$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/932b5c9e-ba52-3af8-b805-31c34780bc4c.roa File: 932b5c9e-ba52-3af8-b805-31c34780bc4c.roa (raw, json) Hash identifier: YpKCv9xwdhLOZ8bPOxhYX7utEzmhUEKA6Yq/5fi6J7s= Subject key identifier: 0E:47:B8:2C:86:2B:39:85:F0:08:09:B8:08:6E:AA:E7:23:8C:6B:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A0F8C71964785BE9E16600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/932b5c9e-ba52-3af8-b805-31c34780bc4c.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 7545 IP address blocks: 23.0.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f8:c7:19:64:78:5b:e9:e1:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=31481ad7-8ed9-42d2-b502-da6f42bab23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:f5:5d:45:dd:d8:c4:a9:08:95:08:83:27: b9:cf:43:78:c1:23:09:2c:45:27:d5:76:2f:66:3e: 7a:81:3b:5f:2d:50:e0:7d:ea:7d:b7:0c:58:d7:f1: ac:65:aa:eb:7e:2e:11:74:b1:d0:9a:84:f9:0c:e2: ad:60:3b:2f:64:cd:7a:ec:ea:7f:56:4e:24:72:b2: 44:92:75:e7:11:d2:73:b4:37:fd:17:f5:6d:ff:97: 1d:3b:c0:8a:4f:21:ec:81:bd:f5:7b:66:8a:ca:8a: 68:cf:08:e9:ca:50:6e:e1:39:14:d8:aa:2b:27:dc: 8e:04:5d:78:5c:ba:28:29:be:0d:dd:38:3c:67:b2: da:62:49:ef:58:97:2c:1a:b3:49:d2:76:15:b2:bd: c4:9d:49:61:73:23:07:d7:91:eb:ef:7f:e7:e6:23: ca:a6:72:19:6d:ef:20:2c:a2:3f:d9:b7:70:92:7b: 14:19:36:8c:39:95:63:8f:42:1e:b1:c4:f7:4d:4d: b8:16:00:95:14:7d:b7:23:6f:41:39:8a:c4:b0:7a: e3:61:20:71:76:6d:1b:c1:7d:33:94:05:69:1b:7d: be:77:c0:26:3c:1d:71:b0:76:db:60:26:d8:34:79: 3f:bf:cc:01:3d:44:3d:6c:e7:03:e9:54:c2:eb:62: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:47:B8:2C:86:2B:39:85:F0:08:09:B8:08:6E:AA:E7:23:8C:6B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/932b5c9e-ba52-3af8-b805-31c34780bc4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e4:5e:8a:2d:ed:ca:6e:07:8b:49:42:5a:ec:12:62:2b:a2: 80:47:d9:08:6e:5a:69:3d:05:06:91:63:8f:9e:93:8a:3c:0b: 41:5b:2e:a9:73:02:8a:54:c3:a5:7e:60:c6:d3:f3:6d:4d:56: 41:e0:6d:80:bc:f7:35:ad:4b:ec:8b:6b:dd:0d:ed:eb:b7:20: d9:4f:7a:a1:55:d2:51:8c:aa:98:60:ee:ab:20:fe:ce:51:57: f2:f0:1e:bd:b4:d9:14:b4:1b:17:db:6b:20:55:8c:3e:e8:d9: 96:b1:1f:af:bd:1e:a9:51:bb:da:04:13:07:52:4c:52:53:ce: 91:34:90:0e:bd:41:c0:4b:96:71:ed:e6:bd:18:3e:95:9d:89: fb:fc:32:a6:b3:7b:a8:22:85:47:58:5a:18:0e:64:19:00:60: 70:75:93:d0:c7:dc:0c:5a:40:5e:75:58:4a:d8:01:a2:16:0e: 62:c0:9d:62:f7:10:7a:6b:52:cc:24:21:ad:9a:13:1d:13:98: 3f:cb:38:fe:f8:a8:e0:6e:b9:d8:69:ac:92:cd:55:fd:09:7d: 7f:c8:61:95:f9:c7:58:51:71:6e:ee:73:2c:ea:3c:35:ab:05: fd:01:84:25:05:64:77:bb:11:95:38:fd:1d:07:90:e5:13:1d: cc:20:00:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPjHGWR4W+nhZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk MzE0ODFhZDctOGVkOS00MmQyLWI1MDItZGE2ZjQyYmFiMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKD1XUXd2MSpCJUIgye5z0N4wSMJLEUn1XYv Zj56gTtfLVDgfep9twxY1/GsZarrfi4RdLHQmoT5DOKtYDsvZM167Op/Vk4kcrJE knXnEdJztDf9F/Vt/5cdO8CKTyHsgb31e2aKyopozwjpylBu4TkU2KorJ9yOBF14 XLooKb4N3Tg8Z7LaYknvWJcsGrNJ0nYVsr3EnUlhcyMH15Hr73/n5iPKpnIZbe8g LKI/2bdwknsUGTaMOZVjj0IescT3TU24FgCVFH23I29BOYrEsHrjYSBxdm0bwX0z lAVpG32+d8AmPB1xsHbbYCbYNHk/v8wBPUQ9bOcD6VTC62KUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5HuCyGKzmF8AgJuAhuqucjjGudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTMyYjVjOWUtYmE1Mi0z YWY4LWI4MDUtMzFjMzQ3ODBiYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLkXoot7cpuB4tJQlrsEmIrooBH2QhuWmk9BQaRY4+ek4o8C0FbLqlz AopUw6V+YMbT821NVkHgbYC89zWtS+yLa90N7eu3INlPeqFV0lGMqphg7qsg/s5R V/LwHr202RS0GxfbayBVjD7o2ZaxH6+9HqlRu9oEEwdSTFJTzpE0kA69QcBLlnHt 5r0YPpWdifv8Mqaze6gihUdYWhgOZBkAYHB1k9DH3AxaQF51WErYAaIWDmLAnWL3 EHprUswkIa2aEx0TmD/LOP74qOBuudhprJLNVf0JfX/IYZX5x1hRcW7ucyzqPDWr Bf0BhCUFZHe7EZU4/R0HkOUTHcwgAH8= -----END CERTIFICATE-----Generated at Fri Nov 22 16:03:01 2024 by rpki-client on console-fra.rpki-client.org