$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa File: d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa (raw, json) Hash identifier: wIXMwOwb2WK+MTuJmx/qxrpMr1fDXlJjNxT+iktK7zY= Subject key identifier: D0:12:65:0D:AC:78:87:2F:18:A7:D6:48:24:4D:18:F4:8F:EA:9A:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CA3F951CB3D1847229D83F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.202.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:95:1c:b3:d1:84:72:29:d8:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=c945a8aa-d898-4c43-b2c2-e40285afa884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:6c:2e:1c:bc:d6:33:6f:ad:76:01:1d:eb: d3:4f:a8:28:0c:ff:04:c4:06:3d:25:f7:75:c5:91: 67:05:00:89:ff:2f:22:45:e2:d3:5b:7b:8b:53:53: ab:e7:b5:dc:f4:44:32:a0:c3:d8:ee:bb:ca:72:12: c8:b2:25:1f:7c:35:60:7d:6f:cb:a7:b3:f0:50:a1: 11:90:97:d2:96:8d:a7:03:02:7c:a5:9b:1f:e4:40: b6:a5:23:ad:43:52:18:c0:25:3f:72:ad:12:d6:d9: 1a:b2:d4:34:2e:e1:a5:b0:08:0b:b0:33:71:e1:bc: 5c:6e:3e:d8:c0:a6:c7:49:9f:c9:8c:7d:4e:e1:65: fb:c1:e4:f8:ed:70:c9:e6:0a:45:62:b1:3c:f6:bd: 59:e0:cf:87:a9:4b:22:6a:de:69:a2:77:7e:03:49: e4:8f:13:89:f4:4c:aa:86:fd:7f:bf:aa:7f:b0:a6: 90:3c:cc:0a:a6:ac:17:07:1e:83:d6:41:28:d5:dd: 78:ff:fa:54:5e:0b:2f:3d:e5:dc:6d:2f:7d:18:bc: c7:fd:cf:85:7a:e7:6e:b2:b5:5f:3d:cb:b4:9b:05: a2:a8:d8:cf:11:8e:9a:f5:53:46:a3:df:fe:42:34: db:d6:de:e9:65:97:67:c9:13:96:78:81:e6:9f:85: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:65:0D:AC:78:87:2F:18:A7:D6:48:24:4D:18:F4:8F:EA:9A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47cabe5-30b8-33f9-b6d3-9e7645361a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4e:a7:5e:38:d3:05:16:bb:4e:0a:36:67:60:79:62:7e:e4: f1:4f:e1:af:21:ce:ad:39:12:f8:47:a2:50:df:0b:04:01:d3: 2f:99:bf:39:ff:7b:81:5c:13:24:55:ae:25:7b:b1:35:5e:7f: 28:ec:31:08:70:36:da:fc:7a:2e:c7:46:66:60:0b:33:9c:47: 9d:d0:43:d5:e3:06:40:22:41:34:48:2f:10:60:5a:a5:1f:66: a5:08:c2:f3:25:fb:10:11:8b:0f:7e:b9:1f:ba:70:54:bb:4d: 28:39:20:70:90:9b:65:d1:af:ec:61:ff:67:72:39:de:58:d0: 9e:4f:83:e0:d6:e6:1c:5f:f2:b1:78:52:1b:f7:c1:19:d8:44: 2a:10:6c:58:fe:6b:2c:bc:66:3a:a4:52:d0:6a:93:4a:9f:47: 59:ce:36:8b:06:9d:d5:1e:ff:bb:2a:48:07:28:c4:4b:d1:16: d9:66:8e:9c:d6:42:43:37:47:5f:05:62:2c:64:53:76:e9:76: fe:5e:f7:43:00:96:d8:08:86:af:ed:01:1d:63:fa:01:18:11: 60:e9:59:f4:12:00:e6:6b:1b:41:b3:1a:a0:72:ee:d6:53:dd: 17:8b:ac:8f:34:89:b8:e6:a6:e0:4c:38:ae:ca:00:d4:c8:aa: b5:c3:d7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP5Ucs9GEcinYP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Yzk0NWE4YWEtZDg5OC00YzQzLWIyYzItZTQwMjg1YWZhODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9sLhy81jNvrXYBHevTT6goDP8ExAY9Jfd1 xZFnBQCJ/y8iReLTW3uLU1Or57Xc9EQyoMPY7rvKchLIsiUffDVgfW/Lp7PwUKER kJfSlo2nAwJ8pZsf5EC2pSOtQ1IYwCU/cq0S1tkastQ0LuGlsAgLsDNx4bxcbj7Y wKbHSZ/JjH1O4WX7weT47XDJ5gpFYrE89r1Z4M+HqUsiat5pond+A0nkjxOJ9Eyq hv1/v6p/sKaQPMwKpqwXBx6D1kEo1d14//pUXgsvPeXcbS99GLzH/c+FeudusrVf Pcu0mwWiqNjPEY6a9VNGo9/+QjTb1t7pZZdnyROWeIHmn4XdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNASZQ2seIcvGKfWSCRNGPSP6prQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ3Y2FiZTUtMzBiOC0z M2Y5LWI2ZDMtOWU3NjQ1MzYxYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5Op1440wUWu04KNmdgeWJ+5PFP4a8hzq05EvhHolDfCwQB0y+Zvzn/ e4FcEyRVriV7sTVefyjsMQhwNtr8ei7HRmZgCzOcR53QQ9XjBkAiQTRILxBgWqUf ZqUIwvMl+xARiw9+uR+6cFS7TSg5IHCQm2XRr+xh/2dyOd5Y0J5Pg+DW5hxf8rF4 Uhv3wRnYRCoQbFj+ayy8ZjqkUtBqk0qfR1nONosGndUe/7sqSAcoxEvRFtlmjpzW QkM3R18FYixkU3bpdv5e90MAltgIhq/tAR1j+gEYEWDpWfQSAOZrG0GzGqBy7tZT 3ReLrI80ibjmpuBMOK7KANTIqrXD1x8= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:45 2024 by rpki-client on console-fra.rpki-client.org