$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c427c397-bcab-3948-8926-2d4e5072d7f4.roa File: c427c397-bcab-3948-8926-2d4e5072d7f4.roa (raw, json) Hash identifier: dhBc1jTsHxEgYFlQdZcjBFMA3B13ySuhxzGRXMQclvw= Subject key identifier: E4:89:BB:43:DD:EB:5B:E9:CF:AB:58:9A:AA:2E:35:B1:84:68:DF:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5BA8CA9C2162C59C45EC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c427c397-bcab-3948-8926-2d4e5072d7f4.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.43.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:a8:ca:9c:21:62:c5:9c:45:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=44a5e909-223b-4729-9e4d-a5508c09dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:3d:41:a5:17:17:eb:be:38:df:53:3f:ce: dd:71:18:c8:4a:f1:f9:29:3a:bf:4b:cf:e4:23:83: 5c:a3:a9:e5:0b:b5:c9:20:2e:71:56:ce:7a:71:87: 78:a2:14:53:d0:12:06:57:34:fd:71:b7:01:e1:74: 0a:0c:56:24:e8:15:98:df:b5:f6:9d:45:db:f5:ff: ad:09:df:c6:c4:b0:25:fd:aa:4e:3e:50:5c:eb:f2: 8d:29:eb:45:06:3c:80:56:6f:6f:55:d7:2d:9e:d4: c6:bd:9f:fa:d4:1d:01:53:77:29:ec:6e:f4:27:a6: 9a:10:e8:a1:c8:bf:4e:dd:f2:17:69:b8:c6:57:89: 6d:8c:92:0f:7a:88:fb:dd:f2:35:21:09:96:21:61: 39:54:76:ad:65:f6:dc:0d:db:d0:1a:a2:3a:61:75: c7:ce:08:04:fc:d9:c4:13:e9:88:e6:1f:8f:26:f7: f0:cc:58:2e:c6:b8:8a:cb:ad:85:8d:90:54:dc:f5: a7:5f:c0:ee:7e:0e:0a:e5:13:7b:3c:df:63:dc:e9: 2e:29:06:f0:9b:77:7e:27:2c:66:26:22:2f:6a:35: 6e:f6:8a:6e:10:fc:5c:45:b5:ac:74:07:61:ee:7c: fa:43:74:27:cd:8d:dd:d7:f5:c7:0f:b5:17:30:83: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:BB:43:DD:EB:5B:E9:CF:AB:58:9A:AA:2E:35:B1:84:68:DF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c427c397-bcab-3948-8926-2d4e5072d7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c1:42:a5:1c:a4:3d:0f:d7:2e:47:43:b0:7d:17:1e:61:dd: f8:18:d6:aa:91:e7:22:be:40:2f:da:ae:87:ad:7d:aa:af:19: 66:89:e5:c3:60:c4:20:86:d7:75:ca:06:a5:69:b3:ee:98:d9: 64:5d:eb:c7:27:6b:9b:b9:3e:f3:85:8d:5f:3e:d7:c5:96:45: 71:09:49:5b:09:f0:91:9c:9d:ac:72:ee:9d:6c:f2:cc:2d:6b: a7:19:54:3b:1c:ac:7c:bc:67:3d:04:17:08:01:d1:25:bc:6b: e9:da:85:84:ce:2d:dc:eb:db:3e:3d:ad:36:fa:43:ad:d9:0f: ab:ec:54:91:e7:8f:52:c5:85:35:4d:8c:6b:19:ff:1f:92:c6: cb:9a:37:6c:9d:48:da:58:b1:28:d8:37:05:42:17:a2:61:29: fd:82:d1:55:d4:36:0e:95:18:be:fd:47:7b:b8:cf:ac:63:64: cb:4d:32:93:32:c3:ee:b0:06:72:d4:88:ac:4d:80:91:c7:e5: d2:3f:94:c3:2a:2e:2d:e8:93:f5:2a:85:5c:8d:df:9a:2f:42: 04:02:90:ee:45:2f:69:4b:ea:90:83:98:e1:cc:80:2c:4b:32: 45:a1:18:aa:3e:06:31:b3:39:b2:48:91:59:5b:df:b5:6d:52: 0f:5b:d4:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W6jKnCFixZxF7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk NDRhNWU5MDktMjIzYi00NzI5LTllNGQtYTU1MDhjMDlkYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC89QaUXF+u+ON9TP87dcRjISvH5KTq/S8/k I4Nco6nlC7XJIC5xVs56cYd4ohRT0BIGVzT9cbcB4XQKDFYk6BWY37X2nUXb9f+t Cd/GxLAl/apOPlBc6/KNKetFBjyAVm9vVdctntTGvZ/61B0BU3cp7G70J6aaEOih yL9O3fIXabjGV4ltjJIPeoj73fI1IQmWIWE5VHatZfbcDdvQGqI6YXXHzggE/NnE E+mI5h+PJvfwzFguxriKy62FjZBU3PWnX8Dufg4K5RN7PN9j3OkuKQbwm3d+Jyxm JiIvajVu9opuEPxcRbWsdAdh7nz6Q3QnzY3d1/XHD7UXMIPjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSJu0Pd61vpz6tYmqouNbGEaN+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQyN2MzOTctYmNhYi0z OTQ4LTg5MjYtMmQ0ZTUwNzJkN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFytYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7BQqUcpD0P1y5HQ7B9Fx5h3fgY1qqR5yK+QC/aroetfaqvGWaJ5cNg xCCG13XKBqVps+6Y2WRd68cna5u5PvOFjV8+18WWRXEJSVsJ8JGcnaxy7p1s8swt a6cZVDscrHy8Zz0EFwgB0SW8a+nahYTOLdzr2z49rTb6Q63ZD6vsVJHnj1LFhTVN jGsZ/x+SxsuaN2ydSNpYsSjYNwVCF6JhKf2C0VXUNg6VGL79R3u4z6xjZMtNMpMy w+6wBnLUiKxNgJHH5dI/lMMqLi3ok/UqhVyN35ovQgQCkO5FL2lL6pCDmOHMgCxL MkWhGKo+BjGzObJIkVlb37VtUg9b1Ao= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:35 2024 by rpki-client on console-fra.rpki-client.org