$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa File: c646d1f6-aaea-3038-bf20-421eb2a50335.roa (raw, json) Hash identifier: pjfI1KG+VLwmx5BdMLYhE+4Fsu9cXPIqTmjLZUBh9no= Subject key identifier: 63:68:67:DF:FC:C3:60:21:AB:2B:B7:49:CB:54:50:28:69:FE:3E:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A1031BFF0CB0061650A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16625 IP address blocks: 23.3.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a1:03:1b:ff:0c:b0:06:16:50:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=c262bf5a-499a-41e7-b640-f94cdb75e3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:2f:c0:dd:22:e7:20:fd:b3:72:a7:c6:dc: 9b:c1:8b:b0:df:c3:30:a2:81:45:c3:84:5e:de:dd: a7:2a:78:ff:f0:5d:32:4d:89:8c:e0:7d:de:e0:ee: 8e:ec:f0:5f:78:46:6e:73:17:12:90:60:17:95:b7: 6b:b4:61:32:a3:e1:89:8f:3b:22:99:94:6b:0f:7d: a0:4f:b3:7a:b9:77:02:42:b1:59:41:25:fe:78:90: 32:d2:61:95:ac:ae:e3:ab:d3:3e:21:02:ab:be:f8: e3:92:96:0e:7d:12:cc:5a:05:30:55:65:e4:4b:1f: 07:2e:20:57:ea:f4:a1:6d:e1:00:98:cd:7c:63:e1: c5:a7:53:8d:48:6b:92:00:4a:a8:2e:53:72:6d:f6: a3:e7:05:fd:6f:cc:ba:c9:5d:53:26:2b:75:ae:18: 7d:bd:05:1d:3b:69:5d:ff:bf:ec:e7:a2:aa:d8:06: a4:63:5a:46:c7:ad:8a:54:b1:ae:f5:79:64:6a:b9: fb:4e:ee:a7:e9:8b:6a:96:52:9d:ba:49:d8:67:db: 42:7b:91:fa:bc:3b:3e:20:2b:b0:66:bc:16:24:74: 2b:4a:a1:93:4c:61:e8:2a:db:0f:b0:39:6f:44:63: 78:21:44:bf:b1:18:92:34:cd:db:5d:e1:e5:fa:14: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:67:DF:FC:C3:60:21:AB:2B:B7:49:CB:54:50:28:69:FE:3E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f4:16:5d:67:3d:31:ef:24:70:0c:f2:f8:fd:f5:0c:22:b4: d1:17:0d:92:03:ad:90:db:ce:17:8b:2f:1f:ad:fd:32:fc:5e: 2e:c9:aa:6f:df:dc:fe:cf:24:1e:3f:7d:bd:d8:bb:fd:4f:b7: eb:f7:42:2f:d5:c8:16:8b:a4:3d:52:85:69:c2:df:52:02:47: d0:13:98:6a:6d:7a:9d:39:68:c3:97:42:f3:94:d0:0a:2f:bc: 05:ae:16:fe:af:b6:f3:fa:3c:2f:5a:f0:09:d2:22:98:88:8a: 01:eb:5e:26:cc:29:f2:05:a4:1f:24:9b:f6:ad:e1:54:3d:8a: c0:e7:15:db:29:09:54:e4:b0:2f:65:28:c0:39:08:43:0f:ee: 6c:47:3c:d9:01:15:4f:be:40:a2:4c:53:95:29:84:6d:ef:8e: 2e:1e:ea:ea:9b:4c:0d:78:52:c8:29:d7:29:70:5c:a3:d2:91: 5e:0a:ea:07:cc:51:a2:9b:36:9d:f4:6f:fc:2a:a5:80:52:a1: 03:2c:38:47:c7:4a:81:f3:1f:27:09:ce:b2:9b:43:52:0c:c5: b5:9a:4a:36:ee:75:d5:23:0f:b5:5a:ef:41:45:ea:35:b3:91: 55:76:e9:8c:81:16:3d:0a:67:62:50:e4:18:a1:49:25:f3:3b: 66:94:14:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloQMb/wywBhZQpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk YzI2MmJmNWEtNDk5YS00MWU3LWI2NDAtZjk0Y2RiNzVlM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS0vwN0i5yD9s3KnxtybwYuw38MwooFFw4Re 3t2nKnj/8F0yTYmM4H3e4O6O7PBfeEZucxcSkGAXlbdrtGEyo+GJjzsimZRrD32g T7N6uXcCQrFZQSX+eJAy0mGVrK7jq9M+IQKrvvjjkpYOfRLMWgUwVWXkSx8HLiBX 6vShbeEAmM18Y+HFp1ONSGuSAEqoLlNybfaj5wX9b8y6yV1TJit1rhh9vQUdO2ld /7/s56Kq2AakY1pGx62KVLGu9Xlkarn7Tu6n6YtqllKduknYZ9tCe5H6vDs+ICuw ZrwWJHQrSqGTTGHoKtsPsDlvRGN4IUS/sRiSNM3bXeHl+hQVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNoZ9/8w2Ahqyu3SctUUChp/j4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY0NmQxZjYtYWFlYS0z MDM4LWJmMjAtNDIxZWIyYTUwMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf0Fl1nPTHvJHAM8vj99QwitNEXDZIDrZDbzheLLx+t/TL8Xi7Jqm/f 3P7PJB4/fb3Yu/1Pt+v3Qi/VyBaLpD1ShWnC31ICR9ATmGptep05aMOXQvOU0Aov vAWuFv6vtvP6PC9a8AnSIpiIigHrXibMKfIFpB8km/at4VQ9isDnFdspCVTksC9l KMA5CEMP7mxHPNkBFU++QKJMU5UphG3vji4e6uqbTA14Usgp1ylwXKPSkV4K6gfM UaKbNp30b/wqpYBSoQMsOEfHSoHzHycJzrKbQ1IMxbWaSjbuddUjD7Va70FF6jWz kVV26YyBFj0KZ2JQ5BihSSXzO2aUFPY= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:41 2024 by rpki-client on console-fra.rpki-client.org