$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a425b15-1fdf-3633-8570-ddaa5dbf3d3e.roa File: 8a425b15-1fdf-3633-8570-ddaa5dbf3d3e.roa (raw, json) Hash identifier: /lXAgyuTvB0aN5yqPiWpKwWFldp87UEE6pk6DC7D6LY= Subject key identifier: F8:C3:F1:86:BF:80:5C:5D:AC:7E:32:53:7B:20:59:76:B3:00:35:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CA3F966CCE3097E352B74A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a425b15-1fdf-3633-8570-ddaa5dbf3d3e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.202.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:96:6c:ce:30:97:e3:52:b7:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=409be58c-865a-4337-9c97-6143310ca541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:8a:69:b7:02:d5:87:b4:95:72:c9:5c:1b: ae:a2:73:c5:4a:7f:b5:0e:eb:20:4b:10:8e:68:31: 06:9f:18:21:12:e7:f0:53:5e:a7:af:62:b8:40:63: 46:00:e3:7c:51:02:37:f7:e2:64:1e:73:d3:51:f7: 93:b5:a9:50:97:06:cc:e2:22:ec:d8:a6:91:b1:ee: dc:17:87:e2:ff:d4:1e:3e:0c:c5:2f:ee:2c:2f:81: f5:28:f2:41:f8:48:39:2b:e7:1e:2a:93:a4:85:82: 43:c2:f9:01:44:2b:01:e4:e7:bf:33:44:06:1b:9c: 70:39:34:bb:68:45:08:e2:93:fe:4e:e5:e3:92:38: f5:d6:2e:af:95:bb:23:51:9a:8f:0b:8d:3d:b2:b0: 41:33:c9:b4:a7:dc:53:15:a5:20:98:29:94:1f:32: f0:32:43:f2:50:ac:d2:23:9f:7b:16:5a:3a:8f:71: d1:57:ea:96:a0:5b:c0:af:41:29:97:78:f5:0f:17: ad:1e:05:ad:90:f6:6e:da:a2:6b:40:54:bc:17:44: fe:94:3c:bb:ee:c1:aa:04:a1:0d:26:da:a1:df:dc: a9:6a:36:5f:ee:38:6a:a2:ec:69:64:68:2c:44:10: a2:b5:13:3f:2f:c7:04:f7:67:5b:4f:e9:14:fd:17: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C3:F1:86:BF:80:5C:5D:AC:7E:32:53:7B:20:59:76:B3:00:35:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a425b15-1fdf-3633-8570-ddaa5dbf3d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f1:69:b2:07:59:41:fa:d5:d3:1c:aa:a4:82:3c:30:d1:5e: 9f:d8:48:7a:53:eb:54:3d:70:19:a1:86:bf:94:7f:97:92:fc: ff:6a:72:a8:9e:e1:40:f2:74:c7:a2:a9:d4:df:87:ed:dd:26: f3:a5:58:65:71:24:c9:56:0c:a5:57:a6:88:78:5a:65:c3:e9: d5:c7:51:73:64:ed:33:b1:5f:37:c6:e1:d0:1c:04:f7:23:43: 4f:89:bf:9a:ba:de:de:0b:a1:90:cd:f4:3b:e3:b8:ac:8a:0b: 04:31:6c:91:80:9f:8c:89:36:5e:cc:c6:97:8f:3a:75:d1:9e: 49:7b:2d:04:f4:0c:a4:eb:c9:d4:d5:86:67:f7:18:19:7b:23: c2:29:1e:e1:63:f4:3e:e3:0f:dc:f8:3e:33:02:40:17:06:82: b7:7d:51:b4:36:1f:32:97:47:a4:f1:2b:e4:8e:47:8d:d2:4a: 68:2e:ec:8f:23:d1:eb:16:c3:93:f7:30:24:cf:36:00:79:f6: 6c:54:b6:ae:2c:fd:f2:e8:44:8f:54:c2:72:09:6c:3c:b0:c5: f0:36:3c:a5:de:95:c0:39:5e:c1:4b:b7:11:39:32:14:4d:31: b1:40:56:37:8e:cf:aa:10:13:57:8f:a3:5d:2a:8e:09:1b:69: 4a:d0:0d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP5ZszjCX41K3SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NDA5YmU1OGMtODY1YS00MzM3LTljOTctNjE0MzMxMGNhNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+KabcC1Ye0lXLJXBuuonPFSn+1DusgSxCO aDEGnxghEufwU16nr2K4QGNGAON8UQI39+JkHnPTUfeTtalQlwbM4iLs2KaRse7c F4fi/9QePgzFL+4sL4H1KPJB+Eg5K+ceKpOkhYJDwvkBRCsB5Oe/M0QGG5xwOTS7 aEUI4pP+TuXjkjj11i6vlbsjUZqPC409srBBM8m0p9xTFaUgmCmUHzLwMkPyUKzS I597Flo6j3HRV+qWoFvAr0Epl3j1DxetHgWtkPZu2qJrQFS8F0T+lDy77sGqBKEN Jtqh39ypajZf7jhqouxpZGgsRBCitRM/L8cE92dbT+kU/Rdt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjD8Ya/gFxdrH4yU3sgWXazADUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE0MjViMTUtMWZkZi0z NjMzLTg1NzAtZGRhYTVkYmYzZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrxabIHWUH61dMcqqSCPDDRXp/YSHpT61Q9cBmhhr+Uf5eS/P9qcqie 4UDydMeiqdTfh+3dJvOlWGVxJMlWDKVXpoh4WmXD6dXHUXNk7TOxXzfG4dAcBPcj Q0+Jv5q63t4LoZDN9DvjuKyKCwQxbJGAn4yJNl7MxpePOnXRnkl7LQT0DKTrydTV hmf3GBl7I8IpHuFj9D7jD9z4PjMCQBcGgrd9UbQ2HzKXR6TxK+SOR43SSmgu7I8j 0esWw5P3MCTPNgB59mxUtq4s/fLoRI9UwnIJbDywxfA2PKXelcA5XsFLtxE5MhRN MbFAVjeOz6oQE1ePo10qjgkbaUrQDW0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:05 2024 by rpki-client on console-fra.rpki-client.org