$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74d3ed5f-defa-32b8-9e61-f242c0f2a27f.roa File: 74d3ed5f-defa-32b8-9e61-f242c0f2a27f.roa (raw, json) Hash identifier: No161XKle/a7NmPo/Hx+Z1Tek+/EnA/SmUZhp3RDn7c= Subject key identifier: B9:AC:82:67:20:39:94:3C:13:C0:5C:73:5B:71:9D:BC:2B:28:12:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CA3F9621F8382771AD783E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74d3ed5f-defa-32b8-9e61-f242c0f2a27f.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.202.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:96:21:f8:38:27:71:ad:78:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=5f33c781-ef35-4994-b082-5b07e67a4cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:55:e8:d0:74:54:ba:e1:1d:5f:6b:53:12:0e: ab:bb:38:93:08:b7:05:97:16:e3:34:ef:eb:1e:49: 8b:59:31:7b:2e:8a:da:9b:3e:a1:e9:f4:61:09:8f: 34:af:b2:f1:1a:d5:78:0f:83:2b:86:33:59:2d:35: ba:0e:d8:c5:7b:3a:cc:ab:f6:d0:7e:76:73:81:7e: fb:61:0f:a0:dd:72:9a:85:72:97:d0:0e:77:c7:a0: 63:38:65:dc:2b:6e:d5:a7:39:fa:a5:56:bb:ec:07: 81:ab:ce:a0:ba:c5:79:5c:5b:e8:4f:26:bd:a6:93: 0f:46:e1:22:77:4d:39:2e:3b:89:c1:c7:5f:eb:86: 44:5f:8d:81:3b:11:ef:d2:e4:eb:a8:f4:78:73:0b: 8b:91:93:c8:20:be:07:0c:e3:4b:98:0d:e9:e1:ca: e7:00:09:ae:43:2c:a4:98:8e:0a:1f:ad:2c:f8:45: 7f:21:45:09:3c:90:ea:55:e9:2d:d0:d9:48:87:00: 97:35:4a:a5:2c:11:c7:ae:1d:13:1a:90:72:f6:73: 14:4c:48:a2:98:43:49:8e:91:55:d8:4c:90:54:c8: 68:81:ee:62:70:72:b7:0b:e7:c6:da:05:c0:06:25: e3:ae:8b:a1:81:d5:4a:d3:7e:60:fd:5c:20:92:62: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:82:67:20:39:94:3C:13:C0:5C:73:5B:71:9D:BC:2B:28:12:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74d3ed5f-defa-32b8-9e61-f242c0f2a27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4a:cf:27:4a:16:17:ef:ee:f4:0a:b1:cf:a6:d4:9a:3e:4d: c9:c5:78:1e:f1:03:8a:94:c9:c2:59:d2:75:3c:f8:0b:af:7e: 7c:bb:98:c8:8d:2c:6a:a4:72:d9:e4:2a:e6:46:cf:3e:6e:6e: 2b:90:bb:16:a8:0a:c9:ad:fb:a2:24:c6:07:f7:a8:a9:00:e2: a0:fb:73:4c:82:f3:54:05:cf:d5:92:fd:53:40:df:eb:19:45: 58:34:15:5f:0a:91:fb:5c:94:1d:03:f9:89:2c:39:37:9c:8d: 29:58:a4:d1:a6:2e:79:4a:36:6b:cf:dc:21:e7:81:bb:14:c1: d0:11:fd:69:be:d6:71:f9:ae:42:b3:40:6f:2b:17:37:d6:7a: 01:7c:19:82:7c:4d:ae:aa:6a:f6:2a:c8:d2:36:ad:a0:56:ff: 55:73:5d:05:f4:5c:85:a6:14:d8:08:6c:22:b7:ea:b8:39:0f: 47:9b:fe:1f:26:75:04:92:41:76:fe:b3:52:34:bd:99:84:72: bc:ae:b6:f7:7e:5e:01:af:af:1e:1b:e0:58:c0:1d:c1:d6:1b: dd:1c:ca:68:5e:de:13:9e:80:01:f5:df:22:6b:f4:1f:de:d9: 36:de:03:cb:fb:65:63:23:5d:23:a8:df:84:81:b2:2c:bb:b7: 7f:26:d5:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP5Yh+Dgnca14PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NWYzM2M3ODEtZWYzNS00OTk0LWIwODItNWIwN2U2N2E0Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVXo0HRUuuEdX2tTEg6ruziTCLcFlxbjNO/r HkmLWTF7Loramz6h6fRhCY80r7LxGtV4D4MrhjNZLTW6DtjFezrMq/bQfnZzgX77 YQ+g3XKahXKX0A53x6BjOGXcK27Vpzn6pVa77AeBq86gusV5XFvoTya9ppMPRuEi d005LjuJwcdf64ZEX42BOxHv0uTrqPR4cwuLkZPIIL4HDONLmA3p4crnAAmuQyyk mI4KH60s+EV/IUUJPJDqVekt0NlIhwCXNUqlLBHHrh0TGpBy9nMUTEiimENJjpFV 2EyQVMhoge5icHK3C+fG2gXABiXjrouhgdVK035g/VwgkmJh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmsgmcgOZQ8E8Bcc1txnbwrKBIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRkM2VkNWYtZGVmYS0z MmI4LTllNjEtZjI0MmMwZjJhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8qeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9KzydKFhfv7vQKsc+m1Jo+TcnFeB7xA4qUycJZ0nU8+Auvfny7mMiN LGqkctnkKuZGzz5ubiuQuxaoCsmt+6Ikxgf3qKkA4qD7c0yC81QFz9WS/VNA3+sZ RVg0FV8KkftclB0D+YksOTecjSlYpNGmLnlKNmvP3CHngbsUwdAR/Wm+1nH5rkKz QG8rFzfWegF8GYJ8Ta6qavYqyNI2raBW/1VzXQX0XIWmFNgIbCK36rg5D0eb/h8m dQSSQXb+s1I0vZmEcryutvd+XgGvrx4b4FjAHcHWG90cymhe3hOegAH13yJr9B/e 2TbeA8v7ZWMjXSOo34SBsiy7t38m1S0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:02 2024 by rpki-client on console-fra.rpki-client.org