$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa File: b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa (raw, json) Hash identifier: e+qF+Kk5DHgDR0K8+mC/QpTNlKN/PCpBCTdiCpHLL+0= Subject key identifier: 8B:8C:F7:72:40:C5:93:3C:C0:E1:D7:E0:16:10:FF:54:BD:E4:8A:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1E25BD5815360838A900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.205.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1e:25:bd:58:15:36:08:38:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=3414169b-5921-4135-bd8f-8bb73557107d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:a7:5f:f7:e4:e3:3d:d0:7a:4b:9d:f1:6a: 35:48:40:69:8c:2d:1e:0b:f9:e3:b4:a8:84:a6:6a: a8:08:a7:9f:cc:c9:c7:c3:9b:51:f5:32:3e:0b:8e: 7f:aa:4a:94:74:38:75:e0:63:bd:de:ad:43:82:f9: c2:aa:ce:85:5b:3e:d5:67:6c:c5:08:15:33:a9:25: 1d:2a:ca:48:47:a1:fd:bc:52:f8:c4:d5:2e:a7:2f: 08:76:57:fa:4e:93:12:96:67:fc:10:37:e4:e6:aa: fb:89:12:06:59:b4:c5:39:48:bd:8a:44:63:67:b6: 86:0e:9d:f0:f7:ab:0b:69:b6:fd:c9:79:85:6e:7d: dd:fd:e5:09:ce:ce:71:83:e0:8e:59:ba:f4:f6:14: ec:7e:08:94:11:4b:cb:30:19:ac:66:38:e8:91:c9: 02:99:5f:4c:b9:f5:4f:7a:27:b7:1e:9d:ee:57:8f: f1:3c:3f:8c:24:8e:ec:bb:77:19:3c:9c:da:54:b8: eb:a1:59:ec:72:bf:18:7a:fe:c5:42:f8:ae:03:29: b5:be:d5:2a:5c:9e:e2:8a:fb:ef:d8:39:e7:88:2f: e5:c7:32:a5:73:8c:a2:83:38:7e:41:68:73:3b:83: 3c:52:06:6a:a7:6b:06:32:67:3d:0b:61:34:1f:6d: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:F7:72:40:C5:93:3C:C0:E1:D7:E0:16:10:FF:54:BD:E4:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:29:85:4e:01:fb:a4:28:89:37:4a:e9:af:f2:29:fd:1f:8e: 80:0b:22:8d:90:a8:d6:10:bc:65:2d:51:d8:f2:86:84:4c:84: 5f:e2:2d:5c:1b:ae:3c:a5:f8:cc:33:ca:30:7f:54:e3:a9:4c: a8:30:3e:5f:9e:e2:a2:c7:eb:40:07:b6:37:20:4c:f1:10:b1: ed:1f:bb:f2:86:79:74:4b:90:7c:67:17:b9:3d:cf:44:d6:f1: 21:3d:01:11:43:f7:13:fc:6c:8c:90:2f:30:66:b6:50:d9:59: 37:a7:e3:37:ce:01:7b:96:20:75:4f:af:4a:bb:82:b0:70:fc: 07:84:dc:b4:9b:18:9c:cb:06:f3:26:ed:e3:8f:cd:e2:38:0a: 7e:2c:27:ae:78:87:ea:74:f7:45:96:23:44:bc:62:01:6b:1e: 17:05:05:41:a8:c1:87:cf:ba:8a:17:b1:81:6a:4d:b7:31:a7: 3b:a5:4f:e7:82:e4:26:bb:24:2d:7b:69:41:4e:d2:eb:aa:e1: 51:ac:21:36:1d:f0:37:75:6e:2d:a1:7e:6e:30:61:4a:19:03: f9:af:cc:eb:2a:ba:97:3f:52:6f:9e:2f:46:f7:e4:dd:a3:a3: 2b:db:96:37:c1:24:88:e7:dd:ce:8e:7b:a8:a3:55:3a:5d:69: a1:50:78:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzB4lvVgVNgg4qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk MzQxNDE2OWItNTkyMS00MTM1LWJkOGYtOGJiNzM1NTcxMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6CnX/fk4z3Qekud8Wo1SEBpjC0eC/njtKiE pmqoCKefzMnHw5tR9TI+C45/qkqUdDh14GO93q1DgvnCqs6FWz7VZ2zFCBUzqSUd KspIR6H9vFL4xNUupy8Idlf6TpMSlmf8EDfk5qr7iRIGWbTFOUi9ikRjZ7aGDp3w 96sLabb9yXmFbn3d/eUJzs5xg+COWbr09hTsfgiUEUvLMBmsZjjokckCmV9MufVP eie3Hp3uV4/xPD+MJI7su3cZPJzaVLjroVnscr8Yev7FQviuAym1vtUqXJ7iivvv 2DnniC/lxzKlc4yigzh+QWhzO4M8UgZqp2sGMmc9C2E0H22BhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuM93JAxZM8wOHX4BYQ/1S95IoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFkNGE2NDgtNWFlNy0z M2Q2LThkNDYtNmQ0NGYzMjA0YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF80qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUphU4B+6QoiTdK6a/yKf0fjoALIo2QqNYQvGUtUdjyhoRMhF/iLVwb rjyl+MwzyjB/VOOpTKgwPl+e4qLH60AHtjcgTPEQse0fu/KGeXRLkHxnF7k9z0TW 8SE9ARFD9xP8bIyQLzBmtlDZWTen4zfOAXuWIHVPr0q7grBw/AeE3LSbGJzLBvMm 7eOPzeI4Cn4sJ654h+p090WWI0S8YgFrHhcFBUGowYfPuooXsYFqTbcxpzulT+eC 5Ca7JC17aUFO0uuq4VGsITYd8Dd1bi2hfm4wYUoZA/mvzOsqupc/Um+eL0b35N2j oyvbljfBJIjn3c6Oe6ijVTpdaaFQeMQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:43 2024 by rpki-client on console-ams.rpki-client.org