$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d2abcf-3d59-3670-8b32-215722fb7c66.roa File: f1d2abcf-3d59-3670-8b32-215722fb7c66.roa (raw, json) Hash identifier: f+n9ytds+5HUvElAOr6nujiA8XyuOQMKijZXvV9btsI= Subject key identifier: 45:DF:52:56:BF:2B:65:21:27:77:37:63:D0:BE:90:6F:52:27:D9:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584750B0AD33A57E646E5883C740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d2abcf-3d59-3670-8b32-215722fb7c66.roa Signing time: Tue 24 Sep 2024 01:00:31 +0000 ROA not before: Tue 24 Sep 2024 01:00:31 +0000 ROA not after: Mon 23 Dec 2024 02:00:31 +0000 asID: 16625 IP address blocks: 173.223.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:50:b0:ad:33:a5:7e:64:6e:58:83:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2024 GMT Not After : Dec 23 02:00:31 2024 GMT Subject: CN=008442b9-031d-4cc8-9af4-729d485683e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:8c:14:69:0d:61:65:1b:09:f1:43:15:18: a4:52:d9:94:d1:6f:67:43:3d:ba:bc:dc:c5:a3:24: 39:da:00:b2:ac:d2:03:f4:7c:06:d2:65:a7:e1:41: 93:b0:99:86:2d:66:db:a8:19:52:0e:d2:78:b9:72: b8:0a:ce:a7:1f:60:a0:db:e2:ab:ba:d7:ef:b2:3f: 46:4b:b3:ee:d5:de:bd:dd:8c:3a:1f:16:53:a9:41: e3:26:fc:62:ef:97:50:64:8f:be:d2:12:16:72:59: ff:a2:fa:fe:e9:94:6d:19:39:be:9a:85:9d:8f:3b: 15:f1:8d:91:53:41:71:e5:e0:f7:ec:85:fc:13:b3: 8f:30:cd:aa:85:60:bd:41:02:82:68:7f:86:44:07: a5:86:07:9a:f9:eb:52:ff:fa:37:ee:31:6b:53:8a: 80:82:75:51:df:50:69:78:57:fb:38:7a:d8:c3:cc: 72:09:bb:c5:1a:a2:14:00:56:0f:63:7f:05:ad:13: b7:c7:07:47:2b:64:6a:1a:df:eb:43:5a:05:db:8e: 52:c2:ad:8b:e1:54:65:61:de:93:b1:78:a9:b3:62: 7f:03:1a:36:87:03:f8:4e:a1:e4:f5:85:f2:94:f9: 07:a2:ef:fb:9b:39:97:8b:bb:92:6f:13:85:89:cd: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:52:56:BF:2B:65:21:27:77:37:63:D0:BE:90:6F:52:27:D9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d2abcf-3d59-3670-8b32-215722fb7c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a1:b6:76:43:e9:b3:6a:c0:5f:a4:2b:95:72:f3:34:62:35: bc:5f:44:d9:95:92:a0:eb:1a:49:8c:c5:83:88:57:b4:53:c2: 9d:a2:e3:32:38:e5:ec:db:81:78:fe:79:83:d0:13:fe:5b:e6: c1:d4:40:4f:78:fd:d4:57:a6:b5:24:c5:41:07:7b:4c:b8:cf: 8c:39:76:0c:c5:df:79:67:a3:c3:b4:90:d7:b5:d6:dc:2b:67: 90:12:d0:3d:35:30:cf:0b:ec:0a:30:fb:4f:d7:7f:72:44:e5: c2:53:4d:b5:0c:f5:5f:20:7f:eb:0b:04:19:34:f8:46:6d:2d: 69:2f:b0:03:6f:4b:a9:42:cb:af:33:69:62:b5:dd:70:3a:26: 67:79:51:66:ba:93:94:1f:07:e4:cc:e9:39:ed:cb:3c:c4:4c: 78:2b:6c:39:4f:ad:aa:6a:a9:43:b5:a0:2b:9c:37:ec:b6:5d: 03:8f:85:b4:ff:28:41:45:2a:a9:33:0a:4a:cd:ae:ce:03:ee: 39:c2:78:3e:01:26:1f:a7:10:f1:13:4c:98:f3:d6:c5:47:b8: c6:82:8c:ed:18:d0:12:9b:55:38:aa:ac:ae:88:82:bb:ed:d0: a6:7a:53:88:ec:d2:16:5d:d1:74:93:42:29:4b:2f:14:c2:6d: 47:ad:d6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQsK0zpX5kbliDx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDAxMDAzMVoXDTI0MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDA4NDQyYjktMDMxZC00Y2M4LTlhZjQtNzI5ZDQ4NTY4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEOMFGkNYWUbCfFDFRikUtmU0W9nQz26vNzF oyQ52gCyrNID9HwG0mWn4UGTsJmGLWbbqBlSDtJ4uXK4Cs6nH2Cg2+Krutfvsj9G S7Pu1d693Yw6HxZTqUHjJvxi75dQZI++0hIWcln/ovr+6ZRtGTm+moWdjzsV8Y2R U0Fx5eD37IX8E7OPMM2qhWC9QQKCaH+GRAelhgea+etS//o37jFrU4qAgnVR31Bp eFf7OHrYw8xyCbvFGqIUAFYPY38FrRO3xwdHK2RqGt/rQ1oF245Swq2L4VRlYd6T sXips2J/Axo2hwP4TqHk9YXylPkHou/7mzmXi7uSbxOFic2RMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXfUla/K2UhJ3c3Y9C+kG9SJ9laMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjFkMmFiY2YtM2Q1OS0z NjcwLThiMzItMjE1NzIyZmI3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyhtnZD6bNqwF+kK5Vy8zRiNbxfRNmVkqDrGkmMxYOIV7RTwp2i4zI4 5ezbgXj+eYPQE/5b5sHUQE94/dRXprUkxUEHe0y4z4w5dgzF33lno8O0kNe11twr Z5AS0D01MM8L7Aow+0/Xf3JE5cJTTbUM9V8gf+sLBBk0+EZtLWkvsANvS6lCy68z aWK13XA6Jmd5UWa6k5QfB+TM6TntyzzETHgrbDlPrapqqUO1oCucN+y2XQOPhbT/ KEFFKqkzCkrNrs4D7jnCeD4BJh+nEPETTJjz1sVHuMaCjO0Y0BKbVTiqrK6Igrvt 0KZ6U4js0hZd0XSTQilLLxTCbUet1gI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:53 2024 by rpki-client on console-fra.rpki-client.org