$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa File: 485ec3cc-860d-3b81-89dc-d8272b9a496c.roa (raw, json) Hash identifier: 45YnUxM0DPSqyw/7BmyNEuLmsImg2ArFFjzZOfaLds8= Subject key identifier: 54:4A:93:2D:DC:C9:2A:21:39:7B:0F:E1:F9:57:62:EC:78:90:30:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C8D9FD4C3CDB5DC802A731C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 16625 IP address blocks: 23.201.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:fd:4c:3c:db:5d:c8:02:a7:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=17f7a5b5-3f26-4223-b65c-c1a8b99bb1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:5c:9c:f5:e0:fb:17:4f:e1:a8:c1:0e:45: 15:07:74:43:85:3c:0a:ee:db:50:55:e4:7d:98:ab: 80:55:f8:5d:d3:96:9b:99:f7:03:1a:58:16:34:cd: c0:8c:af:81:bd:d8:1c:e4:80:77:67:f6:c4:d1:36: 23:57:9b:d3:2e:ea:05:d8:a0:52:4d:98:75:5f:f8: 42:8c:02:d9:50:10:b9:81:ee:27:07:a6:6d:ae:60: a5:7d:e8:11:b3:9f:4e:c6:7b:01:4e:3c:b7:be:86: 05:f5:5e:a9:31:8e:e5:54:2a:87:46:8e:f7:ce:5f: 4a:6f:a7:ee:e6:6d:4d:ff:ae:71:3a:3d:bf:97:2c: 07:47:50:de:7f:2d:47:7c:e3:9d:83:3a:d8:49:38: ef:a9:bc:f7:2b:c3:39:34:cd:66:d1:df:35:ad:89: 06:e2:35:f3:08:22:19:cb:04:6e:7b:d7:50:5f:f4: fc:7b:ba:9f:cc:bd:5c:f7:6a:d9:73:ff:86:35:51: 12:11:c3:b3:3a:cc:0b:3d:7c:95:d0:0b:35:38:3d: 7e:34:56:16:fd:e1:d0:48:99:d8:f7:6a:e6:a0:00: cc:15:a4:3f:4d:bf:9e:a3:7d:62:66:05:2b:59:4a: 48:2e:6c:c0:9f:70:d3:11:5b:3c:73:f2:4a:dc:a3: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:93:2D:DC:C9:2A:21:39:7B:0F:E1:F9:57:62:EC:78:90:30:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/485ec3cc-860d-3b81-89dc-d8272b9a496c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9f:60:a6:cd:2b:4f:55:be:36:aa:80:af:e6:07:a1:22:6b: a7:74:9e:7a:16:99:4a:fb:2d:30:20:59:19:69:28:e0:14:b2: d5:ac:3c:34:4a:b9:4f:67:6d:37:61:f7:0b:2d:cf:8b:57:e2: 30:33:59:ae:f7:75:3e:a5:22:7e:ca:a7:f6:b2:a3:06:c2:87: 2d:a9:28:6e:fa:44:51:a2:ef:84:24:2a:f5:10:0d:70:56:84: eb:e6:11:16:25:21:20:ed:49:bf:07:30:be:9e:96:4a:cc:13: dd:4b:5f:b6:5b:03:d0:de:2b:94:a1:3d:c5:af:5b:7c:e7:dd: a4:53:4f:e3:24:fe:d3:6b:ad:38:b8:b5:9a:1c:d9:2a:a0:9a: 22:50:65:00:9d:35:92:72:e7:10:1e:25:a0:fe:a3:f9:2c:d4: e4:1a:d2:80:7a:74:9c:b5:92:45:e4:90:8a:0e:35:c6:01:f4: 85:91:73:97:30:67:33:e9:39:0d:cf:31:55:95:72:e8:74:37: 02:aa:44:28:e9:f6:06:7a:92:cb:e1:ec:59:fa:13:0f:4f:75: 0e:c4:b4:61:0b:a4:5c:33:6d:34:39:ea:b7:86:29:12:2b:d9: 4b:aa:16:4a:51:c3:ee:24:c4:bb:0d:82:41:db:ac:10:4c:31: b9:73:e5:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2f1MPNtdyAKnMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk MTdmN2E1YjUtM2YyNi00MjIzLWI2NWMtYzFhOGI5OWJiMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy9cnPXg+xdP4ajBDkUVB3RDhTwK7ttQVeR9 mKuAVfhd05abmfcDGlgWNM3AjK+Bvdgc5IB3Z/bE0TYjV5vTLuoF2KBSTZh1X/hC jALZUBC5ge4nB6ZtrmClfegRs59OxnsBTjy3voYF9V6pMY7lVCqHRo73zl9Kb6fu 5m1N/65xOj2/lywHR1Defy1HfOOdgzrYSTjvqbz3K8M5NM1m0d81rYkG4jXzCCIZ ywRue9dQX/T8e7qfzL1c92rZc/+GNVESEcOzOswLPXyV0As1OD1+NFYW/eHQSJnY 92rmoADMFaQ/Tb+eo31iZgUrWUpILmzAn3DTEVs8c/JK3KPe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRKky3cySohOXsP4flXYux4kDCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg1ZWMzY2MtODYwZC0z YjgxLTg5ZGMtZDgyNzJiOWE0OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACifYKbNK09VvjaqgK/mB6Eia6d0nnoWmUr7LTAgWRlpKOAUstWsPDRK uU9nbTdh9wstz4tX4jAzWa73dT6lIn7Kp/ayowbChy2pKG76RFGi74QkKvUQDXBW hOvmERYlISDtSb8HML6elkrME91LX7ZbA9DeK5ShPcWvW3zn3aRTT+Mk/tNrrTi4 tZoc2SqgmiJQZQCdNZJy5xAeJaD+o/ks1OQa0oB6dJy1kkXkkIoONcYB9IWRc5cw ZzPpOQ3PMVWVcuh0NwKqRCjp9gZ6ksvh7Fn6Ew9PdQ7EtGELpFwzbTQ56reGKRIr 2UuqFkpRw+4kxLsNgkHbrBBMMblz5VI= -----END CERTIFICATE-----Generated at Mon Nov 25 20:20:24 2024 by rpki-client on console-fra.rpki-client.org