$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa File: effa9bd4-b2b5-3885-b469-d14acd4fd468.roa (raw, json) Hash identifier: 5WqPH17CKXKdyt0UU7CXNfvCqLVl7F1iIhdvVAimQWo= Subject key identifier: BD:6C:58:F4:B9:25:A2:B1:F6:62:F4:7F:F4:C3:84:9A:96:C9:F9:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858479AAC05630A394D22104E6640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.40.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ac:05:63:0a:39:4d:22:10:4e:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=55102279-bc50-46dd-ad82-62e09d44c0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:85:55:e0:56:3e:8b:fd:93:da:3d:bd:6a: a4:db:e9:37:a7:b1:bd:88:cb:f7:32:28:f2:23:08: 30:fb:e1:4b:86:fa:3f:88:17:b7:4b:76:f5:82:ac: b0:51:a2:5d:f2:ea:5e:09:65:00:d3:d3:27:6b:99: f8:df:d2:53:76:3e:c8:79:dd:c9:2e:42:f1:bb:bb: 1e:87:de:11:79:c0:c1:b8:b4:5d:95:d1:c5:ed:bc: ee:d6:f4:2c:dd:e5:57:27:db:3d:75:7c:59:81:79: fb:88:a5:ae:79:08:92:06:21:98:39:9b:d5:c0:0d: 25:2d:6c:b4:8b:0c:2d:24:8a:6b:cf:95:ce:57:a1: f9:87:e2:ed:91:72:8e:d2:ec:76:79:58:94:68:50: 98:f3:7b:26:8f:f0:be:db:97:1b:e4:43:cb:cc:0a: df:58:fc:c0:95:e6:df:c3:5e:ab:82:19:75:1c:9a: f2:9b:9a:17:b7:f5:00:8a:eb:4b:70:90:64:9c:fa: 8e:84:81:f8:5e:69:36:d8:a4:d8:c4:b7:40:ea:0b: 3b:35:2c:98:a1:57:1e:80:88:3d:89:ec:de:82:a3: 13:8c:a7:ca:05:24:b2:0c:85:5a:f7:19:32:f2:42: ee:ce:0c:f3:eb:f3:ac:aa:d3:6b:0f:da:16:89:91: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:58:F4:B9:25:A2:B1:F6:62:F4:7F:F4:C3:84:9A:96:C9:F9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f2:83:66:fa:a8:7f:4c:da:2d:27:2f:99:d0:6c:31:61:0c: e2:02:cc:08:8b:24:1e:fe:53:eb:68:c9:61:ed:70:96:72:7a: cf:fa:b7:4d:f9:7e:5f:2d:a2:b2:5e:a5:b8:da:c4:46:b1:a6: 89:2f:bb:71:a8:46:ca:ed:83:ff:85:5e:c9:a3:3a:e0:69:c1: f5:be:11:95:5f:09:40:5b:e4:62:54:e0:c0:24:21:27:de:fb: 60:ef:8b:68:bc:4f:e8:2a:ef:8e:42:d0:7d:2f:a7:2c:43:b7: ec:00:67:6c:46:74:8c:89:de:87:0b:fe:79:cd:75:99:5d:08: 78:e9:e3:e8:9e:d0:e0:3c:dc:37:5f:8b:f5:e0:3d:df:de:7b: 83:d8:6a:7c:e6:17:47:19:3d:a7:0e:5e:57:bd:0e:a7:eb:3f: 4f:96:fa:40:58:de:ad:e0:9b:04:45:0d:f7:b6:c5:1d:84:2a: 23:73:02:22:3f:13:b8:af:44:ba:8c:49:ca:99:1f:90:b6:42: 81:66:2f:a6:d5:14:2f:2c:30:71:55:0b:8c:38:ec:9d:83:a0: e5:05:84:92:3f:52:6c:5d:fb:0a:e4:d5:82:d8:03:83:98:17: 57:96:a2:2e:ec:83:fd:68:10:98:17:74:30:96:45:1d:e3:8b: ef:7a:83:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEearAVjCjlNIhBOZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NTUxMDIyNzktYmM1MC00NmRkLWFkODItNjJlMDlkNDRjMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxmFVeBWPov9k9o9vWqk2+k3p7G9iMv3Mijy Iwgw++FLhvo/iBe3S3b1gqywUaJd8upeCWUA09Mna5n439JTdj7Ied3JLkLxu7se h94RecDBuLRdldHF7bzu1vQs3eVXJ9s9dXxZgXn7iKWueQiSBiGYOZvVwA0lLWy0 iwwtJIprz5XOV6H5h+LtkXKO0ux2eViUaFCY83smj/C+25cb5EPLzArfWPzAlebf w16rghl1HJrym5oXt/UAiutLcJBknPqOhIH4Xmk22KTYxLdA6gs7NSyYoVcegIg9 iezegqMTjKfKBSSyDIVa9xky8kLuzgzz6/OsqtNrD9oWiZGvcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1sWPS5JaKx9mL0f/TDhJqWyfkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZmYTliZDQtYjJiNS0z ODg1LWI0NjktZDE0YWNkNGZkNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHyg2b6qH9M2i0nL5nQbDFhDOICzAiLJB7+U+toyWHtcJZyes/6t035 fl8torJepbjaxEaxpokvu3GoRsrtg/+FXsmjOuBpwfW+EZVfCUBb5GJU4MAkISfe +2Dvi2i8T+gq745C0H0vpyxDt+wAZ2xGdIyJ3ocL/nnNdZldCHjp4+ie0OA83Ddf i/XgPd/ee4PYanzmF0cZPacOXle9DqfrP0+W+kBY3q3gmwRFDfe2xR2EKiNzAiI/ E7ivRLqMScqZH5C2QoFmL6bVFC8sMHFVC4w47J2DoOUFhJI/Umxd+wrk1YLYA4OY F1eWoi7sg/1oEJgXdDCWRR3ji+96g4g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:41 2024 by rpki-client on console-ams.rpki-client.org