$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa File: 9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa (raw, json) Hash identifier: pIOG30Wpv80NF8LCrEWrm3FaFA1atzFweq0KzH3kvag= Subject key identifier: 10:AA:C6:BA:15:CF:3B:05:68:AB:9D:6F:A6:76:CC:2C:87:1D:BC:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF67127557287B83AE6F080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 9498 IP address blocks: 23.35.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:71:27:55:72:87:b8:3a:e6:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=475ca19d-74de-4b0f-86a2-43ed3ed9f6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:fa:36:97:8c:75:63:d8:c8:01:a0:44:36: ad:79:d1:98:46:7f:9c:90:1f:c6:22:ec:be:a2:23: de:36:d3:f1:01:7d:11:8f:2f:13:7a:a1:f5:e1:01: 79:20:69:33:36:ae:39:0b:e0:da:bd:d3:0f:30:47: ce:18:a2:47:49:81:46:19:5a:ce:2c:68:88:45:bb: 15:d1:67:8a:c8:2c:d3:3c:aa:ab:f2:aa:f6:c1:07: c6:aa:2f:32:f3:94:97:b9:1e:0b:e2:f8:17:0d:15: 38:8c:05:2e:3c:0c:0c:6c:e3:53:ab:7f:33:8b:6b: ed:f5:94:ba:64:e1:71:eb:ff:da:90:d0:e0:02:81: a6:c7:dd:a0:25:55:7d:0d:df:17:18:98:42:7e:37: 52:e9:09:c7:6c:29:63:c7:06:0c:7c:c2:27:e5:fc: 39:e3:b3:4d:4f:6e:15:b4:f0:00:6d:b5:21:85:4d: 01:53:74:41:77:7f:17:2c:6e:e5:42:96:49:da:2e: 6b:eb:02:4c:3c:2b:6d:73:05:f3:10:9d:06:98:d4: 59:61:d1:9f:65:8b:ec:83:6a:c5:d2:f2:c5:e7:a1: 24:a4:c9:3a:16:4c:cd:d7:e4:78:a4:cc:b9:59:e8: cb:ce:a5:9a:a0:e0:fc:d4:89:bf:18:5f:fd:dc:b8: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:C6:BA:15:CF:3B:05:68:AB:9D:6F:A6:76:CC:2C:87:1D:BC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:72:e2:6f:90:a2:65:2e:a1:0d:70:ef:1f:32:d6:e5:7d:cb: bd:42:5b:d1:86:be:1b:dd:32:39:fc:77:6e:72:21:6e:14:48: c1:95:fc:d1:eb:2f:86:e7:c0:48:c1:1e:f4:24:3f:ac:dd:9d: 5f:b1:ea:e0:96:36:ab:7d:19:01:f0:24:d5:84:0c:02:95:75: d3:2a:e2:cc:54:72:a4:b4:71:dc:a0:0e:da:0b:d0:dd:85:a0: 61:fd:77:14:7c:e4:07:2d:3c:bb:65:42:65:94:98:cf:ec:31: e2:8c:2c:f0:49:9e:0a:8d:1c:52:e1:ee:c0:0e:eb:de:05:b9: f2:82:05:8c:78:8f:26:64:c3:6a:ac:d0:06:a8:e8:d3:a2:63: af:eb:6a:72:5d:7e:05:34:dd:3b:75:79:8a:31:b4:71:8c:6c: 0e:e7:62:e2:d7:35:1b:6d:95:85:65:33:dc:20:ac:e2:3b:e6: 55:b6:33:e0:9e:b0:52:91:10:78:52:a0:06:b0:dc:49:af:55: bc:66:55:be:40:31:36:f3:a9:2d:5a:f2:57:95:c4:e9:9f:ae: 3a:f5:26:1a:bd:a1:97:3c:ca:fe:53:e8:bf:4d:d4:8b:94:de: bc:d1:27:7a:8d:e1:1b:f8:a1:95:b6:55:b4:a8:c1:e8:49:40: 68:31:76:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79nEnVXKHuDrm8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NDc1Y2ExOWQtNzRkZS00YjBmLTg2YTItNDNlZDNlZDlmNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFv6NpeMdWPYyAGgRDatedGYRn+ckB/GIuy+ oiPeNtPxAX0Rjy8TeqH14QF5IGkzNq45C+DavdMPMEfOGKJHSYFGGVrOLGiIRbsV 0WeKyCzTPKqr8qr2wQfGqi8y85SXuR4L4vgXDRU4jAUuPAwMbONTq38zi2vt9ZS6 ZOFx6//akNDgAoGmx92gJVV9Dd8XGJhCfjdS6QnHbCljxwYMfMIn5fw547NNT24V tPAAbbUhhU0BU3RBd38XLG7lQpZJ2i5r6wJMPCttcwXzEJ0GmNRZYdGfZYvsg2rF 0vLF56EkpMk6FkzN1+R4pMy5WejLzqWaoOD81Im/GF/93LjXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCqxroVzzsFaKudb6Z2zCyHHbyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg2OWViNmEtZmEzNC0z YzI5LWI3ZTUtZTZjMGY1ZGU1NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINy4m+QomUuoQ1w7x8y1uV9y71CW9GGvhvdMjn8d25yIW4USMGV/NHr L4bnwEjBHvQkP6zdnV+x6uCWNqt9GQHwJNWEDAKVddMq4sxUcqS0cdygDtoL0N2F oGH9dxR85ActPLtlQmWUmM/sMeKMLPBJngqNHFLh7sAO694FufKCBYx4jyZkw2qs 0Aao6NOiY6/ranJdfgU03Tt1eYoxtHGMbA7nYuLXNRttlYVlM9wgrOI75lW2M+Ce sFKREHhSoAaw3EmvVbxmVb5AMTbzqS1a8leVxOmfrjr1Jhq9oZc8yv5T6L9N1IuU 3rzRJ3qN4Rv4oZW2VbSowehJQGgxdgo= -----END CERTIFICATE-----Generated at Tue Nov 26 05:13:08 2024 by rpki-client on console-fra.rpki-client.org