$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a28e26-2a99-3053-ab92-200048578157.roa File: c9a28e26-2a99-3053-ab92-200048578157.roa (raw, json) Hash identifier: Qzpo7N3igSkYIYZAg/LzFTMcvkfo/eboBPGJR9/QZ14= Subject key identifier: 2B:8D:03:5B:DF:28:95:19:60:08:54:36:0F:8F:52:AF:6D:EB:0F:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847F584DCBC7A91BEB031D62308 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a28e26-2a99-3053-ab92-200048578157.roa Signing time: Fri 22 Nov 2024 02:00:40 +0000 ROA not before: Fri 22 Nov 2024 02:00:40 +0000 ROA not after: Thu 20 Feb 2025 02:00:40 +0000 asID: 16625 IP address blocks: 23.195.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:84:dc:bc:7a:91:be:b0:31:d6:23:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 22 02:00:40 2024 GMT Not After : Feb 20 02:00:40 2025 GMT Subject: CN=a577a7ed-c11b-4858-aa75-3a3b710014c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:a9:cf:b5:7a:8b:62:5d:24:0c:52:31:ea: e4:5d:b1:84:05:ec:1d:19:99:6a:30:c5:83:8c:f2: a9:2d:3a:32:61:56:6e:c6:fc:6c:fb:3c:3b:50:98: 9d:49:c5:fe:22:79:d0:4a:1f:6c:34:1d:d9:fc:23: ab:51:dd:c2:b7:d2:84:6b:3d:72:52:0c:36:fb:6a: 3b:ba:4e:a7:a9:3d:01:e3:1a:4d:4b:94:af:67:44: 3b:49:b3:b2:8c:b3:05:24:11:97:b3:87:55:9a:51: 8c:aa:5a:d4:9f:5b:cc:7b:83:bc:33:03:b2:b2:db: f1:66:41:a9:49:6f:8e:20:fc:bf:52:29:74:70:96: c9:2b:99:ad:40:0c:58:9b:99:65:8e:f2:c9:f6:aa: 6f:24:1f:8d:94:b7:52:80:de:83:42:6f:9a:ef:3a: 82:91:f8:e6:0b:80:f3:36:02:be:51:3e:0b:db:41: 46:df:22:fb:5f:98:26:dc:08:c4:a8:ed:38:6d:a9: f1:c6:c7:0a:38:11:30:7e:86:3a:0a:1a:cc:1c:3d: 4e:70:42:c4:d2:a1:8f:f4:63:c9:5f:b1:26:b5:da: 5d:11:9f:50:ce:94:dd:71:9d:c1:f5:cc:b2:e7:cc: c0:f7:03:3d:98:23:8d:e0:fb:09:ef:64:f3:ee:3a: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8D:03:5B:DF:28:95:19:60:08:54:36:0F:8F:52:AF:6D:EB:0F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9a28e26-2a99-3053-ab92-200048578157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ee:da:a0:bb:2d:d6:ec:2d:4c:3d:6a:31:c9:4a:7e:81:53: 2c:0b:43:6f:98:50:2c:30:f0:d9:a8:df:4f:52:37:b5:35:32: 39:30:36:75:31:bd:4b:cd:7d:73:75:20:32:2e:20:36:b0:60: 64:4f:20:88:38:d2:7a:18:43:c9:f3:5f:03:b1:bf:d0:8b:58: 28:55:dc:b5:2c:59:64:f7:9e:e3:92:6c:8b:f7:7c:ee:2f:eb: b7:7d:4c:5a:7e:58:54:b0:bf:a1:67:33:8c:ec:83:09:de:13: a7:96:31:4f:3c:26:61:70:80:73:92:b2:0c:8b:08:71:9a:25: 02:c9:6d:cf:b6:3c:0f:42:aa:d6:56:bc:e9:cf:a0:53:5d:50: c5:78:b4:07:8e:4a:93:03:84:8d:8f:da:cc:fb:63:23:f2:ec: 3a:35:92:fd:c3:7c:90:d3:36:e0:e3:d6:c9:50:21:02:09:6e: c3:c5:4f:68:ca:36:41:fa:da:2e:37:50:2f:31:7b:23:71:2b: e1:6a:f6:ef:c7:31:21:e1:72:5c:15:4f:6e:5d:4e:ba:1e:1f: 5f:7a:8b:b8:cd:4f:8c:4c:28:79:fe:2e:d6:c9:32:22:28:50: 93:62:3f:c8:3a:c0:de:7e:87:f5:ea:fd:1e:da:0f:80:a3:85: 5f:8a:ac:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hNy8epG+sDHWIwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk YTU3N2E3ZWQtYzExYi00ODU4LWFhNzUtM2EzYjcxMDAxNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzSpz7V6i2JdJAxSMerkXbGEBewdGZlqMMWD jPKpLToyYVZuxvxs+zw7UJidScX+InnQSh9sNB3Z/COrUd3Ct9KEaz1yUgw2+2o7 uk6nqT0B4xpNS5SvZ0Q7SbOyjLMFJBGXs4dVmlGMqlrUn1vMe4O8MwOystvxZkGp SW+OIPy/Uil0cJbJK5mtQAxYm5lljvLJ9qpvJB+NlLdSgN6DQm+a7zqCkfjmC4Dz NgK+UT4L20FG3yL7X5gm3AjEqO04banxxscKOBEwfoY6ChrMHD1OcELE0qGP9GPJ X7EmtdpdEZ9QzpTdcZ3B9cyy58zA9wM9mCON4PsJ72Tz7jpN3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuNA1vfKJUZYAhUNg+PUq9t6w8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzlhMjhlMjYtMmE5OS0z MDUzLWFiOTItMjAwMDQ4NTc4MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3u2qC7LdbsLUw9ajHJSn6BUywLQ2+YUCww8Nmo309SN7U1MjkwNnUx vUvNfXN1IDIuIDawYGRPIIg40noYQ8nzXwOxv9CLWChV3LUsWWT3nuOSbIv3fO4v 67d9TFp+WFSwv6FnM4zsgwneE6eWMU88JmFwgHOSsgyLCHGaJQLJbc+2PA9CqtZW vOnPoFNdUMV4tAeOSpMDhI2P2sz7YyPy7Do1kv3DfJDTNuDj1slQIQIJbsPFT2jK NkH62i43UC8xeyNxK+Fq9u/HMSHhclwVT25dTroeH196i7jNT4xMKHn+LtbJMiIo UJNiP8g6wN5+h/Xq/R7aD4CjhV+KrNE= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:42 2024 by rpki-client on console-fra.rpki-client.org