$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa File: 86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa (raw, json) Hash identifier: SsThMOvXEtWH60NtnWF2ienQOlWQPDKDpWWvWY+oWL4= Subject key identifier: 62:CC:6C:EE:D2:88:68:58:27:D4:C2:4C:0B:0D:C1:E6:62:41:93:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C8DA00C88D684B22B8794000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.200.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:da:00:c8:8d:68:4b:22:b8:79:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=43f54da9-4aae-4a79-bcf6-973e9b971a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:82:b0:cd:86:a2:90:32:e4:e1:99:56:2c: a4:cc:de:6a:67:8d:b8:39:5a:67:4a:ba:72:c5:6e: 4c:3a:3c:15:80:12:4c:1b:87:30:fe:f6:d7:94:01: fd:7c:f1:a0:c8:14:42:9f:cb:24:87:92:ca:57:ff: 73:1b:24:33:a4:f3:47:cd:7f:a9:f6:cf:dd:87:0b: 8c:79:8d:17:ac:27:ed:f7:09:ad:37:67:ad:16:68: 12:b9:97:6b:a2:fb:7a:43:0c:ba:ce:21:fc:75:70: 5d:3f:31:a6:dc:38:6f:48:26:4e:03:c2:4e:a0:e6: 78:a1:bd:ea:3b:59:15:ff:0f:ce:4d:21:07:01:77: 00:f6:f2:d0:58:16:33:93:fb:2f:9f:fa:12:0e:82: 8d:8f:68:d6:9a:e0:61:84:68:3c:07:4f:f0:2a:e7: 30:59:2d:08:a4:9e:20:24:36:81:67:6e:56:20:4c: a8:ee:dc:3f:91:fa:12:7a:6c:3f:d2:d5:be:47:a5: 34:ef:d7:43:b8:a5:32:e9:e9:c0:4d:2c:8f:87:8e: 91:5d:34:9d:2f:49:5e:ff:4e:f1:4c:7c:6c:dd:53: 0c:c8:e5:f7:af:b3:cd:c1:aa:0c:eb:ff:36:ca:68: da:57:22:9d:d7:ab:7f:f6:5d:0a:73:74:17:93:af: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:6C:EE:D2:88:68:58:27:D4:C2:4C:0B:0D:C1:E6:62:41:93:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86b1a190-3178-39ad-b3a8-0ff69b33ba3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:25:56:4f:96:9f:65:a1:14:36:47:9c:d1:cd:1b:77:50:6b: 06:f6:fb:b5:05:e4:10:84:d8:d7:7b:4d:39:8d:7c:fa:af:9f: 64:ba:19:c4:e2:b6:b2:d1:1f:13:5d:80:8c:11:9a:40:83:b7: 65:42:28:34:4e:14:2f:c9:22:bf:c7:51:84:a2:27:da:ad:81: 3c:ef:64:cb:56:61:82:0b:9a:b6:3d:6d:97:1b:00:3d:5a:f1: 29:21:3b:91:17:8b:cc:7c:9f:19:1e:8e:c1:01:39:34:35:48: 2a:89:72:5a:bf:b9:80:47:cc:79:3e:6b:58:30:7c:7f:cf:28: 43:6d:99:6e:df:e1:8d:57:99:c7:f7:ed:bd:25:c4:a7:58:de: 02:f2:e2:f5:75:1d:ab:ca:54:a7:60:07:9d:0f:fc:02:8c:5f: 0e:73:66:80:d5:16:cc:2d:26:ff:93:60:cb:44:85:1e:8a:d4: 5a:71:02:6f:d5:09:c6:e0:21:23:c0:b1:e9:d2:9f:ed:ff:2b: 4e:23:ca:31:12:ac:2a:b3:34:56:d2:9d:cc:c3:40:4b:3b:5b: 20:8e:79:28:3b:a3:43:c1:3e:0d:23:90:0d:37:0d:18:56:ce: 8f:2a:8f:4f:b0:46:98:66:4e:d0:3e:ef:57:8b:ec:7d:85:35: c9:b1:43:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2gDIjWhLIrh5QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NDNmNTRkYTktNGFhZS00YTc5LWJjZjYtOTczZTliOTcxYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MWCsM2GopAy5OGZViykzN5qZ424OVpnSrpy xW5MOjwVgBJMG4cw/vbXlAH9fPGgyBRCn8skh5LKV/9zGyQzpPNHzX+p9s/dhwuM eY0XrCft9wmtN2etFmgSuZdrovt6Qwy6ziH8dXBdPzGm3DhvSCZOA8JOoOZ4ob3q O1kV/w/OTSEHAXcA9vLQWBYzk/svn/oSDoKNj2jWmuBhhGg8B0/wKucwWS0IpJ4g JDaBZ25WIEyo7tw/kfoSemw/0tW+R6U079dDuKUy6enATSyPh46RXTSdL0le/07x THxs3VMMyOX3r7PNwaoM6/82ymjaVyKd16t/9l0Kc3QXk684/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLMbO7SiGhYJ9TCTAsNweZiQZNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZiMWExOTAtMzE3OC0z OWFkLWIzYTgtMGZmNjliMzNiYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABclVk+Wn2WhFDZHnNHNG3dQawb2+7UF5BCE2Nd7TTmNfPqvn2S6GcTi trLRHxNdgIwRmkCDt2VCKDROFC/JIr/HUYSiJ9qtgTzvZMtWYYILmrY9bZcbAD1a 8SkhO5EXi8x8nxkejsEBOTQ1SCqJclq/uYBHzHk+a1gwfH/PKENtmW7f4Y1Xmcf3 7b0lxKdY3gLy4vV1HavKVKdgB50P/AKMXw5zZoDVFswtJv+TYMtEhR6K1FpxAm/V CcbgISPAsenSn+3/K04jyjESrCqzNFbSnczDQEs7WyCOeSg7o0PBPg0jkA03DRhW zo8qj0+wRphmTtA+71eL7H2FNcmxQ1g= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:10 2024 by rpki-client on console-fra.rpki-client.org