$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa File: baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa (raw, json) Hash identifier: ye8FmseSOb87hlPgm1xbRA7Som/nhBvAQF+d/ImcgIg= Subject key identifier: 59:FB:14:CE:33:B2:5A:D8:EC:46:03:45:FD:B4:CC:B6:B1:DC:C2:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A041578BB15A10C4743DCF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.48.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:57:8b:b1:5a:10:c4:74:3d:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=d3569e81-82c4-4a98-aa58-47572949caa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:91:68:88:14:f2:23:05:cc:91:d3:26:4b: d4:4b:ea:1b:d0:b5:ce:f0:27:69:17:09:22:51:3c: 52:5a:41:7a:17:a5:4d:c8:12:ac:0e:d2:f6:08:16: 3c:b3:3b:21:b1:d2:63:12:81:20:df:44:0a:41:fb: 78:0a:c2:38:75:48:64:16:f8:ce:fa:9b:b7:bf:0b: 7a:39:2e:05:c4:85:11:7b:58:39:db:57:65:f2:0d: fe:3e:87:8a:98:4d:a6:3d:79:0e:c9:82:fb:bc:20: 8b:1e:e2:67:96:7a:de:80:62:22:77:63:b4:ef:e7: 15:4a:1c:f0:55:68:9b:b9:81:8e:e0:c6:c4:55:0d: ce:92:a0:b7:a4:4a:19:ca:62:fe:2d:61:a0:86:2d: a3:68:2c:56:9d:42:a0:0d:b1:96:e4:32:5d:d5:46: ae:af:2b:bd:41:ba:f3:98:e8:d1:e3:6c:bf:3e:f6: 12:2a:52:10:a1:dc:0b:c7:4f:a9:df:73:a8:54:15: d9:66:f2:33:05:ee:64:50:85:13:18:0f:0e:ab:6b: a8:cd:3a:f5:81:02:a2:1f:b7:1f:a8:93:58:cc:3b: d1:6a:1f:8b:c3:02:77:a6:d9:a2:27:02:a5:94:94: 8c:86:b3:be:98:86:51:b6:45:ae:f2:76:40:39:c5: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FB:14:CE:33:B2:5A:D8:EC:46:03:45:FD:B4:CC:B6:B1:DC:C2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:95:50:df:73:7b:50:54:3c:43:f5:91:59:17:7e:41:4b:7f: bf:94:7c:45:0d:21:63:95:38:10:20:f9:54:af:34:d0:c3:68: 01:c9:03:b2:c0:77:00:30:28:87:70:25:8d:af:6b:7f:64:27: 22:a8:5b:6e:9d:a4:00:9b:9d:2f:86:8a:42:0b:5e:a4:a1:fd: 60:c8:99:6e:69:44:31:17:fb:ca:ca:e1:8d:ba:9e:65:33:4f: 0e:4a:bf:32:11:c0:ce:bf:cc:9f:e6:8a:98:e4:33:93:03:6a: 48:61:ab:17:fe:ff:4c:08:2c:c8:99:9e:b8:92:f8:5e:eb:4a: 08:7f:d8:26:0e:22:c6:c1:68:a6:1d:b7:21:1a:55:3f:c4:bf: c3:6a:51:31:4e:32:be:92:39:66:ec:bf:c6:4d:2e:62:09:39: 53:79:12:f5:8f:43:fc:84:25:d9:53:49:26:09:4e:44:9c:eb: a8:ce:c7:df:ea:f7:70:d2:13:30:54:d2:2d:0d:fd:c9:28:d0: 92:05:86:8b:c9:79:ee:7a:b8:8e:5b:ee:4d:5a:42:77:1a:bb: 59:d9:0f:f3:e5:6c:85:ba:d6:6b:95:f5:07:c2:0f:44:d5:ea: 6c:1b:49:00:b1:c3:16:3b:21:80:68:67:9c:14:b0:25:52:df: 14:ac:59:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVeLsVoQxHQ9z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk ZDM1NjllODEtODJjNC00YTk4LWFhNTgtNDc1NzI5NDljYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0feRaIgU8iMFzJHTJkvUS+ob0LXO8CdpFwki UTxSWkF6F6VNyBKsDtL2CBY8szshsdJjEoEg30QKQft4CsI4dUhkFvjO+pu3vwt6 OS4FxIURe1g521dl8g3+PoeKmE2mPXkOyYL7vCCLHuJnlnregGIid2O07+cVShzw VWibuYGO4MbEVQ3OkqC3pEoZymL+LWGghi2jaCxWnUKgDbGW5DJd1Uauryu9Qbrz mOjR42y/PvYSKlIQodwLx0+p33OoVBXZZvIzBe5kUIUTGA8Oq2uozTr1gQKiH7cf qJNYzDvRah+LwwJ3ptmiJwKllJSMhrO+mIZRtkWu8nZAOcXrTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn7FM4zslrY7EYDRf20zLax3MIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFmNGEzYjMtYWRlMS0z NDg4LThlY2YtNWY2MWViOGVmZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6VUN9ze1BUPEP1kVkXfkFLf7+UfEUNIWOVOBAg+VSvNNDDaAHJA7LA dwAwKIdwJY2va39kJyKoW26dpACbnS+GikILXqSh/WDImW5pRDEX+8rK4Y26nmUz Tw5KvzIRwM6/zJ/mipjkM5MDakhhqxf+/0wILMiZnriS+F7rSgh/2CYOIsbBaKYd tyEaVT/Ev8NqUTFOMr6SOWbsv8ZNLmIJOVN5EvWPQ/yEJdlTSSYJTkSc66jOx9/q 93DSEzBU0i0N/cko0JIFhovJee56uI5b7k1aQncau1nZD/PlbIW61muV9QfCD0TV 6mwbSQCxwxY7IYBoZ5wUsCVS3xSsWUA= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:48 2024 by rpki-client on console-ams.rpki-client.org