$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa File: 861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa (raw, json) Hash identifier: 89BpHc9g4WNTbqrpZJ6MSSed0TOXOrzL1IdjhhwJbc0= Subject key identifier: F1:E9:57:55:B5:CB:FC:86:37:EF:C3:6B:4E:69:44:86:35:6A:DC:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847F2BA3B4D31AC6D7B7858B780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 16625 IP address blocks: 23.43.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:3b:4d:31:ac:6d:7b:78:58:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=51a39265-fee0-412b-bfb0-b4ba717c2a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:71:56:10:8b:95:4b:83:e3:62:de:fe:b3: 9f:38:4f:e8:a2:52:ab:c5:d0:c6:9d:8b:46:a8:94: 75:6c:69:c8:c8:7d:de:53:8d:1c:86:59:40:90:74: ed:ac:4e:f8:fe:71:32:41:00:78:8c:ca:3f:bd:65: 86:e4:9c:b2:04:48:8e:eb:8d:c7:cf:c0:85:0f:ff: d8:f8:10:74:6e:9b:73:dd:18:a2:e1:3a:94:34:aa: 00:56:4a:d0:8f:79:f4:c1:90:10:70:55:86:6b:b4: 98:83:74:ff:a9:7a:29:81:7c:e1:b1:3d:c9:96:35: ba:9e:68:8a:d5:0a:7e:6a:0e:28:60:42:45:aa:37: ad:10:14:51:61:63:73:c1:b6:0c:d0:c8:eb:1b:c4: a3:fd:21:ea:7d:73:33:7e:1d:c4:5a:e2:66:6c:5a: 37:fe:37:23:60:49:6a:f6:f2:24:2f:45:26:2b:f7: 8c:07:de:43:9e:c4:09:ba:6a:cd:e2:5b:44:83:d5: 7f:89:eb:a4:a3:a5:0b:2f:59:da:8d:9d:d6:88:f5: b6:38:44:a0:3c:6b:e7:bb:1d:1c:9f:42:a5:6d:e6: 44:21:c6:21:58:af:b1:c8:c0:22:fc:21:86:15:e1: 44:f2:1d:77:17:2d:81:ba:be:5f:6a:70:52:17:99: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E9:57:55:B5:CB:FC:86:37:EF:C3:6B:4E:69:44:86:35:6A:DC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c3:40:9d:55:5b:8b:e4:cc:bd:1d:25:c7:1e:4e:fd:cf:f6: f7:fa:57:b9:7e:7f:65:8b:0c:84:aa:8d:ed:3f:54:ce:0f:14: 74:18:19:ea:0e:e3:39:53:f3:c5:1c:d2:bb:99:13:12:c1:c9: 16:e2:86:c3:07:48:49:16:99:7f:b2:a0:fd:1b:42:d9:1c:72: 37:04:e1:c0:3f:dd:d5:28:41:17:09:fe:18:35:04:c1:36:a2: a7:fb:37:c6:02:0d:1e:33:fa:eb:cc:b2:cc:37:1a:4c:e4:04: e8:62:02:ec:2e:a4:b5:91:46:c7:4e:2f:3c:fa:52:b3:87:a5: 05:e7:58:6c:60:96:1a:b1:a8:3d:e4:0d:94:a9:55:d4:9f:23: 25:8c:b8:dd:80:5b:77:6c:f7:a8:19:58:4e:b3:f5:67:d4:58: 3f:95:ce:66:89:eb:97:3d:70:ef:c0:1c:71:b6:ca:9f:56:9d: 44:1f:b9:69:ac:98:ab:09:a6:cd:7f:35:72:39:a2:75:ad:0f: 2e:82:e3:68:7d:eb:30:87:6b:7d:79:96:e2:bf:e0:e8:aa:8e: f2:c7:5e:1c:33:ff:c4:c7:b1:95:d9:2f:c4:f5:e6:c1:68:dc: 5a:39:5e:ba:5d:3d:0b:86:21:dc:b6:fb:f0:d8:83:5c:2c:66: 19:45:7f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujtNMaxte3hYt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk NTFhMzkyNjUtZmVlMC00MTJiLWJmYjAtYjRiYTcxN2MyYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg5xVhCLlUuD42Le/rOfOE/oolKrxdDGnYtG qJR1bGnIyH3eU40chllAkHTtrE74/nEyQQB4jMo/vWWG5JyyBEiO643Hz8CFD//Y +BB0bptz3Rii4TqUNKoAVkrQj3n0wZAQcFWGa7SYg3T/qXopgXzhsT3JljW6nmiK 1Qp+ag4oYEJFqjetEBRRYWNzwbYM0MjrG8Sj/SHqfXMzfh3EWuJmbFo3/jcjYElq 9vIkL0UmK/eMB95DnsQJumrN4ltEg9V/ieuko6ULL1najZ3WiPW2OESgPGvnux0c n0KlbeZEIcYhWK+xyMAi/CGGFeFE8h13Fy2Bur5fanBSF5myJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHpV1W1y/yGN+/Da05pRIY1atzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxY2NiNTYtYmNjNS0z MWUzLWIyYTMtNDIwYjRjMGIzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbDQJ1VW4vkzL0dJcceTv3P9vf6V7l+f2WLDISqje0/VM4PFHQYGeoO 4zlT88Uc0ruZExLByRbihsMHSEkWmX+yoP0bQtkccjcE4cA/3dUoQRcJ/hg1BME2 oqf7N8YCDR4z+uvMssw3GkzkBOhiAuwupLWRRsdOLzz6UrOHpQXnWGxglhqxqD3k DZSpVdSfIyWMuN2AW3ds96gZWE6z9WfUWD+VzmaJ65c9cO/AHHG2yp9WnUQfuWms mKsJps1/NXI5onWtDy6C42h96zCHa315luK/4OiqjvLHXhwz/8THsZXZL8T15sFo 3Fo5XrpdPQuGIdy2+/DYg1wsZhlFf28= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:31 2024 by rpki-client on console-ams.rpki-client.org