$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa File: 57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa (raw, json) Hash identifier: 0fJ8zUy5vsJrfUVDYLdOEfU8cyrH6lw19L6XnmlXP8M= Subject key identifier: 86:84:8D:D2:D8:CE:A8:A5:A6:A3:AB:E2:90:BF:FF:D5:F2:48:CB:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AABF9E2E9A6E4168EA88300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.38.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:f9:e2:e9:a6:e4:16:8e:a8:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=a2972dde-bdf7-49a3-8b37-822ccebeee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:07:2e:ae:8f:7e:9b:86:87:a2:24:9e:1c: 23:c3:13:1b:c2:36:71:b4:54:a6:43:15:9e:b8:59: ec:39:07:ce:11:db:32:8e:18:e2:7d:d0:e9:aa:ab: 85:f7:30:b8:63:a8:42:30:5f:b6:69:96:aa:4c:9a: de:63:45:61:2e:d0:aa:ea:37:3e:c6:12:c6:6d:ce: c1:d5:78:87:8e:3e:9c:eb:74:ef:ab:da:62:3c:d6: ac:3a:f9:f3:67:b3:0a:37:8e:56:49:5f:5d:70:1d: f9:03:3c:69:34:55:88:4d:13:d9:ad:31:ea:c1:07: dc:83:12:c4:5f:c5:f4:2e:0f:9a:e5:86:a4:72:7d: 36:34:00:2f:c7:5c:61:37:c8:b2:2a:6d:60:8b:df: 03:65:42:29:a0:d9:bd:c5:f0:d6:2d:45:d6:15:5c: f7:8d:d6:b9:4f:d7:88:49:27:b8:bb:d7:6b:69:e4: c8:ba:b7:d3:31:0f:ba:35:f6:e1:81:d8:7e:2a:fd: f7:c4:e0:67:21:d1:e8:a8:75:4e:fd:27:19:0a:a8: 2d:fc:b1:fa:39:84:62:88:bd:f2:cb:80:57:0b:77: 43:f4:5b:8b:68:fb:d2:df:78:0e:2b:9e:05:43:ff: 9d:5d:49:7e:0c:f4:f7:1f:e6:f7:cd:fa:49:86:05: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:84:8D:D2:D8:CE:A8:A5:A6:A3:AB:E2:90:BF:FF:D5:F2:48:CB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a8:04:37:c3:dc:92:30:ab:02:7a:05:6b:e6:b6:a7:4e:4a: db:22:9c:51:70:19:ac:79:63:1c:77:d3:68:cd:72:3f:d2:ba: b9:97:c3:bb:0e:a8:69:8a:ed:c7:a7:db:5e:aa:45:1f:f2:0b: e4:02:41:3c:4a:0c:27:eb:b8:10:9f:e3:8b:75:4a:33:d9:37: c0:63:0c:46:d3:73:53:78:dc:d2:d3:37:a6:df:03:5b:38:37: 0f:d2:12:85:d5:00:9b:65:3c:9e:be:bd:52:89:f1:69:ee:ac: 75:ad:46:24:c6:b1:23:83:96:62:42:93:a1:ee:34:86:38:14: 32:29:b8:38:35:4c:94:48:75:37:63:b2:5b:34:9d:5f:0b:d3: c2:9d:7e:39:97:1f:d8:72:2e:19:b8:fe:5e:aa:73:11:45:58: 6e:86:d2:24:8e:31:db:41:d6:11:2b:7d:c4:22:e6:72:a2:35: 37:0a:68:87:54:0c:2d:51:b7:56:e8:6f:d6:e0:59:21:fa:85: 6b:76:6a:26:5a:89:5f:6f:a1:be:f3:ea:e9:91:f5:57:8c:b8: cb:d2:22:71:c9:08:3e:f9:93:3b:d7:52:71:63:a9:8e:91:39: 4d:d0:64:fc:19:5c:15:7b:24:27:5c:14:1a:63:3b:c8:fd:1b: 2e:a6:7f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/ni6abkFo6ogwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk YTI5NzJkZGUtYmRmNy00OWEzLThiMzctODIyY2NlYmVlZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS4HLq6PfpuGh6IknhwjwxMbwjZxtFSmQxWe uFnsOQfOEdsyjhjifdDpqquF9zC4Y6hCMF+2aZaqTJreY0VhLtCq6jc+xhLGbc7B 1XiHjj6c63Tvq9piPNasOvnzZ7MKN45WSV9dcB35AzxpNFWITRPZrTHqwQfcgxLE X8X0Lg+a5Yakcn02NAAvx1xhN8iyKm1gi98DZUIpoNm9xfDWLUXWFVz3jda5T9eI SSe4u9draeTIurfTMQ+6Nfbhgdh+Kv33xOBnIdHoqHVO/ScZCqgt/LH6OYRiiL3y y4BXC3dD9FuLaPvS33gOK54FQ/+dXUl+DPT3H+b3zfpJhgX0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaEjdLYzqilpqOr4pC//9XySMt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmMTBiNWMtMGI2YS0z YzA1LWFiNjMtMWRlOGIxYTQwYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOoBDfD3JIwqwJ6BWvmtqdOStsinFFwGax5Yxx302jNcj/SurmXw7sO qGmK7cen216qRR/yC+QCQTxKDCfruBCf44t1SjPZN8BjDEbTc1N43NLTN6bfA1s4 Nw/SEoXVAJtlPJ6+vVKJ8WnurHWtRiTGsSODlmJCk6HuNIY4FDIpuDg1TJRIdTdj sls0nV8L08KdfjmXH9hyLhm4/l6qcxFFWG6G0iSOMdtB1hErfcQi5nKiNTcKaIdU DC1Rt1bob9bgWSH6hWt2aiZaiV9vob7z6umR9VeMuMvSInHJCD75kzvXUnFjqY6R OU3QZPwZXBV7JCdcFBpjO8j9Gy6mf6I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:44 2024 by rpki-client on console-fra.rpki-client.org