$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa File: f897acc6-a7d4-3d98-a462-0860f7cc4426.roa (raw, json) Hash identifier: zDIxl9jd29DGHrTRevxgbP4Sofhu8lvc31Qph2ke0I4= Subject key identifier: FE:DE:53:98:21:13:3E:EC:20:10:1F:8D:F3:AF:49:10:2F:FB:2C:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477BF66EC2B95432887D721CA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.36.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6e:c2:b9:54:32:88:7d:72:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=0dfa154c-b433-4610-bcb3-e8c763615b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:00:56:20:48:06:d9:ec:02:44:7a:93:2f: 8a:88:1e:2d:80:90:15:ed:8d:93:ab:cf:ad:9c:3d: 66:bf:4b:35:df:fb:c4:e4:df:ab:b9:9b:dd:ef:b5: 30:2c:a9:81:86:ea:e0:7e:a9:0a:a6:a4:ed:7a:88: 1e:ae:38:c2:b3:67:f8:f1:42:23:e2:fe:a1:23:8d: 23:a7:77:ea:be:27:4d:46:18:56:24:19:e7:6b:d9: 8d:59:4d:98:35:4d:3a:9c:d6:fa:7e:03:33:1d:14: 8b:88:86:90:85:7d:f2:00:bb:4e:e6:48:b4:7e:72: 5f:b3:dd:f8:cd:96:da:15:64:d3:3e:3c:79:96:77: 3f:28:f9:ff:81:7b:14:d2:06:c0:55:cd:a6:25:2f: b7:d7:59:d8:d7:a5:47:6c:f6:33:fd:0a:92:b3:9d: 6e:e4:aa:af:38:f4:c5:6c:8d:6a:0c:e8:6b:82:f5: 19:78:13:3f:c8:66:1f:87:8d:06:43:70:72:77:96: 68:8e:5a:fa:4f:1f:3e:04:f3:15:4e:e1:0a:a1:f4: e2:d0:b2:33:7a:eb:e2:97:71:7e:50:74:4a:49:84: 21:55:c8:ed:6f:1d:01:3d:0b:95:3f:bf:1a:97:ba: 84:10:c1:e6:a5:2e:04:07:50:46:39:f2:3a:57:85: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DE:53:98:21:13:3E:EC:20:10:1F:8D:F3:AF:49:10:2F:FB:2C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:22:08:cf:1f:1c:f9:f6:3c:03:e1:24:37:95:87:90:d4:70: 69:37:a1:12:83:ad:d5:c5:92:c0:16:45:a1:1f:75:1c:5f:08: 4f:58:79:7f:80:e6:dd:10:50:03:53:47:5c:e3:38:44:55:7d: a7:35:4a:5a:fb:9e:43:79:22:97:8d:83:e6:57:28:55:47:3e: 29:24:a7:29:72:96:b2:bc:d1:aa:7d:d2:ee:03:15:dd:b1:21: fa:bf:69:4c:e0:30:64:40:de:63:79:3b:dd:f4:bc:2d:1f:81: 88:95:b7:c1:c7:8f:af:e4:02:0e:c8:d3:fc:3b:28:53:df:41: 33:09:e7:e8:02:31:0c:cf:34:da:aa:1d:25:b0:0e:8b:e8:1a: 1b:54:87:30:7f:9c:47:f1:af:ff:73:45:2a:36:36:57:86:78: 5f:34:73:95:33:cd:d8:1d:7e:fe:34:24:db:91:1e:2c:8c:36: 8c:bb:19:25:d4:94:6f:c4:08:a3:42:1a:b4:87:2d:2d:70:0a: 5d:cb:43:ba:f4:05:d9:f1:29:02:ca:b5:a1:9b:3b:6f:93:e4: dc:fe:b7:ef:8a:57:d9:09:d0:42:f2:85:06:3c:9f:ae:2d:0e: 2b:9e:14:00:e1:de:56:f2:ba:76:f1:83:ad:97:23:1d:b0:3c: ed:18:f7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79m7CuVQyiH1yHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MGRmYTE1NGMtYjQzMy00NjEwLWJjYjMtZThjNzYzNjE1YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl90AViBIBtnsAkR6ky+KiB4tgJAV7Y2Tq8+t nD1mv0s13/vE5N+ruZvd77UwLKmBhurgfqkKpqTteogerjjCs2f48UIj4v6hI40j p3fqvidNRhhWJBnna9mNWU2YNU06nNb6fgMzHRSLiIaQhX3yALtO5ki0fnJfs934 zZbaFWTTPjx5lnc/KPn/gXsU0gbAVc2mJS+311nY16VHbPYz/QqSs51u5KqvOPTF bI1qDOhrgvUZeBM/yGYfh40GQ3Byd5Zojlr6Tx8+BPMVTuEKofTi0LIzeuvil3F+ UHRKSYQhVcjtbx0BPQuVP78al7qEEMHmpS4EB1BGOfI6V4WyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7eU5ghEz7sIBAfjfOvSRAv+yyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjg5N2FjYzYtYTdkNC0z ZDk4LWE0NjItMDg2MGY3Y2M0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkiCM8fHPn2PAPhJDeVh5DUcGk3oRKDrdXFksAWRaEfdRxfCE9YeX+A 5t0QUANTR1zjOERVfac1Slr7nkN5IpeNg+ZXKFVHPikkpylylrK80ap90u4DFd2x Ifq/aUzgMGRA3mN5O930vC0fgYiVt8HHj6/kAg7I0/w7KFPfQTMJ5+gCMQzPNNqq HSWwDovoGhtUhzB/nEfxr/9zRSo2NleGeF80c5Uzzdgdfv40JNuRHiyMNoy7GSXU lG/ECKNCGrSHLS1wCl3LQ7r0BdnxKQLKtaGbO2+T5Nz+t++KV9kJ0ELyhQY8n64t DiueFADh3lbyunbxg62XIx2wPO0Y9zo= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:57 2024 by rpki-client on console-fra.rpki-client.org