$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa File: 4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa (raw, json) Hash identifier: lTOuReL1ljNDNNDtZdhb2ARLnCnbJuiiFIkgzq7lKss= Subject key identifier: 17:49:3D:B2:34:BD:FD:9B:BD:3F:D2:1B:29:55:3D:07:E9:75:A1:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF67142F1C44891A96ABA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.35.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:71:42:f1:c4:48:91:a9:6a:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=af2e7b48-03e6-45e4-8845-619d0f754ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:59:22:aa:cb:23:2c:53:3a:eb:8a:81:dd: 02:4e:fe:70:b2:92:0b:f1:7b:bf:9d:64:f0:71:4c: eb:2d:6f:82:7a:86:4b:2d:50:1c:67:6a:0c:ac:55: 74:01:20:d5:fc:f9:f1:73:7b:79:e4:62:0c:57:e9: c8:94:d4:96:0a:aa:99:e7:34:c2:50:eb:ac:90:71: 4d:f6:64:ed:cf:66:b1:2f:ea:c2:f3:68:01:15:29: fa:00:b3:99:84:9f:71:62:fc:aa:0e:31:28:77:d4: b2:fa:f4:5d:e4:8d:c8:27:1f:6c:35:5b:7a:31:e9: e2:b9:22:07:8f:09:e6:9d:41:a1:4e:f0:41:bf:99: dd:ed:59:90:09:98:79:3a:a8:86:dc:cd:02:96:e9: 4f:ee:61:e8:61:26:70:e9:39:17:54:0f:51:9e:09: 27:36:c2:58:30:9e:56:50:93:cb:90:fa:9c:59:10: 52:9d:7f:5d:90:24:ae:c0:80:fe:0e:83:f9:13:11: 3d:38:9a:3d:2c:4d:61:88:8a:cf:4c:7b:58:fa:5d: 60:c4:ee:cc:39:f1:8b:0b:ce:74:2c:a6:b9:66:f4: fe:3d:1c:b7:78:06:8a:dd:10:39:d1:b5:e1:2e:82: 28:eb:f3:cf:d1:40:f9:01:c4:6c:e2:75:28:83:94: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:49:3D:B2:34:BD:FD:9B:BD:3F:D2:1B:29:55:3D:07:E9:75:A1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:56:f9:fe:72:55:f6:96:79:49:1e:c7:c1:27:0c:d0:9f:88: 6e:14:67:a7:c5:bc:e5:a6:0e:25:f0:ea:3e:f7:3a:03:8a:d5: 56:27:bc:64:c6:91:a4:3e:5f:06:8c:ee:99:02:15:69:4d:57: 1e:72:c7:8f:38:32:33:fe:aa:df:9c:55:c7:49:86:9d:8e:a8: 9a:29:1b:ee:9a:32:5b:06:50:de:9d:b0:40:fb:01:d1:a5:88: 7b:4a:d4:48:0d:7a:88:d2:a1:05:79:64:b2:fc:0a:6d:c1:b0: ad:e4:d9:77:1b:b3:a9:01:a5:71:c0:0e:25:b4:f2:ad:d1:5c: ad:c3:fa:6f:7c:8a:d9:d2:29:04:96:09:5c:20:47:7d:7b:df: 2e:0f:f1:db:2b:c1:a4:ec:d5:3d:68:59:aa:d3:be:d0:ed:2b: 42:c0:18:e0:40:d4:77:a7:f2:65:b1:95:15:20:67:5c:1f:67: cb:b6:94:f3:1f:09:3d:01:92:d8:d3:55:3c:bb:59:ab:e9:1e: c6:41:b3:56:f2:0c:bd:2e:a5:2a:ef:f6:20:e5:8b:a9:54:3e: eb:60:07:1b:8e:3a:79:d6:b8:15:5e:c4:64:d0:5a:57:51:4a: 2d:15:73:e7:32:a8:63:34:aa:26:76:20:b2:53:4e:94:23:79: 0e:3c:81:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79nFC8cRIkalquoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YWYyZTdiNDgtMDNlNi00NWU0LTg4NDUtNjE5ZDBmNzU0ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqtZIqrLIyxTOuuKgd0CTv5wspIL8Xu/nWTw cUzrLW+CeoZLLVAcZ2oMrFV0ASDV/Pnxc3t55GIMV+nIlNSWCqqZ5zTCUOuskHFN 9mTtz2axL+rC82gBFSn6ALOZhJ9xYvyqDjEod9Sy+vRd5I3IJx9sNVt6MeniuSIH jwnmnUGhTvBBv5nd7VmQCZh5OqiG3M0ClulP7mHoYSZw6TkXVA9RngknNsJYMJ5W UJPLkPqcWRBSnX9dkCSuwID+DoP5ExE9OJo9LE1hiIrPTHtY+l1gxO7MOfGLC850 LKa5ZvT+PRy3eAaK3RA50bXhLoIo6/PP0UD5AcRs4nUog5S73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdJPbI0vf2bvT/SGylVPQfpdaHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRiNGY0MzktY2YzZS0z ZjhkLTg5YWUtOGU3N2UwOTgwZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRW+f5yVfaWeUkex8EnDNCfiG4UZ6fFvOWmDiXw6j73OgOK1VYnvGTG kaQ+XwaM7pkCFWlNVx5yx484MjP+qt+cVcdJhp2OqJopG+6aMlsGUN6dsED7AdGl iHtK1EgNeojSoQV5ZLL8Cm3BsK3k2Xcbs6kBpXHADiW08q3RXK3D+m98itnSKQSW CVwgR3173y4P8dsrwaTs1T1oWarTvtDtK0LAGOBA1Hen8mWxlRUgZ1wfZ8u2lPMf CT0BktjTVTy7WavpHsZBs1byDL0upSrv9iDli6lUPutgBxuOOnnWuBVexGTQWldR Si0Vc+cyqGM0qiZ2ILJTTpQjeQ48gfE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:00 2024 by rpki-client on console-ams.rpki-client.org