lytNlGn6/aHMknaQH/jD9WB6bOrIWkA3y1G7+XpY1P8v4v5DjznJoYBc 1wWd8qDPjgj4mnjWqa0IcBrijNFLR6VOQocW9DyUoxIDMjmXEUfDLEq3zRvdJZwt HLr54EEIPCAo2oVJBgTUs1fe1L9jCQEnHMzNMQg2m59nOVCS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFE1iFUf49WmpylVidGTLKplEg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE1OGViOWMtMjUzMC0z MDViLThhNGEtZmMyNThiYTExZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfv1abGJ3G1f9ePMx/Qk+FWT1bDCE6N8qc3J1nE3zHolQTCH/Vqy4oq 4pgnib0PWES3xssh/VOL+Cp1942SZ5ZJIhejF8yGDT8weKAR/gdM8zmA4lMwHcOA FPACat5G5HUU7aJR3LNhOPsOkSeX69x7llfi6YZeDg7KXv8rJQ8O3ZElCoXeknEM DzwqACFaT/Y37Y1J86akZIpz/XbwNjy0aM/msZ+OFYLxJbrx7ykempJQOFxa2tBf pHBbKPwWcZWDjeodvrJObSR7PBx54vCIoVudzSahDq66bvPnW4YaH0+3ytsDagz+ IVyJ9gTe1TUukdb/D+NoQLAPsOEvkdg= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:40 2024 by rpki-client on console-fra.rpki-client.org