$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f96840f-7b7b-35b5-96ca-abdb7b3aa61a.roa File: 4f96840f-7b7b-35b5-96ca-abdb7b3aa61a.roa (raw, json) Hash identifier: B7SgpLI+PzXjYq5fK/WEXAkv1k8UJb6f1/vklD+MHxY= Subject key identifier: 49:D9:10:FB:14:7D:47:15:D8:6E:47:C3:BA:04:0E:CB:C5:06:A8:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5BAA8607D78CC4C81AB1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f96840f-7b7b-35b5-96ca-abdb7b3aa61a.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.49.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:aa:86:07:d7:8c:c4:c8:1a:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=832a3d65-67ae-4d2c-8591-efac2c401d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:3c:d4:aa:1e:93:a2:24:e2:4f:2f:1c:04: bf:f0:14:10:89:aa:9d:a7:00:4b:9b:38:5f:21:10: 21:63:77:21:c4:10:77:e5:bd:c7:f5:0c:58:fb:a3: c9:d6:59:8f:e9:b3:95:12:01:3a:0f:d8:c1:be:d0: b9:0b:01:f9:3d:36:ea:e9:11:e4:58:00:30:a6:10: 7c:f1:41:92:0a:02:9c:5f:51:10:c7:cb:16:27:1e: 83:e6:d8:9c:e9:65:24:01:13:95:e8:dc:7e:3f:d0: 97:c4:ad:c3:ee:6e:71:da:fa:ad:53:ec:d2:89:3b: f6:2b:8c:52:29:ca:99:b0:f2:ac:b8:6c:aa:09:84: 3b:85:c8:e7:c9:1b:57:89:3c:89:fc:13:c4:f4:bf: fc:49:44:71:05:4f:13:36:cd:0a:f0:ef:af:c6:0e: 84:9a:e3:60:b3:cb:3e:4c:df:12:f0:31:81:36:62: bf:6b:1c:ac:c4:49:03:de:d8:e6:09:61:6f:1f:cd: 6e:f6:3a:db:d0:ea:13:59:5e:19:eb:cd:04:dd:cb: b8:e6:25:c9:e8:a8:ca:6d:09:76:76:4a:d0:3b:c4: 64:b9:66:ce:e7:23:f5:5c:e9:52:c8:48:86:48:52: e5:99:92:c6:eb:48:bf:2c:e9:3f:2a:e4:62:22:d5: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D9:10:FB:14:7D:47:15:D8:6E:47:C3:BA:04:0E:CB:C5:06:A8:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f96840f-7b7b-35b5-96ca-abdb7b3aa61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5e:56:85:cd:c8:93:56:08:c5:eb:60:10:7c:ff:8f:be:bf: 89:9b:2e:22:30:1d:f0:34:18:3a:61:1e:dc:91:75:1e:51:43: c1:93:64:c6:5c:64:42:4f:cd:a0:c1:a0:4a:3b:7b:3f:f4:e3: 58:06:26:4d:70:03:00:06:82:bb:66:02:4c:69:d1:ca:67:f3: d2:a9:08:62:b7:29:99:55:e3:fc:6e:f7:17:a6:58:9e:9f:99: 1a:c9:eb:45:60:2b:54:a6:83:59:a4:db:5c:ba:32:d3:81:b8: ac:31:06:5f:d0:14:fb:34:64:a2:f0:5f:d8:73:91:df:60:6e: 9e:57:a8:68:16:a5:90:54:f7:44:38:12:38:c8:ed:96:6e:84: 66:0d:9c:9b:2f:67:e9:dd:90:c8:9a:5f:b4:80:f0:64:6c:e6: da:e0:83:4a:73:91:e2:9e:44:88:c6:ea:08:c6:e6:29:c4:62: 9a:51:c4:87:0f:8e:d2:88:34:99:d6:64:50:28:a5:6a:73:0f: 3b:ef:66:fd:8f:79:7d:3c:63:ed:40:ea:fa:62:c1:24:70:b6: c1:53:45:0b:60:c8:bd:d4:d6:92:b7:92:7a:12:69:db:f4:94: 57:3c:8c:b0:98:ac:68:31:85:38:f5:61:d7:a6:9d:0b:79:97: 91:88:e6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6qGB9eMxMgascAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk ODMyYTNkNjUtNjdhZS00ZDJjLTg1OTEtZWZhYzJjNDAxZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsY81Koek6Ik4k8vHAS/8BQQiaqdpwBLmzhf IRAhY3chxBB35b3H9QxY+6PJ1lmP6bOVEgE6D9jBvtC5CwH5PTbq6RHkWAAwphB8 8UGSCgKcX1EQx8sWJx6D5tic6WUkAROV6Nx+P9CXxK3D7m5x2vqtU+zSiTv2K4xS KcqZsPKsuGyqCYQ7hcjnyRtXiTyJ/BPE9L/8SURxBU8TNs0K8O+vxg6EmuNgs8s+ TN8S8DGBNmK/axysxEkD3tjmCWFvH81u9jrb0OoTWV4Z680E3cu45iXJ6KjKbQl2 dkrQO8RkuWbO5yP1XOlSyEiGSFLlmZLG60i/LOk/KuRiItVL2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnZEPsUfUcV2G5Hw7oEDsvFBqiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY5Njg0MGYtN2I3Yi0z NWI1LTk2Y2EtYWJkYjdiM2FhNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdeVoXNyJNWCMXrYBB8/4++v4mbLiIwHfA0GDphHtyRdR5RQ8GTZMZc ZEJPzaDBoEo7ez/041gGJk1wAwAGgrtmAkxp0cpn89KpCGK3KZlV4/xu9xemWJ6f mRrJ60VgK1Smg1mk21y6MtOBuKwxBl/QFPs0ZKLwX9hzkd9gbp5XqGgWpZBU90Q4 EjjI7ZZuhGYNnJsvZ+ndkMiaX7SA8GRs5trgg0pzkeKeRIjG6gjG5inEYppRxIcP jtKINJnWZFAopWpzDzvvZv2PeX08Y+1A6vpiwSRwtsFTRQtgyL3U1pK3knoSadv0 lFc8jLCYrGgxhTj1YdemnQt5l5GI5vU= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:20 2024 by rpki-client on console-fra.rpki-client.org