$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa File: a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa (raw, json) Hash identifier: tqQNCSbKF6irI0EJWIm8Inc5mw/O+Z9rM2fAjEANOOg= Subject key identifier: 07:9D:59:14:6D:66:A8:22:1F:A9:38:BD:91:FA:48:77:16:A7:EE:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A1A683BF1E96B429025ECE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa Signing time: Wed 23 Oct 2024 01:00:32 +0000 ROA not before: Wed 23 Oct 2024 01:00:32 +0000 ROA not after: Tue 21 Jan 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.49.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:a6:83:bf:1e:96:b4:29:02:5e:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 01:00:32 2024 GMT Not After : Jan 21 02:00:32 2025 GMT Subject: CN=bd05405a-add4-434b-8b68-51bf05a962b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:98:5a:b7:73:98:bb:51:03:52:9a:62:de: 20:3f:89:ac:3f:3f:c1:23:e4:ef:19:07:db:74:8f: 7e:20:c3:ca:72:f7:6e:84:49:b4:31:90:6a:1e:b1: d7:4a:ab:02:eb:16:de:a3:49:b8:d0:74:b1:80:63: b4:67:5c:c9:13:9d:e1:ef:34:2d:18:39:72:a6:da: de:f1:97:4b:10:09:b9:28:69:c6:21:c4:ce:ff:3e: 0c:09:62:42:72:cd:49:f4:62:4b:18:6c:c6:fe:51: a7:13:76:8c:8e:7f:38:8b:84:4c:51:1a:b1:a9:d0: fa:43:06:5d:37:25:28:77:95:19:63:e3:61:96:be: 6e:be:94:b5:06:4a:24:6d:51:b1:09:c9:57:90:1f: 73:32:b1:5c:d3:97:4c:cc:41:03:87:c7:e2:53:ef: 75:8e:2d:82:cf:73:d8:b6:8d:c5:61:44:dd:d5:79: 83:36:99:a7:3f:48:b9:2d:9a:2a:df:14:2b:36:db: 08:b0:d6:be:ca:7d:73:c9:1f:26:58:ca:91:7f:f5: 29:13:7d:83:3c:07:9b:a2:34:7e:f4:e7:57:d1:b6: 0c:b0:f4:1f:e5:f5:92:38:4d:59:c7:31:5b:29:dc: c7:54:2e:41:f2:9d:c8:ce:96:58:cb:37:df:15:65: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9D:59:14:6D:66:A8:22:1F:A9:38:BD:91:FA:48:77:16:A7:EE:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b4:0b:28:e1:38:01:5a:e2:a3:b0:25:2c:e6:43:a8:9a:9b: f3:91:31:a6:e5:34:b3:83:9f:29:e6:40:c0:c3:bf:fa:23:ec: 27:12:51:74:b6:af:70:1e:fc:cb:08:52:f2:08:a5:29:72:ca: 3e:e2:ee:57:06:b8:76:3f:b0:d2:6c:54:0b:df:9f:3b:f2:7d: 3d:84:b9:52:62:42:f8:0a:b6:9d:0a:b8:01:7a:4b:8e:78:40: fc:34:11:82:8b:94:dd:9c:f9:c2:f4:00:c5:b0:2e:b3:b8:41: e0:62:f3:e6:e4:80:47:ae:21:d9:cb:9e:66:e1:89:54:73:1e: db:58:14:8f:ae:e8:94:34:c2:ee:bf:ca:35:7f:11:17:12:51: 91:a0:fd:74:c5:13:72:34:14:67:1a:ae:08:85:d3:e2:4f:63: e3:d1:15:78:b8:e9:3a:e6:47:cb:a7:6b:2c:13:0c:6e:c6:0b: 0c:ee:34:8a:3e:c6:40:fa:ae:13:12:b8:a6:40:33:58:d9:30: 00:f7:b7:1a:0a:c6:5c:d6:bc:10:66:96:a7:15:16:bb:06:71: 00:c2:b4:a2:77:df:10:04:33:c5:d7:a0:51:b1:ea:05:b4:03: c6:0a:14:1c:f1:aa:ec:19:cc:d4:13:38:bf:a1:0c:45:b1:29: 3a:af:e4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEehpoO/Hpa0KQJezoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMzAxMDAzMloXDTI1MDEyMTAyMDAzMlowLzEtMCsGA1UEAxMk YmQwNTQwNWEtYWRkNC00MzRiLThiNjgtNTFiZjA1YTk2MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2eYWrdzmLtRA1KaYt4gP4msPz/BI+TvGQfb dI9+IMPKcvduhEm0MZBqHrHXSqsC6xbeo0m40HSxgGO0Z1zJE53h7zQtGDlyptre 8ZdLEAm5KGnGIcTO/z4MCWJCcs1J9GJLGGzG/lGnE3aMjn84i4RMURqxqdD6QwZd NyUod5UZY+Nhlr5uvpS1BkokbVGxCclXkB9zMrFc05dMzEEDh8fiU+91ji2Cz3PY to3FYUTd1XmDNpmnP0i5LZoq3xQrNtsIsNa+yn1zyR8mWMqRf/UpE32DPAebojR+ 9OdX0bYMsPQf5fWSOE1ZxzFbKdzHVC5B8p3IzpZYyzffFWWY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAedWRRtZqgiH6k4vZH6SHcWp+52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTA0YTdlODctOWVjOS0z NGJlLWI4ZjEtMWQyYzMwZTA4ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzE+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK0CyjhOAFa4qOwJSzmQ6iam/ORMablNLODnynmQMDDv/oj7CcSUXS2 r3Ae/MsIUvIIpSlyyj7i7lcGuHY/sNJsVAvfnzvyfT2EuVJiQvgKtp0KuAF6S454 QPw0EYKLlN2c+cL0AMWwLrO4QeBi8+bkgEeuIdnLnmbhiVRzHttYFI+u6JQ0wu6/ yjV/ERcSUZGg/XTFE3I0FGcargiF0+JPY+PRFXi46TrmR8unaywTDG7GCwzuNIo+ xkD6rhMSuKZAM1jZMAD3txoKxlzWvBBmlqcVFrsGcQDCtKJ33xAEM8XXoFGx6gW0 A8YKFBzxquwZzNQTOL+hDEWxKTqv5Ko= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:29 2024 by rpki-client on console-fra.rpki-client.org