$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c708158c-d558-3ab9-bcf8-d42b1b8bd44b.roa File: c708158c-d558-3ab9-bcf8-d42b1b8bd44b.roa (raw, json) Hash identifier: 6ak43rcwfw9uJydJxjq21JCXkvOfl6uwG8VCDtWCOVs= Subject key identifier: FD:08:D7:27:BD:CA:B6:37:2A:37:25:D1:DA:22:94:D5:68:02:45:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A1019A91308941D52F4080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c708158c-d558-3ab9-bcf8-d42b1b8bd44b.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16625 IP address blocks: 23.2.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a1:01:9a:91:30:89:41:d5:2f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=08457d9c-d97d-46b3-8115-27ce2c16bdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:39:f3:16:0e:77:99:30:e1:30:e8:05:f0: 53:38:f7:22:9d:98:52:18:79:1f:f4:bb:b8:d4:0e: 65:f1:71:7c:d5:65:9a:e2:df:ba:44:b0:44:c7:92: de:8d:ce:62:8c:d9:b2:76:da:2c:cf:4c:fb:c0:ec: 52:1a:68:23:0f:20:1d:7b:c2:cd:64:31:ce:57:98: c5:5b:b1:f0:7e:d7:ff:5e:20:57:9a:4c:c4:79:c9: f0:bf:ef:44:1c:5b:1f:2c:44:34:20:b2:84:47:af: d9:64:46:7f:55:7e:05:09:5c:c6:66:c2:8c:84:c6: 43:9f:41:43:4f:06:6f:59:bf:bf:2c:44:c0:bf:b5: 8b:cc:53:1a:a5:93:cc:8e:0c:54:f2:0b:3b:a5:f0: d2:7c:9e:55:7d:77:1b:66:15:ef:4e:c2:f4:cd:bc: 12:df:c1:9a:4b:b9:e3:61:67:a4:63:0c:23:5b:dd: 58:c9:72:44:b8:f3:33:cc:5e:df:38:c3:4f:21:6f: 60:0a:49:5d:b9:6c:e5:45:ae:52:67:0a:bd:52:2a: ae:6e:4c:90:75:46:70:c6:fe:46:80:c2:68:f8:f2: db:44:90:e4:42:c5:b7:4f:6e:5e:b1:47:50:18:92: c1:6d:8f:7e:5a:cd:15:40:0b:9c:68:2f:a4:f9:3c: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:D7:27:BD:CA:B6:37:2A:37:25:D1:DA:22:94:D5:68:02:45:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c708158c-d558-3ab9-bcf8-d42b1b8bd44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:74:a7:9b:2e:0a:cc:ca:a5:ba:76:24:f1:25:87:2d:30:cf: e7:7b:01:e7:23:02:40:1a:53:f6:4a:da:61:e4:c2:cb:72:0f: 48:7e:98:76:a6:99:a9:2d:78:17:ec:90:35:21:75:8c:ad:ee: 2d:c1:a8:c1:8b:a0:46:ac:34:89:85:11:bf:ef:b6:cc:8f:c4: 53:b7:60:30:ca:bf:30:7c:9f:2e:84:d7:36:de:8b:31:ae:aa: f0:11:6e:9b:5c:bd:e7:dc:dc:68:ce:64:b6:db:fa:ca:c2:5e: f4:f2:31:82:d5:5a:12:5f:43:a0:f4:23:92:2c:fa:26:d5:f4: fb:55:45:88:5d:02:91:e2:74:5c:94:97:e5:71:de:d1:9d:14: 3e:f8:14:ee:07:2f:97:70:f4:35:94:3e:3c:8f:f5:4d:53:dd: a1:a1:7b:d4:f8:51:ee:b2:4e:bb:35:fe:cc:b2:73:c6:9f:9b: 8c:fa:67:57:99:18:36:dd:87:97:4e:66:06:cf:98:97:75:07: b1:f1:4c:15:d1:b8:25:39:44:b0:65:d5:4e:b1:48:ea:f0:02: 3d:bf:f2:dd:6c:f8:04:28:66:a9:02:4a:d2:0b:08:1c:bf:33: 84:30:ac:3d:81:bf:39:56:56:3e:71:81:d7:36:a9:0a:37:a7: 30:c0:00:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloQGakTCJQdUvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk MDg0NTdkOWMtZDk3ZC00NmIzLTgxMTUtMjdjZTJjMTZiZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbM58xYOd5kw4TDoBfBTOPcinZhSGHkf9Lu4 1A5l8XF81WWa4t+6RLBEx5Lejc5ijNmydtosz0z7wOxSGmgjDyAde8LNZDHOV5jF W7Hwftf/XiBXmkzEecnwv+9EHFsfLEQ0ILKER6/ZZEZ/VX4FCVzGZsKMhMZDn0FD TwZvWb+/LETAv7WLzFMapZPMjgxU8gs7pfDSfJ5VfXcbZhXvTsL0zbwS38GaS7nj YWekYwwjW91YyXJEuPMzzF7fOMNPIW9gCklduWzlRa5SZwq9UiqubkyQdUZwxv5G gMJo+PLbRJDkQsW3T25esUdQGJLBbY9+Ws0VQAucaC+k+TxbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0I1ye9yrY3Kjcl0doilNVoAkWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzcwODE1OGMtZDU1OC0z YWI5LWJjZjgtZDQyYjFiOGJkNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH10p5suCszKpbp2JPElhy0wz+d7AecjAkAaU/ZK2mHkwstyD0h+mHam makteBfskDUhdYyt7i3BqMGLoEasNImFEb/vtsyPxFO3YDDKvzB8ny6E1zbeizGu qvARbptcvefc3GjOZLbb+srCXvTyMYLVWhJfQ6D0I5Is+ibV9PtVRYhdApHidFyU l+Vx3tGdFD74FO4HL5dw9DWUPjyP9U1T3aGhe9T4Ue6yTrs1/syyc8afm4z6Z1eZ GDbdh5dOZgbPmJd1B7HxTBXRuCU5RLBl1U6xSOrwAj2/8t1s+AQoZqkCStILCBy/ M4QwrD2BvzlWVj5xgdc2qQo3pzDAAMQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:32 2024 by rpki-client on console-fra.rpki-client.org