$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c311d6ed-d552-3951-8697-fa728aba99b2.roa File: c311d6ed-d552-3951-8697-fa728aba99b2.roa (raw, json) Hash identifier: tYX5ldhKByxsY+L5wSJSnQ0XnZ2amIgJFTPhAH0PkP0= Subject key identifier: 91:26:39:8D:AB:F4:A1:3A:6F:17:03:D2:5A:DD:33:CA:90:46:76:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477EC103FBC16422BC1DC714A5 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c311d6ed-d552-3951-8697-fa728aba99b2.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:03:fb:c1:64:22:bc:1d:c7:14:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=f0bc488c-3328-4a72-a636-9337f688a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:2e:c3:89:56:6a:ba:5f:25:92:48:73:52: 61:a4:15:c5:b0:95:1f:05:af:ef:8b:4a:c4:5e:c3: 04:66:99:e4:18:a8:70:a4:fa:18:88:d5:e3:bc:0a: 6f:93:97:e3:c5:06:74:3e:da:65:35:e2:79:53:04: d7:bb:55:ad:0c:e5:a8:01:dc:e1:19:39:d0:05:17: dd:e3:e7:05:ee:8d:db:1f:6e:40:61:cb:dc:d6:d4: 15:22:e9:9c:46:6d:2e:15:86:5f:68:83:74:66:c5: ec:53:f3:92:9c:2b:64:e7:2e:a5:b4:a8:0b:f1:c3: d5:71:84:d7:ed:a1:64:96:28:f9:da:a0:d3:64:8c: f3:b2:74:1a:32:cb:9b:2a:c4:21:96:bb:0e:6c:5e: 47:dd:b6:1c:67:ed:1d:ec:c3:9f:6d:61:5e:01:28: 71:2c:cb:f5:f6:9e:9b:27:2d:3a:82:0f:eb:dd:5a: 2d:2c:14:6a:03:f9:0e:ee:8b:ba:fd:83:1c:fe:64: ad:b7:2a:a0:be:8c:04:83:b8:89:28:1d:a6:21:23: ac:b2:dd:fb:7b:94:aa:07:67:68:28:40:78:9d:6e: 6b:e4:87:71:f7:ef:6d:d9:90:17:17:19:9d:37:02: d1:6c:39:2a:48:42:9a:9a:64:68:6d:0f:7b:d8:ea: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:26:39:8D:AB:F4:A1:3A:6F:17:03:D2:5A:DD:33:CA:90:46:76:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c311d6ed-d552-3951-8697-fa728aba99b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:df:75:d9:c6:42:0b:7a:f7:44:2e:30:b4:c8:e5:9f:d1:35: 1e:fa:08:64:01:ac:52:05:50:50:84:4f:e9:e6:5a:9f:c9:50: f2:f5:ac:30:6b:19:fd:74:e5:0d:05:b7:08:5e:61:d7:ba:25: 4b:2c:8e:28:6e:b9:2d:59:ac:f5:c5:f6:3f:f6:31:ce:86:39: 03:ab:46:4a:02:48:60:5d:86:52:13:3e:9e:a5:84:85:07:6b: 8d:a0:6f:15:0f:23:74:57:fe:8b:b8:e3:8e:68:3a:c3:98:58: 8f:fd:37:2c:e6:f2:f8:42:8a:4b:e9:7a:cb:53:c8:8c:c7:67: 2b:24:89:b9:ab:59:32:d2:4f:4e:95:9a:d2:01:93:44:2c:1d: 6e:0a:c0:92:54:e2:0e:d6:86:e0:c0:a6:80:17:42:0e:23:b9: a5:86:90:cf:46:ae:80:d4:23:5e:eb:02:51:7f:70:4f:ee:90: 51:2c:85:a4:cf:6c:28:53:27:13:49:bd:58:4b:00:09:f4:cb: 49:b7:f3:5f:ff:d8:30:01:29:0d:03:6c:81:a7:dd:3c:c2:a3: 7f:7f:93:93:e2:a9:a9:80:71:f9:75:a9:bd:c0:50:ab:5f:30: 0e:75:b9:4f:29:af:5c:fd:1d:cf:a4:51:81:74:60:77:2f:1b: 29:25:be:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQP7wWQivB3HFKUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZjBiYzQ4OGMtMzMyOC00YTcyLWE2MzYtOTMzN2Y2ODhhN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8uw4lWarpfJZJIc1JhpBXFsJUfBa/vi0rE XsMEZpnkGKhwpPoYiNXjvApvk5fjxQZ0PtplNeJ5UwTXu1WtDOWoAdzhGTnQBRfd 4+cF7o3bH25AYcvc1tQVIumcRm0uFYZfaIN0ZsXsU/OSnCtk5y6ltKgL8cPVcYTX 7aFklij52qDTZIzzsnQaMsubKsQhlrsObF5H3bYcZ+0d7MOfbWFeAShxLMv19p6b Jy06gg/r3VotLBRqA/kO7ou6/YMc/mSttyqgvowEg7iJKB2mISOsst37e5SqB2do KEB4nW5r5Idx9+9t2ZAXFxmdNwLRbDkqSEKammRobQ972Ool7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEmOY2r9KE6bxcD0lrdM8qQRnZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMxMWQ2ZWQtZDU1Mi0z OTUxLTg2OTctZmE3MjhhYmE5OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFygsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHfddnGQgt690QuMLTI5Z/RNR76CGQBrFIFUFCET+nmWp/JUPL1rDBr Gf105Q0FtwheYde6JUssjihuuS1ZrPXF9j/2Mc6GOQOrRkoCSGBdhlITPp6lhIUH a42gbxUPI3RX/ou4445oOsOYWI/9Nyzm8vhCikvpestTyIzHZyskibmrWTLST06V mtIBk0QsHW4KwJJU4g7WhuDApoAXQg4juaWGkM9GroDUI17rAlF/cE/ukFEshaTP bChTJxNJvVhLAAn0y0m381//2DABKQ0DbIGn3TzCo39/k5PiqamAcfl1qb3AUKtf MA51uU8pr1z9Hc+kUYF0YHcvGyklvsg= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:40 2024 by rpki-client on console-fra.rpki-client.org