$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa File: 47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa (raw, json) Hash identifier: BJPeSP4/AGBn82FwP+Kvf4BsY50DRKZ1tNOWMPeLTHQ= Subject key identifier: 32:C2:97:6C:2A:4F:6C:A8:C7:85:7C:49:B4:26:F2:22:C9:EE:A7:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A04159260F618DEEDD59A040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.48.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:59:26:0f:61:8d:ee:dd:59:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=9cc92ad9-56c8-4703-87c3-cba677197c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:38:d5:79:34:9b:ec:9b:e3:f4:2f:49:ee: a5:c5:fa:36:86:5e:b2:82:4c:2b:7a:b6:22:63:e8: 26:57:15:3f:1c:f3:99:ee:45:ef:21:6c:25:b8:60: 45:4e:c7:b0:07:07:e5:ff:30:0e:f2:31:1d:d6:ed: 50:5d:f0:ba:ea:7c:51:cb:29:4d:f3:07:bf:f6:ad: 3b:32:7c:dc:37:c9:9b:03:f7:36:f2:8b:78:64:df: c0:08:22:f3:ef:eb:a4:a0:69:a4:37:a0:ce:83:e5: ca:40:be:3e:d8:b6:a1:94:7e:6b:82:14:a9:40:d5: 5f:5c:6d:26:ff:75:ee:4a:97:b1:ee:28:a1:3a:4a: 5f:51:91:ff:c4:78:44:21:71:bb:8c:20:f4:3b:ef: fc:e4:7c:27:3c:df:f3:fe:a6:52:ae:b3:90:1c:05: 69:a5:c9:de:96:f2:11:f1:e7:73:94:52:05:8f:7c: 08:46:fc:25:79:0e:c5:9f:f0:8f:4d:2c:73:9a:24: a7:fb:49:e6:1e:22:24:32:61:50:df:83:fc:65:98: 96:23:19:5e:6d:db:c4:49:c1:b0:35:c4:d8:a6:e9: 73:3b:ee:3c:aa:d7:2d:88:86:d8:2a:d6:a3:4c:37: 0b:09:38:0d:8b:74:19:6c:ed:84:20:48:9a:94:a4: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:97:6C:2A:4F:6C:A8:C7:85:7C:49:B4:26:F2:22:C9:EE:A7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47c2e2f8-4d86-3efb-b628-38cdf5cc2845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bc:29:31:6d:4f:c2:ff:4e:c2:a9:33:e4:20:3c:73:b0:da: bc:71:ea:61:da:c4:cd:58:ec:f4:5c:f3:bb:3c:0c:0f:9f:8b: 48:72:ea:17:32:5d:41:78:65:55:8e:40:7d:30:03:72:2d:e3: f3:4a:c7:97:2d:8e:be:d7:13:98:f5:d7:e7:f1:75:ef:b3:35: 8a:0e:bd:7a:fe:a7:63:7e:30:cd:cf:3b:8a:37:ec:d8:45:1b: e3:5a:9b:3a:e3:e9:69:9b:47:46:81:39:64:3d:d0:35:bb:7b: 7a:0f:fc:d5:06:51:7b:a0:60:28:9e:37:3e:d0:6e:b4:b9:e2: d2:57:bb:62:6b:95:03:d7:e2:d5:69:7d:d3:e1:56:8e:ac:05: 31:d1:20:e8:69:fa:7d:04:39:91:19:4f:28:85:ac:ed:a1:3c: 17:82:21:e0:b6:6a:b3:f7:3c:8c:6e:62:b1:ae:fe:a2:9d:a4: 00:9b:5c:9d:e0:b7:69:54:52:02:a7:5f:4b:24:a6:50:d7:01: 10:01:bc:1b:93:e0:af:ca:03:46:56:a6:c3:57:ba:92:81:8a: 67:32:8f:99:47:e1:f7:21:a9:a7:82:05:00:19:d6:c0:df:8f: ea:be:09:75:1a:48:e3:e2:6d:12:77:0c:85:e1:fe:97:d1:50: 41:77:83:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVkmD2GN7t1ZoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk OWNjOTJhZDktNTZjOC00NzAzLTg3YzMtY2JhNjc3MTk3YzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUU41Xk0m+yb4/QvSe6lxfo2hl6ygkwrerYi Y+gmVxU/HPOZ7kXvIWwluGBFTsewBwfl/zAO8jEd1u1QXfC66nxRyylN8we/9q07 MnzcN8mbA/c28ot4ZN/ACCLz7+ukoGmkN6DOg+XKQL4+2LahlH5rghSpQNVfXG0m /3XuSpex7iihOkpfUZH/xHhEIXG7jCD0O+/85HwnPN/z/qZSrrOQHAVppcnelvIR 8edzlFIFj3wIRvwleQ7Fn/CPTSxzmiSn+0nmHiIkMmFQ34P8ZZiWIxlebdvEScGw NcTYpulzO+48qtctiIbYKtajTDcLCTgNi3QZbO2EIEialKS9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLCl2wqT2yox4V8SbQm8iLJ7qfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdjMmUyZjgtNGQ4Ni0z ZWZiLWI2MjgtMzhjZGY1Y2MyODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW8KTFtT8L/TsKpM+QgPHOw2rxx6mHaxM1Y7PRc87s8DA+fi0hy6hcy XUF4ZVWOQH0wA3It4/NKx5ctjr7XE5j11+fxde+zNYoOvXr+p2N+MM3PO4o37NhF G+Namzrj6WmbR0aBOWQ90DW7e3oP/NUGUXugYCieNz7QbrS54tJXu2JrlQPX4tVp fdPhVo6sBTHRIOhp+n0EOZEZTyiFrO2hPBeCIeC2arP3PIxuYrGu/qKdpACbXJ3g t2lUUgKnX0skplDXARABvBuT4K/KA0ZWpsNXupKBimcyj5lH4fchqaeCBQAZ1sDf j+q+CXUaSOPibRJ3DIXh/pfRUEF3g8Q= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:43 2024 by rpki-client on console-fra.rpki-client.org