$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930f9a84-f1c2-3b33-b29e-9a989ae1685e.roa File: 930f9a84-f1c2-3b33-b29e-9a989ae1685e.roa (raw, json) Hash identifier: mcYOZwiCMCa00LIjzOg/vBIrU+N3J7iZuV96L6J58hA= Subject key identifier: 4C:96:CF:E3:D3:1E:4E:0A:D4:D9:37:43:1E:4B:10:E3:17:89:50:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478F8136489C453A9E37EAFEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930f9a84-f1c2-3b33-b29e-9a989ae1685e.roa Signing time: Wed 16 Oct 2024 13:00:43 +0000 ROA not before: Wed 16 Oct 2024 13:00:43 +0000 ROA not after: Tue 14 Jan 2025 14:00:43 +0000 asID: 20940 IP address blocks: 23.35.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:81:36:48:9c:45:3a:9e:37:ea:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:43 2024 GMT Not After : Jan 14 14:00:43 2025 GMT Subject: CN=05c3e976-e1c4-4be4-af5b-fec67a03114b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:af:7c:cd:1d:18:20:6d:8a:7c:75:67:85: 27:f7:a9:75:e0:5c:f1:42:6a:7e:51:c4:03:ad:8a: c5:2f:32:f5:f0:9e:54:64:59:97:ba:9e:0a:da:a3: 8e:00:f0:fa:09:0e:e1:f0:9e:59:40:fa:40:ac:03: 28:67:45:16:3d:5b:e2:a9:1d:fb:ce:9b:72:43:94: d2:78:be:a6:79:72:b2:15:22:16:1f:74:d2:b3:c5: 40:e4:a5:b9:fd:3a:98:d4:60:5e:ea:6c:ee:cc:a0: e2:03:58:8a:bb:21:1c:03:9e:b6:f5:b9:da:37:f6: 7d:00:f9:3b:4d:0a:03:66:b1:1b:a2:29:cc:d0:27: 75:1d:48:a2:d1:78:8b:07:25:5c:d3:ff:34:b5:f6: 38:49:d0:b1:41:00:4c:40:70:db:0c:40:e4:d5:28: 40:0a:04:b7:e9:06:e0:bb:12:60:eb:84:0d:9b:ca: ac:82:c9:05:15:6c:41:31:e9:16:5e:e6:bd:1a:94: 61:87:27:00:1e:44:40:b8:c0:65:aa:57:dc:f2:fa: 7f:79:16:77:f7:1b:c8:25:94:41:ad:3f:d3:96:9b: 98:ea:0e:bf:11:55:76:3e:52:20:a1:40:4b:39:19: 5f:e4:93:b4:c7:81:ab:c8:1f:65:dc:f5:ce:06:15: 38:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:96:CF:E3:D3:1E:4E:0A:D4:D9:37:43:1E:4B:10:E3:17:89:50:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930f9a84-f1c2-3b33-b29e-9a989ae1685e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e3:72:c1:6c:9a:43:4f:00:d1:eb:fb:b9:04:77:04:f0:1c: 5a:cd:08:97:d8:20:da:ed:a8:c8:76:71:a6:c4:d2:41:f7:8d: 50:0f:e3:ef:65:1b:af:27:65:40:78:ba:07:93:d5:46:8d:73: d6:9b:85:94:e4:00:6f:78:88:00:31:95:54:dd:f3:1a:17:95: 91:48:56:c7:38:83:12:27:8d:ab:ee:f6:3b:9d:37:d4:16:23: e3:3f:ec:55:0e:aa:e1:89:78:f2:58:48:ce:10:21:77:c7:c8: 62:6a:1f:20:41:4e:3c:8a:33:18:7c:4d:68:5b:55:70:ef:a3: 22:39:53:61:dd:19:46:d4:6f:d2:dd:9f:e9:07:da:f6:f7:69: fc:50:9f:3f:2a:af:28:ae:42:0a:21:da:80:2c:cf:54:6d:01: 57:cc:f6:fb:27:8c:4a:96:c4:ca:90:7d:70:7c:b5:73:e9:56: ef:a3:ef:bf:20:b0:01:e0:71:4d:07:85:70:db:49:c3:5d:3b: 2f:49:a2:17:7a:2f:2f:6d:66:8c:21:12:8b:b4:a4:e5:32:da: 2c:db:12:71:c0:62:1d:3d:31:3f:5f:d3:b4:c8:dc:f9:c9:a8: b1:77:57:19:03:3e:75:49:5e:f7:8d:f4:29:fd:38:d8:7d:9b: 31:26:e6:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgTZInEU6njfq/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk MDVjM2U5NzYtZTFjNC00YmU0LWFmNWItZmVjNjdhMDMxMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWivfM0dGCBtinx1Z4Un96l14FzxQmp+UcQD rYrFLzL18J5UZFmXup4K2qOOAPD6CQ7h8J5ZQPpArAMoZ0UWPVviqR37zptyQ5TS eL6meXKyFSIWH3TSs8VA5KW5/TqY1GBe6mzuzKDiA1iKuyEcA5629bnaN/Z9APk7 TQoDZrEboinM0Cd1HUii0XiLByVc0/80tfY4SdCxQQBMQHDbDEDk1ShACgS36Qbg uxJg64QNm8qsgskFFWxBMekWXua9GpRhhycAHkRAuMBlqlfc8vp/eRZ39xvIJZRB rT/TlpuY6g6/EVV2PlIgoUBLORlf5JO0x4GryB9l3PXOBhU4wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyWz+PTHk4K1Nk3Qx5LEOMXiVCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTMwZjlhODQtZjFjMi0z YjMzLWIyOWUtOWE5ODlhZTE2ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPjcsFsmkNPANHr+7kEdwTwHFrNCJfYINrtqMh2cabE0kH3jVAP4+9l G68nZUB4ugeT1UaNc9abhZTkAG94iAAxlVTd8xoXlZFIVsc4gxInjavu9judN9QW I+M/7FUOquGJePJYSM4QIXfHyGJqHyBBTjyKMxh8TWhbVXDvoyI5U2HdGUbUb9Ld n+kH2vb3afxQnz8qryiuQgoh2oAsz1RtAVfM9vsnjEqWxMqQfXB8tXPpVu+j778g sAHgcU0HhXDbScNdOy9Johd6Ly9tZowhEou0pOUy2izbEnHAYh09MT9f07TI3PnJ qLF3VxkDPnVJXveN9Cn9ONh9mzEm5mo= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:16 2024 by rpki-client on console-fra.rpki-client.org