$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e0a9ce-35c9-32be-a0f2-d1a8ac063e32.roa File: b9e0a9ce-35c9-32be-a0f2-d1a8ac063e32.roa (raw, json) Hash identifier: a2hbG1MiDQuBiUURSBbLpRMbJKD+9YSqkVuhZqPXQcM= Subject key identifier: 37:06:27:E1:0A:02:22:26:57:41:BB:45:58:CE:B8:3F:D2:DA:98:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36DE5AC0AAB91294E07E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e0a9ce-35c9-32be-a0f2-d1a8ac063e32.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.58.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:de:5a:c0:aa:b9:12:94:e0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=8e3a7999-eb2d-496e-a4a5-ceb1483956dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:c9:c6:52:67:a0:c5:33:d3:95:7f:21:15: e0:06:02:07:e6:39:00:a2:49:9f:b7:74:62:03:05: 5f:8a:45:1d:0c:87:b0:7f:5f:c4:9e:7e:e4:c7:b6: 6b:c0:47:2c:35:7f:18:c3:e8:fd:7f:ac:17:99:76: 0a:be:1b:e2:f2:99:c8:f2:8d:18:a6:c4:85:26:98: 2b:54:b4:1e:78:ca:a2:b4:5b:ac:28:54:0e:25:6b: 14:48:25:71:ba:ac:20:ab:c0:50:64:cd:c7:61:39: 78:74:3d:d9:5f:3a:af:8c:4f:b4:b7:a3:9c:d2:01: 39:5e:dc:87:cd:29:5d:13:06:f5:97:95:93:f7:60: 49:76:23:a2:e9:93:91:aa:ce:57:ef:2a:27:4a:b5: 1a:ae:06:71:00:cb:a7:2c:6f:bb:a1:bb:88:0f:3d: 5a:eb:14:1e:d9:43:e6:e1:b3:21:c0:0b:10:8a:11: 0f:5e:bb:18:01:f9:17:1b:c9:ce:d3:b6:03:77:84: cf:42:1c:cf:80:09:ea:ea:08:f6:8b:58:0b:db:b8: 7d:22:bb:4c:31:1a:e7:b2:8f:d3:37:5c:80:d5:eb: 5a:58:69:93:d1:07:c0:b1:3f:d9:12:05:6f:c3:73: a9:d2:f2:a4:da:8c:80:00:4c:c5:c4:8b:44:56:fa: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:27:E1:0A:02:22:26:57:41:BB:45:58:CE:B8:3F:D2:DA:98:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e0a9ce-35c9-32be-a0f2-d1a8ac063e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:df:96:7e:fe:41:3c:da:43:c8:91:47:16:1f:58:a9:8b:29: 88:05:37:55:64:b2:00:25:71:71:33:a0:8d:5f:41:3e:8e:ea: 75:89:0a:0d:e5:0d:3d:09:8a:ba:94:ed:5c:c2:0c:54:64:f6: 1c:6e:17:cb:51:ff:79:68:09:52:cc:e4:12:98:f4:5d:50:b1: b1:e4:4a:e6:b2:e7:ac:85:9d:8c:95:49:53:f5:44:2e:ea:a1: d6:b1:ad:6a:9e:60:03:bc:62:43:70:8d:5a:f6:a7:f5:e9:d2: e1:5f:1b:f7:4d:1e:41:88:4e:14:b6:b9:16:06:72:7c:75:6f: d7:ce:1f:c0:71:d2:fc:54:d8:05:5c:3d:94:34:b1:ea:4d:2c: 80:2f:dc:af:28:91:cd:87:60:ff:8c:60:9c:f6:83:96:34:64: 98:2c:13:d8:b5:c3:60:64:ee:5a:35:ec:c3:ab:2e:14:73:e9: fa:ca:78:43:04:2f:2d:99:03:9a:95:ea:06:16:a9:64:02:fb: 2d:ee:8f:14:28:ee:bc:f9:8d:49:45:2c:5c:54:82:85:7b:49: 4c:01:59:e7:bf:e9:5a:50:c9:fd:d9:23:22:28:a2:f8:eb:4d: 5f:be:a7:02:e3:e2:67:c0:86:96:b5:b2:96:68:fd:5e:9f:b8: ad:dc:0a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNt5awKq5EpTgfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OGUzYTc5OTktZWIyZC00OTZlLWE0YTUtY2ViMTQ4Mzk1NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkArJxlJnoMUz05V/IRXgBgIH5jkAokmft3Ri AwVfikUdDIewf1/Enn7kx7ZrwEcsNX8Yw+j9f6wXmXYKvhvi8pnI8o0YpsSFJpgr VLQeeMqitFusKFQOJWsUSCVxuqwgq8BQZM3HYTl4dD3ZXzqvjE+0t6Oc0gE5XtyH zSldEwb1l5WT92BJdiOi6ZORqs5X7yonSrUargZxAMunLG+7obuIDz1a6xQe2UPm 4bMhwAsQihEPXrsYAfkXG8nO07YDd4TPQhzPgAnq6gj2i1gL27h9IrtMMRrnso/T N1yA1etaWGmT0QfAsT/ZEgVvw3Op0vKk2oyAAEzFxItEVvqlzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcGJ+EKAiImV0G7RVjOuD/S2piMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjllMGE5Y2UtMzVjOS0z MmJlLWEwZjItZDFhOGFjMDYzZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnfln7+QTzaQ8iRRxYfWKmLKYgFN1VksgAlcXEzoI1fQT6O6nWJCg3l DT0JirqU7VzCDFRk9hxuF8tR/3loCVLM5BKY9F1QsbHkSuay56yFnYyVSVP1RC7q odaxrWqeYAO8YkNwjVr2p/Xp0uFfG/dNHkGIThS2uRYGcnx1b9fOH8Bx0vxU2AVc PZQ0sepNLIAv3K8okc2HYP+MYJz2g5Y0ZJgsE9i1w2Bk7lo17MOrLhRz6frKeEME Ly2ZA5qV6gYWqWQC+y3ujxQo7rz5jUlFLFxUgoV7SUwBWee/6VpQyf3ZIyIoovjr TV++pwLj4mfAhpa1spZo/V6fuK3cCqM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:26 2024 by rpki-client on console-fra.rpki-client.org