$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: 1RpbXfvPFz/Ct9cSzp4VULqJmeAEVCjwq2OcGdm78u4= Subject key identifier: 29:45:93:78:4C:E9:F4:9B:69:83:08:05:60:07:96:D4:DB:5E:A4:D3 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F43285847DC64AD714EF861BC4A57EE40 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:ad:71:4e:f8:61:bc:4a:57:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=10a5c0f5-3860-4c82-8055-d4f04eaa97a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:e0:6e:9d:05:6d:ec:3b:20:4a:c2:27:a6: e5:d4:b7:3c:57:60:05:31:76:3e:6b:57:be:9e:41: 83:32:1e:5a:39:83:db:77:15:23:f0:57:28:e4:52: 21:fd:ab:a2:1f:4e:8b:c2:48:fc:40:f8:e9:8b:07: d1:03:a1:03:6c:0f:cd:cb:e1:91:b9:44:bc:c9:a5: a4:e4:5c:ce:cf:f2:f0:60:2e:19:a7:a3:11:60:5b: a8:15:b2:88:2a:51:f0:7b:e5:53:7a:65:db:dd:57: 4b:2c:f0:37:82:d1:89:ed:61:e5:f8:3c:5a:65:9d: 5c:e1:af:f1:ee:f6:da:6d:9e:4c:99:cc:d6:ba:93: 7b:ab:66:a8:58:7b:e0:cd:67:1a:cf:92:5a:fe:ef: f5:04:6e:b7:a6:9f:3e:be:23:b6:05:f1:e1:86:c9: 63:c8:15:95:07:13:d6:74:74:d2:fe:e6:c7:07:f8: 7a:7f:60:4e:55:16:c8:d2:f0:78:40:7d:06:f7:78: 10:61:75:01:16:0d:f0:bf:6f:3e:31:cd:a8:7e:f6: 55:30:8f:00:0f:44:e8:74:1e:19:83:cf:81:97:e0: 14:43:60:45:4c:30:31:5c:b0:b4:b6:cd:8b:25:3a: dd:cf:a8:6a:ca:2a:c9:fc:16:3a:c2:aa:96:3f:a8: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:45:93:78:4C:E9:F4:9B:69:83:08:05:60:07:96:D4:DB:5E:A4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bb:96:34:ba:c4:5a:76:65:b7:c4:ae:69:e1:82:a3:79:22: dc:c9:1c:01:6d:d5:48:96:2b:02:42:54:b0:57:4f:a1:f9:2d: 3d:71:4d:ea:3f:67:fa:87:90:a1:7b:e9:3d:dc:35:22:e6:11: 4d:88:9f:22:dd:31:76:3f:cf:16:dc:e5:46:2e:9a:0d:09:eb: 9b:51:8e:31:8d:3f:d6:01:09:6f:f6:3d:7a:aa:55:77:eb:21: 44:1e:35:5f:ee:48:df:49:73:62:ae:5f:2a:e5:5f:55:be:ec: 0e:9b:cf:a5:37:38:d5:57:a5:e4:62:7d:da:c1:63:ea:74:a3: fc:50:93:b0:4b:77:25:5c:c4:86:d2:e1:a9:df:3a:d7:c3:44: b9:74:ec:94:a3:45:b8:21:26:6b:64:09:5f:d5:a4:c7:a7:36: 51:5d:8d:03:85:47:a5:cf:b9:f0:0f:4c:a3:5b:7d:fa:b8:02: 04:bc:c0:61:6f:9d:3c:00:0a:67:73:04:ba:99:b4:7e:7a:ac: 8f:b2:75:89:98:13:b3:ed:31:15:e6:e1:6d:2e:5a:68:d1:e5: ea:2f:74:95:41:cc:b6:41:52:8d:f5:45:40:c1:d7:01:fa:9c: 9c:df:fa:43:fa:e8:ad:6a:87:f6:7d:c3:d6:32:08:ce:34:35: 84:8f:53:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK1xTvhhvEpX7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MTBhNWMwZjUtMzg2MC00YzgyLTgwNTUtZDRmMDRlYWE5N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWvgbp0Fbew7IErCJ6bl1Lc8V2AFMXY+a1e+ nkGDMh5aOYPbdxUj8Fco5FIh/auiH06Lwkj8QPjpiwfRA6EDbA/Ny+GRuUS8yaWk 5FzOz/LwYC4Zp6MRYFuoFbKIKlHwe+VTemXb3VdLLPA3gtGJ7WHl+DxaZZ1c4a/x 7vbabZ5MmczWupN7q2aoWHvgzWcaz5Ja/u/1BG63pp8+viO2BfHhhsljyBWVBxPW dHTS/ubHB/h6f2BOVRbI0vB4QH0G93gQYXUBFg3wv28+Mc2ofvZVMI8AD0TodB4Z g8+Bl+AUQ2BFTDAxXLC0ts2LJTrdz6hqyirJ/BY6wqqWP6jRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClFk3hM6fSbaYMIBWAHltTbXqTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+7ljS6xFp2ZbfErmnhgqN5ItzJHAFt1UiWKwJCVLBXT6H5LT1xTeo/ Z/qHkKF76T3cNSLmEU2InyLdMXY/zxbc5UYumg0J65tRjjGNP9YBCW/2PXqqVXfr IUQeNV/uSN9Jc2KuXyrlX1W+7A6bz6U3ONVXpeRifdrBY+p0o/xQk7BLdyVcxIbS 4anfOtfDRLl07JSjRbghJmtkCV/VpMenNlFdjQOFR6XPufAPTKNbffq4AgS8wGFv nTwACmdzBLqZtH56rI+ydYmYE7PtMRXm4W0uWmjR5eovdJVBzLZBUo31RUDB1wH6 nJzf+kP66K1qh/Z9w9YyCM40NYSPU0o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:03 2024 by rpki-client on console-ams.rpki-client.org