$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e9de248-d884-3834-ab1b-a1e900879121.roa File: 5e9de248-d884-3834-ab1b-a1e900879121.roa (raw, json) Hash identifier: 3bjeJf09ei3hARqpj2WG7HBekFN2HjJ/bGewJFjAZSU= Subject key identifier: 19:0A:9C:7D:80:19:F1:45:16:95:64:1F:0B:EA:4D:EC:4F:3F:A2:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475216176A8481D6C5096B4700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e9de248-d884-3834-ab1b-a1e900879121.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 16625 IP address blocks: 23.64.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:17:6a:84:81:d6:c5:09:6b:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=a0c82daa-e4d8-449d-b0ca-a104d76c7d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:92:cf:0f:8f:d9:94:74:27:c0:85:ce:59: ed:80:14:1e:92:a9:ac:0e:2c:e5:d4:a4:c4:9d:24: 98:c5:c3:c3:1f:2a:0c:cb:03:68:db:e9:a7:70:d2: 84:ac:4f:a1:fb:30:ee:01:af:28:8c:64:92:51:3c: 14:b1:40:2a:5a:ac:b4:ea:59:5f:50:ae:77:27:61: c9:aa:d1:79:43:fa:18:d2:52:ac:a5:56:88:eb:5b: 5d:d9:33:65:94:88:f4:bc:b9:5c:46:4b:83:1d:31: ce:67:8f:c6:a6:9d:97:b0:bf:30:81:9f:20:2a:b5: a8:22:5a:bd:9b:69:d1:21:bd:94:04:15:e6:89:5b: 95:00:01:b9:21:ff:b7:be:64:c5:f9:49:37:fa:99: 57:73:22:d4:91:c6:a8:6c:93:6c:1f:3c:98:93:87: 93:b4:fa:12:f6:8d:44:51:c9:0b:51:60:02:8a:cc: 58:dc:a9:b4:c2:56:f0:b5:e2:47:b6:47:62:3e:98: b9:58:18:b4:25:5a:d5:f0:12:da:09:ea:c0:34:d2: 15:dd:47:13:51:84:f1:a0:22:c1:9d:21:46:ce:63: 4a:4a:02:fd:8d:bf:30:a9:00:2d:ce:ab:92:4f:f4: 28:f0:e5:1b:45:80:54:35:c1:25:94:34:db:ea:06: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:9C:7D:80:19:F1:45:16:95:64:1F:0B:EA:4D:EC:4F:3F:A2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e9de248-d884-3834-ab1b-a1e900879121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b6:88:58:a2:c4:43:79:35:8a:bb:eb:95:2e:39:25:86:e9: 5a:50:df:2f:f0:a4:92:7b:da:09:0b:4c:a4:6c:08:c6:21:48: 7a:c9:92:ff:bc:86:97:6a:71:88:2c:a3:36:ff:9d:e0:ca:fc: 7e:73:cd:cd:02:17:cd:04:7e:1c:1c:d4:3a:eb:68:e3:85:a1: 40:28:16:a7:18:0c:c1:84:0f:15:32:7c:6e:7e:47:5c:ce:ee: 28:e5:74:bd:4d:9a:61:b6:2e:f9:2a:a7:b7:9d:6d:ab:6b:32: 96:fb:08:7e:a0:ad:3e:93:0b:98:63:53:0e:a3:5f:01:50:88: c5:ba:c6:ab:1b:95:55:84:0b:c7:d1:05:d1:ee:65:83:57:b2: ab:d2:b3:dc:a1:9f:a4:fe:9e:13:6a:02:6d:aa:57:e0:42:f5: 0c:62:cc:43:32:79:56:7c:57:b9:92:9d:de:87:d8:15:17:01: 16:33:28:99:8a:ac:f5:22:98:0e:e0:a1:bb:86:db:7a:c6:50: cb:7f:b0:f6:c0:3a:2d:bd:9a:53:c5:4f:ec:11:d6:4f:ea:fd: 08:4b:6d:73:8e:1a:ea:cf:c9:e3:f3:99:b0:3f:1f:69:9a:09: 85:97:8b:d7:fe:d0:6a:60:f6:87:f5:0c:d0:65:0b:e5:17:b5: da:99:11:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhdqhIHWxQlrRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk YTBjODJkYWEtZTRkOC00NDlkLWIwY2EtYTEwNGQ3NmM3ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzeSzw+P2ZR0J8CFzlntgBQekqmsDizl1KTE nSSYxcPDHyoMywNo2+mncNKErE+h+zDuAa8ojGSSUTwUsUAqWqy06llfUK53J2HJ qtF5Q/oY0lKspVaI61td2TNllIj0vLlcRkuDHTHOZ4/Gpp2XsL8wgZ8gKrWoIlq9 m2nRIb2UBBXmiVuVAAG5If+3vmTF+Uk3+plXcyLUkcaobJNsHzyYk4eTtPoS9o1E UckLUWACisxY3Km0wlbwteJHtkdiPpi5WBi0JVrV8BLaCerANNIV3UcTUYTxoCLB nSFGzmNKSgL9jb8wqQAtzquST/Qo8OUbRYBUNcEllDTb6gYUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkKnH2AGfFFFpVkHwvqTexPP6JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU5ZGUyNDgtZDg4NC0z ODM0LWFiMWItYTFlOTAwODc5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS2iFiixEN5NYq765UuOSWG6VpQ3y/wpJJ72gkLTKRsCMYhSHrJkv+8 hpdqcYgsozb/neDK/H5zzc0CF80Efhwc1DrraOOFoUAoFqcYDMGEDxUyfG5+R1zO 7ijldL1NmmG2Lvkqp7edbatrMpb7CH6grT6TC5hjUw6jXwFQiMW6xqsblVWEC8fR BdHuZYNXsqvSs9yhn6T+nhNqAm2qV+BC9QxizEMyeVZ8V7mSnd6H2BUXARYzKJmK rPUimA7gobuG23rGUMt/sPbAOi29mlPFT+wR1k/q/QhLbXOOGurPyePzmbA/H2ma CYWXi9f+0Gpg9of1DNBlC+UXtdqZESw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:47 2024 by rpki-client on console-fra.rpki-client.org