$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa File: cfb6dc10-216d-32cc-a264-9ac44feb02be.roa (raw, json) Hash identifier: YPeCS95ojff87Q9XFw0eA0yr42J0+ZGdroXTGlMx+3c= Subject key identifier: 75:B0:54:72:6D:84:A6:3C:CD:22:A6:2F:35:FE:83:5A:6A:12:66:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A0F898FFB52AD5CD418240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 20940 IP address blocks: 23.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f8:98:ff:b5:2a:d5:cd:41:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=66d01e59-70e4-492a-ad89-82b8fb06d50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:bf:e2:3f:7b:84:d6:42:f5:3f:0c:97:34: 62:10:ea:57:7a:b6:1c:01:29:a4:09:9c:8e:2f:7b: ba:f8:59:95:88:f9:45:1c:39:f3:df:57:e6:38:18: c7:96:c6:ba:7e:86:79:1b:d6:a9:b7:b2:71:55:df: ff:2c:88:77:78:96:26:59:fa:c1:32:ea:2b:38:11: af:92:53:bd:ff:24:9d:0f:35:cd:3e:2f:4e:c1:c5: be:29:7a:ee:83:14:31:6b:d6:97:eb:63:d5:ef:92: 90:fe:c3:68:08:0a:d2:1d:2e:f8:b9:7a:d4:25:65: 7c:e0:1c:76:0b:63:80:5b:f3:d0:6b:4e:71:6c:86: ee:1d:94:6b:51:3e:ab:eb:8e:3c:ff:31:d4:ae:d1: fd:76:b9:15:d0:a6:85:67:b4:89:f6:17:f6:4d:44: 6d:8f:c3:d8:cf:de:6f:05:aa:6f:26:f9:0c:d3:9e: 8c:70:7b:ec:b2:da:80:12:dd:00:bf:b5:b0:47:38: a7:01:71:85:e2:61:d2:ac:d6:aa:1c:dd:4a:2d:01: e1:0c:82:d4:88:ef:d1:e5:48:36:1b:5a:64:0a:40: 5e:07:fb:fd:c0:9d:fe:7a:83:5e:a4:7e:a1:76:c2: da:80:76:0e:c8:93:13:4c:d7:de:46:8d:cf:96:6f: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B0:54:72:6D:84:A6:3C:CD:22:A6:2F:35:FE:83:5A:6A:12:66:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb6dc10-216d-32cc-a264-9ac44feb02be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9f:cd:24:a7:33:f3:2a:2e:bd:5d:34:c6:63:54:ff:1c:84: 9c:cc:93:97:a1:c4:51:08:c8:ee:d2:71:eb:54:43:d7:ea:ef: 67:16:be:29:df:d0:7f:05:14:0e:b5:72:1e:e4:2b:1b:34:ae: ca:04:34:af:24:8b:fc:4c:9c:df:04:48:47:66:04:53:2f:52: 3d:21:f6:85:b3:a1:ee:3a:0f:51:d1:cb:f5:6b:a2:eb:49:8b: 53:f8:a9:1e:10:6f:ff:06:5b:bf:8e:e9:fe:7c:35:b4:4d:12: 2c:b7:83:52:ff:12:26:c1:83:8d:4a:91:96:bd:ee:03:cd:8d: eb:bf:d6:58:7f:70:64:fb:ee:0d:1f:37:e5:0f:71:28:0b:6d: 42:76:b3:73:d4:b7:2b:3b:4d:dd:50:2d:ba:37:55:01:e2:b6: 58:e7:c7:58:42:39:cf:64:92:92:e7:c8:ae:19:d2:ee:0a:d8: 72:e7:de:b8:30:09:fc:37:cc:7c:81:39:32:fc:07:61:9d:3b: a1:0d:42:72:73:54:d0:3b:e9:6c:e3:f3:b7:b5:9a:e8:f8:03: 86:d7:8a:73:fa:0a:d8:51:fa:3f:14:36:ba:17:56:80:44:9b: 59:81:c9:bc:55:27:ea:c3:3e:57:6d:14:5c:ad:96:fc:77:4a: cc:27:12:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPiY/7Uq1c1BgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk NjZkMDFlNTktNzBlNC00OTJhLWFkODktODJiOGZiMDZkNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pe/4j97hNZC9T8MlzRiEOpXerYcASmkCZyO L3u6+FmViPlFHDnz31fmOBjHlsa6foZ5G9apt7JxVd//LIh3eJYmWfrBMuorOBGv klO9/ySdDzXNPi9OwcW+KXrugxQxa9aX62PV75KQ/sNoCArSHS74uXrUJWV84Bx2 C2OAW/PQa05xbIbuHZRrUT6r6448/zHUrtH9drkV0KaFZ7SJ9hf2TURtj8PYz95v BapvJvkM056McHvsstqAEt0Av7WwRzinAXGF4mHSrNaqHN1KLQHhDILUiO/R5Ug2 G1pkCkBeB/v9wJ3+eoNepH6hdsLagHYOyJMTTNfeRo3Plm921QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWwVHJthKY8zSKmLzX+g1pqEmbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZiNmRjMTAtMjE2ZC0z MmNjLWEyNjQtOWFjNDRmZWIwMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIafzSSnM/MqLr1dNMZjVP8chJzMk5ehxFEIyO7ScetUQ9fq72cWvinf 0H8FFA61ch7kKxs0rsoENK8ki/xMnN8ESEdmBFMvUj0h9oWzoe46D1HRy/VroutJ i1P4qR4Qb/8GW7+O6f58NbRNEiy3g1L/EibBg41KkZa97gPNjeu/1lh/cGT77g0f N+UPcSgLbUJ2s3PUtys7Td1QLbo3VQHitljnx1hCOc9kkpLnyK4Z0u4K2HLn3rgw Cfw3zHyBOTL8B2GdO6ENQnJzVNA76Wzj87e1muj4A4bXinP6CthR+j8UNroXVoBE m1mBybxVJ+rDPldtFFytlvx3SswnEv0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:40 2024 by rpki-client on console-fra.rpki-client.org