$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5767d8be-67e9-3a9e-9f18-07e70934d409.roa File: 5767d8be-67e9-3a9e-9f18-07e70934d409.roa (raw, json) Hash identifier: 8FUc/Zas+5HtViFfxUdnSfGZzy05d55rbqutFd9HcWY= Subject key identifier: 49:7A:07:8B:A6:2B:FD:6C:3D:C4:FE:0B:8D:55:7C:91:07:37:26:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABFE0E4A8132F6BA172C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5767d8be-67e9-3a9e-9f18-07e70934d409.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.40.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:fe:0e:4a:81:32:f6:ba:17:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=f5e63fd5-485c-4665-8624-571edff0ef43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e5:47:30:56:3d:64:aa:73:f1:9e:6a:84:de: 42:16:97:ea:96:d7:77:f8:1e:61:e9:a2:7a:07:b7: ee:a3:14:52:b5:de:dc:12:8d:48:e7:99:d4:c9:a8: 87:98:5d:55:52:c0:7b:bd:8b:43:1b:7b:34:bc:63: 48:c6:3d:e0:30:52:77:b5:09:fb:22:d2:88:bd:92: 53:58:7a:34:2a:8b:c4:be:01:52:e0:ee:f1:d1:b9: 76:dd:59:98:fe:40:2d:0f:28:ac:58:0e:8c:44:d3: 3e:21:87:70:1e:e2:6e:24:b3:1c:4b:ec:50:0a:e9: a0:c5:f6:96:c0:c2:1d:1b:f0:eb:d5:45:ce:94:77: 1d:49:c4:ec:80:58:eb:a3:0a:5a:f4:f5:e8:f6:71: 9a:09:93:c8:ca:db:71:90:93:ca:8d:fa:02:f5:81: 4b:cf:41:ff:b3:c9:b6:c2:41:8c:2e:b0:fd:9c:5c: 7d:72:24:fa:41:21:1f:ec:f3:bb:2d:43:e2:43:77: 8c:a6:b0:4e:81:29:0c:ef:00:c0:80:8c:94:d3:43: 1b:55:ae:9d:b3:07:ec:85:11:05:07:6b:f3:6d:98: 38:20:dd:7f:e9:43:94:eb:4c:1d:cb:5a:bb:c4:1a: a7:40:49:8c:76:7f:81:eb:93:31:ee:86:29:93:d5: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:07:8B:A6:2B:FD:6C:3D:C4:FE:0B:8D:55:7C:91:07:37:26:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5767d8be-67e9-3a9e-9f18-07e70934d409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:be:9f:f3:77:2d:4a:dc:f8:fe:7d:f7:7a:e4:c0:15:da:53: 48:22:2e:7c:af:cf:14:2f:b1:e9:ef:ac:b4:6f:24:75:47:21: b5:e5:96:44:a8:9c:02:80:2f:5f:3a:6d:af:90:89:ab:65:08: 4a:0f:67:93:3e:61:ea:26:75:be:13:31:57:58:d6:52:87:b3: e0:c8:ee:bf:e7:b2:ea:69:95:1b:7d:e3:67:8b:77:28:69:f3: 8b:fa:47:4f:c7:f6:15:6e:f9:1a:ae:5b:23:e5:d6:e3:57:34: 31:e1:a1:5d:3a:1a:f2:c4:d7:f2:f0:e2:c8:ac:4d:25:bc:71: 4f:ad:db:fa:06:05:52:a2:25:06:b3:46:2d:56:b6:f1:d6:56: 4a:2f:f5:1e:93:2c:7a:c1:de:0f:a0:4e:73:52:03:67:db:6d: 86:08:d7:2e:63:ab:15:a0:4d:71:14:71:93:a8:14:dc:fd:41: 3c:ac:06:e6:42:02:b3:89:8e:29:7a:be:f5:9e:27:f1:cb:be: 9c:a5:7e:89:94:a2:1d:48:f3:6e:4d:8d:6c:d2:6d:35:40:fe: a7:6a:c2:3c:a9:bc:65:44:5a:25:01:d2:3d:86:96:bf:d5:3e: 67:10:93:85:8a:9b:e8:98:38:23:d9:17:70:06:8b:ba:b3:8b: 98:07:bb:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/4OSoEy9roXLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk ZjVlNjNmZDUtNDg1Yy00NjY1LTg2MjQtNTcxZWRmZjBlZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguVHMFY9ZKpz8Z5qhN5CFpfqltd3+B5h6aJ6 B7fuoxRStd7cEo1I55nUyaiHmF1VUsB7vYtDG3s0vGNIxj3gMFJ3tQn7ItKIvZJT WHo0KovEvgFS4O7x0bl23VmY/kAtDyisWA6MRNM+IYdwHuJuJLMcS+xQCumgxfaW wMIdG/Dr1UXOlHcdScTsgFjrowpa9PXo9nGaCZPIyttxkJPKjfoC9YFLz0H/s8m2 wkGMLrD9nFx9ciT6QSEf7PO7LUPiQ3eMprBOgSkM7wDAgIyU00MbVa6dswfshREF B2vzbZg4IN1/6UOU60wdy1q7xBqnQEmMdn+B65Mx7oYpk9UGxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl6B4umK/1sPcT+C41VfJEHNyY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc2N2Q4YmUtNjdlOS0z YTllLTlmMTgtMDdlNzA5MzRkNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG++n/N3LUrc+P5993rkwBXaU0giLnyvzxQvsenvrLRvJHVHIbXllkSo nAKAL186ba+QiatlCEoPZ5M+Yeomdb4TMVdY1lKHs+DI7r/nsupplRt942eLdyhp 84v6R0/H9hVu+RquWyPl1uNXNDHhoV06GvLE1/Lw4sisTSW8cU+t2/oGBVKiJQaz Ri1WtvHWVkov9R6TLHrB3g+gTnNSA2fbbYYI1y5jqxWgTXEUcZOoFNz9QTysBuZC ArOJjil6vvWeJ/HLvpylfomUoh1I825NjWzSbTVA/qdqwjypvGVEWiUB0j2Glr/V PmcQk4WKm+iYOCPZF3AGi7qzi5gHu6o= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:05 2024 by rpki-client on console-ams.rpki-client.org