$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6287fb-2063-3ffb-a901-63f696abcc1a.roa File: 7b6287fb-2063-3ffb-a901-63f696abcc1a.roa (raw, json) Hash identifier: 1WRhHYIyZF/yCzMLLW7yJGQwkT2DiWEtQQYYzep1E9Y= Subject key identifier: 9D:7A:76:41:07:E8:80:17:5A:33:DD:50:AE:40:4D:BC:F1:18:CD:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A1A684BBB8CA52CAE8B2E580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6287fb-2063-3ffb-a901-63f696abcc1a.roa Signing time: Wed 23 Oct 2024 01:00:32 +0000 ROA not before: Wed 23 Oct 2024 01:00:32 +0000 ROA not after: Tue 21 Jan 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.49.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:a6:84:bb:b8:ca:52:ca:e8:b2:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 01:00:32 2024 GMT Not After : Jan 21 02:00:32 2025 GMT Subject: CN=d42a941f-cb2c-4b6b-a95e-58a1575292d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:e4:7f:d2:b1:22:bd:ef:95:12:5c:6a:9c: c8:6c:95:b6:d1:0d:2a:8f:d5:85:f4:bb:b4:ae:35: 02:d9:5d:cc:2c:9a:05:ee:6a:ca:c6:b3:5c:fa:69: 07:21:41:5b:f5:a3:8f:7e:4d:39:33:2e:a5:e3:94: 93:3e:72:36:40:86:46:3e:cd:1a:d7:41:20:76:4b: 23:28:4d:20:28:c1:d9:87:70:11:52:a4:cc:31:a9: 80:3c:90:e7:d9:5d:3d:40:1b:5a:24:46:11:76:38: b8:4d:89:e8:d6:37:15:a4:24:0a:b3:11:b4:1f:52: 71:94:33:e9:98:fe:3b:df:9b:43:d8:60:c8:f2:17: b7:1c:42:e4:a9:df:01:e0:55:0e:d5:b2:cc:4a:2e: da:3c:2e:49:ad:55:97:bf:d3:c2:c7:9b:3a:f2:be: 2f:9b:56:8c:12:f0:86:56:c2:c4:46:45:0b:4a:83: dc:3b:ad:41:a9:3a:00:8f:d3:18:1d:4f:cc:37:84: 3c:5d:52:05:f3:73:9d:4b:8c:fe:fe:ed:b8:a7:8d: 7a:8a:25:52:24:87:63:a9:5c:57:1a:bc:5f:ca:d8: ef:a9:eb:60:ec:a5:ce:4e:16:2a:06:bd:88:d0:ea: 89:c4:30:be:77:f7:c4:d6:10:02:57:6c:90:ff:2f: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7A:76:41:07:E8:80:17:5A:33:DD:50:AE:40:4D:BC:F1:18:CD:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6287fb-2063-3ffb-a901-63f696abcc1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:16:d1:f6:7e:81:1d:14:73:fd:29:16:74:5b:f2:34:6b:d0: 27:ab:9c:0c:85:05:b5:f6:a8:17:dd:46:4f:6c:24:80:fb:c8: 2d:d2:a2:f0:84:39:21:78:9d:c4:4a:02:63:ff:1b:de:df:87: 3e:29:da:5c:94:0f:37:74:25:27:32:61:92:97:26:c9:c0:d4: 09:78:b6:3e:ce:fc:58:03:db:57:01:65:52:2d:90:cf:76:23: 5d:d8:6a:53:aa:f8:0b:d2:f0:84:15:45:49:d0:53:e5:ef:12: 33:1a:42:76:49:ee:b8:64:b6:50:be:c2:5f:59:68:ec:f6:e1: da:54:cf:b1:65:4b:fa:55:96:1f:64:76:a3:03:bd:67:fb:26: 62:2c:5a:b6:6c:08:ee:40:9c:a6:d3:77:de:00:78:00:8d:a2: 9c:bc:f3:d8:63:e2:49:34:7d:f4:16:dc:ec:5a:4e:5e:35:fa: e2:5d:7a:29:82:f8:dd:c2:76:95:48:4f:4d:41:67:6b:ef:28: 1b:54:cc:4e:54:66:ff:49:2c:6e:a8:ab:42:32:c1:07:09:24: 08:b5:2c:27:52:13:4b:46:dc:10:05:e9:a7:19:e3:d3:74:6c: fc:87:a6:35:ed:04:cd:20:a3:52:ea:5d:f5:c1:1e:1a:ef:23: 51:94:3a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEehpoS7uMpSyuiy5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMzAxMDAzMloXDTI1MDEyMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDQyYTk0MWYtY2IyYy00YjZiLWE5NWUtNThhMTU3NTI5MmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZLkf9KxIr3vlRJcapzIbJW20Q0qj9WF9Lu0 rjUC2V3MLJoF7mrKxrNc+mkHIUFb9aOPfk05My6l45STPnI2QIZGPs0a10Egdksj KE0gKMHZh3ARUqTMMamAPJDn2V09QBtaJEYRdji4TYno1jcVpCQKsxG0H1JxlDPp mP4735tD2GDI8he3HELkqd8B4FUO1bLMSi7aPC5JrVWXv9PCx5s68r4vm1aMEvCG VsLERkULSoPcO61BqToAj9MYHU/MN4Q8XVIF83OdS4z+/u24p416iiVSJIdjqVxX Grxfytjvqetg7KXOThYqBr2I0OqJxDC+d/fE1hACV2yQ/y9ygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ16dkEH6IAXWjPdUK5ATbzxGM14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I2Mjg3ZmItMjA2My0z ZmZiLWE5MDEtNjNmNjk2YWJjYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsW0fZ+gR0Uc/0pFnRb8jRr0CernAyFBbX2qBfdRk9sJID7yC3SovCE OSF4ncRKAmP/G97fhz4p2lyUDzd0JScyYZKXJsnA1Al4tj7O/FgD21cBZVItkM92 I13YalOq+AvS8IQVRUnQU+XvEjMaQnZJ7rhktlC+wl9ZaOz24dpUz7FlS/pVlh9k dqMDvWf7JmIsWrZsCO5AnKbTd94AeACNopy889hj4kk0ffQW3OxaTl41+uJdeimC +N3CdpVIT01BZ2vvKBtUzE5UZv9JLG6oq0IywQcJJAi1LCdSE0tG3BAF6acZ49N0 bPyHpjXtBM0go1LqXfXBHhrvI1GUOtI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:05 2024 by rpki-client on console-fra.rpki-client.org