$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa File: 842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa (raw, json) Hash identifier: a6URgXNf/TN0yJvHStvoNCePHkQkPKciBdSg0YIZZZY= Subject key identifier: E5:3C:CA:7D:27:35:3A:AD:C8:6D:01:D8:55:A8:D0:C6:F1:2C:33:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C4AA2C5ABAFC8DF71AA9AFE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 16625 IP address blocks: 23.197.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:2c:5a:ba:fc:8d:f7:1a:a9:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=9f4e5961-f56e-4816-9d88-4620179d49ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:26:f4:be:f6:69:39:7b:cc:1a:09:ca:36: 5e:90:94:e6:92:86:c0:7d:60:80:8b:7f:72:55:94: 43:c5:93:96:7d:9d:1e:46:c2:54:2f:bd:c5:5b:a7: ce:5e:e9:1f:e4:78:62:f6:44:46:0d:fd:f1:c8:11: 50:f9:1b:ba:d5:79:f6:8a:5d:14:15:55:ad:47:ff: d9:02:8b:a5:23:d3:bf:2e:d6:32:57:3d:0b:8f:6b: 0b:16:fe:04:40:70:57:b9:4c:04:e0:55:88:7e:cb: 2c:74:cf:d5:01:22:d7:9c:a9:77:de:8f:16:cf:94: 13:30:1e:e1:5c:c0:75:eb:96:2d:ca:61:35:4f:3d: 78:53:6e:55:9c:2a:95:c7:17:c8:05:72:56:39:ff: 33:78:3f:ee:9e:03:05:7d:ea:ef:a2:ae:d7:74:f6: 89:3c:bb:96:e1:7a:48:da:5b:db:c8:32:57:64:ad: 89:d8:e6:af:51:1b:b4:76:52:ad:cc:22:9a:a4:51: 7c:a8:9e:81:9a:a2:f3:d1:21:6f:28:d3:be:7b:f6: 1a:c1:30:bf:52:05:4a:b2:e0:78:3f:67:85:62:4c: ee:e5:f8:e2:89:c0:55:d1:c4:33:04:b9:56:ab:d4: 09:4f:b1:52:e9:c8:67:4f:94:5c:03:fe:9a:e7:6d: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:CA:7D:27:35:3A:AD:C8:6D:01:D8:55:A8:D0:C6:F1:2C:33:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:16:f3:35:40:20:22:ce:f8:60:1c:2a:22:8f:00:20:1d:f0: f8:3e:f1:e4:25:e0:c6:b1:bd:9b:57:0b:e7:a5:1b:0b:f4:08: d7:70:c9:d1:88:f5:70:e1:d5:bc:f7:31:d3:66:ac:6e:a6:72: 4c:d7:dc:1f:be:e8:08:0a:ab:0d:2a:6c:2e:48:bd:f2:e3:1b: f8:08:bf:60:50:4e:3e:f7:8e:3d:32:64:ca:e4:78:38:37:0e: 08:c9:09:0d:72:9b:38:f5:e1:9e:b6:5d:8f:42:51:da:c6:b3: 20:06:cd:85:6e:7b:ed:9d:cc:08:76:de:db:56:39:a4:11:fa: 36:23:39:73:cb:b4:e7:5d:0d:ba:e1:60:e7:a5:57:85:bd:4a: 8e:63:56:83:35:f8:04:76:d4:90:86:10:52:ea:c6:1b:1b:ad: 59:43:22:6a:f6:c3:25:6e:6e:47:89:7d:5f:49:27:fb:c6:23: 63:1f:11:d3:31:59:b9:2b:0b:a6:49:4b:7e:4b:62:14:07:40: e0:ea:48:7a:e3:8e:63:e7:19:47:16:15:5d:e4:ac:ea:72:84: b2:48:4d:d0:54:98:f2:83:1f:58:a6:df:b5:aa:92:0c:2b:95: b1:92:19:17:62:03:14:cd:82:2e:2b:72:c4:be:13:43:81:96: 9d:31:5f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqixauvyN9xqpr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk OWY0ZTU5NjEtZjU2ZS00ODE2LTlkODgtNDYyMDE3OWQ0OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEm9L72aTl7zBoJyjZekJTmkobAfWCAi39y VZRDxZOWfZ0eRsJUL73FW6fOXukf5Hhi9kRGDf3xyBFQ+Ru61Xn2il0UFVWtR//Z AoulI9O/LtYyVz0Lj2sLFv4EQHBXuUwE4FWIfsssdM/VASLXnKl33o8Wz5QTMB7h XMB165YtymE1Tz14U25VnCqVxxfIBXJWOf8zeD/ungMFfervoq7XdPaJPLuW4XpI 2lvbyDJXZK2J2OavURu0dlKtzCKapFF8qJ6BmqLz0SFvKNO+e/YawTC/UgVKsuB4 P2eFYkzu5fjiicBV0cQzBLlWq9QJT7FS6chnT5RcA/6a521w3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU8yn0nNTqtyG0B2FWo0MbxLDMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQyYWZmMGQtNDczNi0z Y2I5LWIyYmEtNWQzOTY5NzUyZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcW8zVAICLO+GAcKiKPACAd8Pg+8eQl4MaxvZtXC+elGwv0CNdwydGI 9XDh1bz3MdNmrG6mckzX3B++6AgKqw0qbC5IvfLjG/gIv2BQTj73jj0yZMrkeDg3 DgjJCQ1ymzj14Z62XY9CUdrGsyAGzYVue+2dzAh23ttWOaQR+jYjOXPLtOddDbrh YOelV4W9So5jVoM1+AR21JCGEFLqxhsbrVlDImr2wyVubkeJfV9JJ/vGI2MfEdMx WbkrC6ZJS35LYhQHQODqSHrjjmPnGUcWFV3krOpyhLJITdBUmPKDH1im37Wqkgwr lbGSGRdiAxTNgi4rcsS+E0OBlp0xX8k= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:38 2024 by rpki-client on console-fra.rpki-client.org