$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa File: 435db502-c2a0-3bd5-9acc-e02d8ff58032.roa (raw, json) Hash identifier: uDAbhU1f4kEdTEvlhERe3AIqfyoyQ2gReJKac0mw6w4= Subject key identifier: DB:77:73:8B:18:AE:6A:84:E1:B7:B8:C8:08:AC:25:9D:5C:2E:A5:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A100FA9D7ADFA4A21EEE20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16625 IP address blocks: 23.1.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a1:00:fa:9d:7a:df:a4:a2:1e:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=e939d954-680f-4d71-b0d3-46b6da8b6593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:6b:2c:76:19:d2:71:2a:d7:84:68:43:16: 46:fe:26:91:4f:c8:64:09:10:19:6e:cc:68:92:9e: aa:8a:0f:57:3f:05:b7:af:99:0a:0f:b6:31:5b:6a: f8:7c:0e:9e:04:73:94:78:c3:df:7a:19:ab:85:90: 29:87:f7:61:0f:e9:bb:1d:62:93:57:85:f3:3d:55: 8d:64:94:2a:cc:12:a0:9d:bf:c9:67:18:10:f7:bb: 6d:21:3d:77:da:61:83:21:92:ca:3b:b6:66:c0:e1: 46:3b:63:5f:b4:29:27:70:be:0b:f2:02:ec:95:f3: a6:f8:58:1b:46:db:24:e4:0a:72:7b:d3:a7:b0:8a: b0:f7:94:0f:c7:0a:6f:ea:97:6f:a8:97:c9:c7:34: f0:bf:d1:a3:93:31:74:86:d8:76:3f:87:2d:ef:a8: 90:fc:a0:ff:41:7c:bb:03:a4:0d:12:7c:e5:04:58: 39:fb:02:e4:0f:e9:3e:b3:5d:ff:6c:5b:12:dd:98: c1:c5:bd:58:2f:82:a8:e0:60:99:b0:51:71:6d:9c: 95:d0:c8:4c:a4:05:3c:e1:bd:b7:b6:02:a9:73:12: 10:00:f4:80:d3:5a:30:44:53:9c:96:5c:c1:bd:55: d2:62:86:44:34:1e:e5:c0:a1:a8:5d:22:f8:7f:75: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:73:8B:18:AE:6A:84:E1:B7:B8:C8:08:AC:25:9D:5C:2E:A5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:be:f0:9e:b4:c9:91:4a:fa:e2:07:5f:ad:6d:d4:cb:71: 56:fb:73:eb:dd:c9:44:9a:67:03:e0:38:01:6d:1b:cd:d0:ce: c2:21:12:63:06:ca:cd:41:cd:a3:22:23:bf:59:a5:ca:00:41: 64:ca:04:76:50:59:1e:1d:09:f6:e6:39:5b:e6:ec:92:a6:08: 88:93:53:58:94:98:c1:81:44:eb:d3:3a:a2:00:2e:cf:8f:19: cb:b7:0d:d6:20:da:2c:80:e9:24:1d:db:74:65:f0:1e:f5:08: 70:bd:b8:2c:d2:1f:68:08:4d:3c:66:22:ff:cb:e4:b9:e9:3e: ee:23:fb:de:0b:9d:ac:77:b8:51:97:3b:43:c4:f3:33:22:11: 24:90:ed:d4:19:5c:7f:a0:39:80:eb:1b:49:56:1f:15:49:ea: 73:ce:91:5b:a1:50:03:0a:e1:1b:ad:f4:d7:92:ee:4d:7f:93: d7:cc:5a:77:64:f0:e1:fb:7c:00:b6:69:a0:81:b6:02:7e:30: 6b:ba:69:16:fb:27:96:79:5e:fc:3d:f1:7f:b9:87:cf:1e:15: 3c:03:df:fa:eb:44:69:32:bb:ae:dc:0c:40:20:79:c4:76:4c: 61:6c:cb:4a:3e:79:40:5f:2e:e8:31:79:4c:7a:63:45:34:f2: 65:e8:6e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloQD6nXrfpKIe7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk ZTkzOWQ5NTQtNjgwZi00ZDcxLWIwZDMtNDZiNmRhOGI2NTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1rLHYZ0nEq14RoQxZG/iaRT8hkCRAZbsxo kp6qig9XPwW3r5kKD7YxW2r4fA6eBHOUeMPfehmrhZAph/dhD+m7HWKTV4XzPVWN ZJQqzBKgnb/JZxgQ97ttIT132mGDIZLKO7ZmwOFGO2NftCkncL4L8gLslfOm+Fgb Rtsk5Apye9OnsIqw95QPxwpv6pdvqJfJxzTwv9GjkzF0hth2P4ct76iQ/KD/QXy7 A6QNEnzlBFg5+wLkD+k+s13/bFsS3ZjBxb1YL4Ko4GCZsFFxbZyV0MhMpAU84b23 tgKpcxIQAPSA01owRFOcllzBvVXSYoZENB7lwKGoXSL4f3UG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt3c4sYrmqE4be4yAisJZ1cLqUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM1ZGI1MDItYzJhMC0z YmQ1LTlhY2MtZTAyZDhmZjU4MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRpvvCetMmRSvriB1+tbdTLcVb7c+vdyUSaZwPgOAFtG83QzsIhEmMG ys1BzaMiI79ZpcoAQWTKBHZQWR4dCfbmOVvm7JKmCIiTU1iUmMGBROvTOqIALs+P Gcu3DdYg2iyA6SQd23Rl8B71CHC9uCzSH2gITTxmIv/L5LnpPu4j+94Lnax3uFGX O0PE8zMiESSQ7dQZXH+gOYDrG0lWHxVJ6nPOkVuhUAMK4Rut9NeS7k1/k9fMWndk 8OH7fAC2aaCBtgJ+MGu6aRb7J5Z5Xvw98X+5h88eFTwD3/rrRGkyu67cDEAgecR2 TGFsy0o+eUBfLugxeUx6Y0U08mXobm0= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:16 2024 by rpki-client on console-fra.rpki-client.org