$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa File: 85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa (raw, json) Hash identifier: xcr3pc+1DKxzaC+O+gp05z/07sysz5Ufcv8NVVC01+A= Subject key identifier: 25:A2:F7:0F:A4:2D:59:B7:66:77:5A:FA:DE:D8:E2:91:EA:B5:AD:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC05EE612B04E6657ADB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.40.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:05:ee:61:2b:04:e6:65:7a:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=33c32eba-bd93-41df-9a4a-f52ee753c883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:58:9a:6b:e5:07:08:a1:8a:9c:38:01:6b: 52:26:7a:56:3f:8d:72:6e:5b:d7:c3:fd:f1:ce:0d: da:6e:a0:b9:bb:d9:da:f1:54:78:9f:62:bf:e0:f4: 14:4b:32:2b:35:37:50:48:e5:8e:33:a5:d0:5d:ea: c1:1e:2e:59:d8:c6:9d:31:f1:60:32:dc:ad:0d:18: 0f:2c:4b:e8:17:ce:df:09:ad:11:34:6a:b2:bc:d5: ec:c0:25:a4:cc:fd:72:dd:54:df:01:43:8d:aa:aa: f3:17:e3:fb:78:10:3f:7a:cc:30:73:b3:38:a2:0b: fc:1f:3d:fe:94:14:35:ea:a9:7d:19:ed:64:3d:e7: 18:ac:68:42:62:0d:58:4b:2f:4c:36:88:a8:a9:c9: 02:b0:ec:b8:11:32:72:f5:e5:da:e5:d8:42:5c:04: f3:83:29:6a:b0:90:d6:dd:77:fe:e5:70:a4:18:92: f0:27:90:35:ef:6c:20:37:4d:4b:56:49:cd:3e:47: 51:95:c6:52:7b:ae:b6:20:60:34:64:7e:3e:56:03: ac:3a:b1:d8:18:be:5e:9d:fb:da:51:40:35:fc:24: 82:4a:cc:7a:3a:32:35:29:71:6e:17:55:18:76:10: 2d:33:21:4e:a0:54:93:be:d1:9a:03:c3:db:73:0a: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A2:F7:0F:A4:2D:59:B7:66:77:5A:FA:DE:D8:E2:91:EA:B5:AD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:46:5a:f7:a0:f5:b7:92:a8:ef:30:af:56:98:70:13:1a:53: 0f:a4:93:0e:9e:fc:2d:76:e5:42:1f:70:8e:17:63:3e:eb:8e: 75:92:80:87:a5:05:0d:2b:8d:ab:c5:7f:3a:da:96:aa:36:a1: c7:83:18:02:cc:ea:42:26:55:29:0a:85:4d:12:26:8c:55:04: be:e4:30:4f:20:c2:fb:5e:49:bb:81:db:12:72:5e:51:2c:0f: 9b:a4:1e:a3:06:1e:d2:43:88:18:dd:fc:4b:ca:25:4d:33:43: b0:4a:f0:dd:48:b9:6b:8f:60:62:36:2f:39:ce:e5:1b:48:48: a7:66:4b:d7:f3:e0:93:6f:24:86:72:1c:65:73:5c:ca:60:ba: 12:81:c5:35:cc:b3:60:45:50:12:57:2f:e0:aa:8b:03:2e:c4: 38:8b:f0:18:ae:66:03:e2:57:06:9e:a0:a2:db:70:c7:ce:bd: b6:90:e2:26:7b:39:07:7e:98:98:a2:57:30:29:70:35:2c:2b: 03:7d:2a:2e:4d:4b:b2:c7:59:cc:5d:9a:29:e3:bd:a6:2b:9c: 94:18:ba:a9:4e:03:a9:ed:58:49:8d:fd:71:48:9b:0f:c1:04: 08:cf:af:a4:13:84:cc:28:ce:8c:2e:4d:dd:6b:1b:dc:f6:e6: 0a:4b:22:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearAXuYSsE5mV62wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MzNjMzJlYmEtYmQ5My00MWRmLTlhNGEtZjUyZWU3NTNjODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCpYmmvlBwihipw4AWtSJnpWP41yblvXw/3x zg3abqC5u9na8VR4n2K/4PQUSzIrNTdQSOWOM6XQXerBHi5Z2MadMfFgMtytDRgP LEvoF87fCa0RNGqyvNXswCWkzP1y3VTfAUONqqrzF+P7eBA/eswwc7M4ogv8Hz3+ lBQ16ql9Ge1kPecYrGhCYg1YSy9MNoioqckCsOy4ETJy9eXa5dhCXATzgylqsJDW 3Xf+5XCkGJLwJ5A172wgN01LVknNPkdRlcZSe662IGA0ZH4+VgOsOrHYGL5enfva UUA1/CSCSsx6OjI1KXFuF1UYdhAtMyFOoFSTvtGaA8Pbcwp0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWi9w+kLVm3Znda+t7Y4pHqta0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU1NzVmOTEtYzVmYS0z YzUzLWFjZTEtNWVkN2FjMjBiNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANGWveg9beSqO8wr1aYcBMaUw+kkw6e/C125UIfcI4XYz7rjnWSgIel BQ0rjavFfzralqo2oceDGALM6kImVSkKhU0SJoxVBL7kME8gwvteSbuB2xJyXlEs D5ukHqMGHtJDiBjd/EvKJU0zQ7BK8N1IuWuPYGI2LznO5RtISKdmS9fz4JNvJIZy HGVzXMpguhKBxTXMs2BFUBJXL+CqiwMuxDiL8BiuZgPiVwaeoKLbcMfOvbaQ4iZ7 OQd+mJiiVzApcDUsKwN9Ki5NS7LHWcxdminjvaYrnJQYuqlOA6ntWEmN/XFImw/B BAjPr6QThMwozowuTd1rG9z25gpLIpE= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:15 2024 by rpki-client on console-fra.rpki-client.org