$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa File: 81971457-da63-315b-a46b-b1f35234d76e.roa (raw, json) Hash identifier: Y/TfxoVoLeGU1P/FsMpNrAVGH+Aj9badAa7m0f6aWFw= Subject key identifier: E3:3A:50:90:37:CB:9D:3B:A7:03:EB:9F:69:07:C8:47:29:7A:EB:D9 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F432858476F663C9E9FADAC1820351806 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 3214 IP address blocks: 23.165.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:3c:9e:9f:ad:ac:18:20:35:18:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=e9a5ea12-b8ff-42da-bdfd-064dc976ba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:a2:99:70:62:34:bf:d8:b0:62:f6:fc:b9: 51:84:e4:b6:55:ac:92:1c:09:59:ed:a4:38:fa:7e: 7a:b4:b1:fc:ea:9a:cd:d5:fa:a6:a8:2f:88:8f:2c: 47:a9:22:56:af:44:51:d2:de:3d:2c:67:5d:ca:89: cc:84:17:1d:c2:00:ea:c4:8f:03:39:2e:1c:c0:27: 20:2b:1b:b5:3f:2f:6c:ce:2e:9b:7b:49:1b:9b:e6: b5:4a:bc:e4:4e:cd:c2:cc:bc:86:4f:93:8d:65:d1: 09:9a:05:d6:0b:42:9f:6e:69:2f:cd:40:86:0a:c4: 17:1a:36:cf:91:4c:f9:9d:67:39:0d:90:1c:ee:10: 8c:e9:dd:10:6c:33:97:ec:13:8f:11:5f:84:f9:90: 54:51:fd:30:d1:fc:ff:59:17:9e:bb:70:c3:52:86: f4:72:33:d5:3b:07:1a:55:d0:de:41:91:c6:03:3f: b6:30:f2:e7:9a:e0:bd:98:02:a6:98:73:71:ee:27: eb:34:b3:94:21:63:47:86:ac:96:ca:d3:18:65:2b: 54:92:fa:d7:5c:fb:e7:31:b3:7f:67:59:2b:80:48: 9d:c4:22:df:90:28:5f:0d:78:15:d6:72:bb:6b:50: 97:f8:06:58:08:48:20:ec:00:98:6d:ab:1d:65:86: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3A:50:90:37:CB:9D:3B:A7:03:EB:9F:69:07:C8:47:29:7A:EB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: 23.165.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:06:1b:0a:b9:19:a4:3e:c2:73:f1:4d:d7:9d:48:76:38:dd: e6:13:74:02:70:d3:6c:71:ab:ad:df:2e:80:be:7f:73:a7:1e: 22:dd:16:c9:55:90:88:48:e7:31:d7:76:4d:16:65:8e:3c:c4: 29:8a:54:9d:c3:eb:75:4a:81:e8:86:10:3a:b8:44:a3:e1:55: 1d:79:dd:3d:ab:c9:e8:d6:19:0e:ee:7d:bf:26:a0:40:be:51: df:89:c9:13:c2:4a:2f:b8:8c:81:25:80:05:cf:45:82:70:08: b3:4f:36:28:bd:01:df:d0:f6:ec:11:b5:6c:f8:7a:80:f6:c4: 38:6b:32:91:e7:58:d4:52:f2:00:4e:5f:75:63:73:86:23:b5: 4e:d6:5c:b7:b6:5a:b9:2d:ef:0b:6c:6b:46:db:9c:9c:dd:83: 56:77:59:7d:fc:b2:cf:af:18:67:11:7c:d1:09:00:b6:bf:35: e0:fa:c0:64:90:57:83:78:f7:94:6a:e0:47:47:b2:bc:66:e0: cf:f7:c6:c9:a0:e2:50:e8:49:0e:4f:09:29:47:82:18:3c:94: e1:04:22:c5:d0:4f:4e:19:86:7f:4b:ac:d1:89:ff:09:9f:a9: ba:62:96:f6:e2:b7:f0:35:17:30:15:68:aa:b2:4d:ca:7a:44: e4:30:5e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdvZjyen62sGCA1GAYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZTlhNWVhMTItYjhmZi00MmRhLWJkZmQtMDY0ZGM5NzZiYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO6imXBiNL/YsGL2/LlRhOS2VaySHAlZ7aQ4 +n56tLH86prN1fqmqC+IjyxHqSJWr0RR0t49LGddyonMhBcdwgDqxI8DOS4cwCcg Kxu1Py9szi6be0kbm+a1SrzkTs3CzLyGT5ONZdEJmgXWC0KfbmkvzUCGCsQXGjbP kUz5nWc5DZAc7hCM6d0QbDOX7BOPEV+E+ZBUUf0w0fz/WReeu3DDUob0cjPVOwca VdDeQZHGAz+2MPLnmuC9mAKmmHNx7ifrNLOUIWNHhqyWytMYZStUkvrXXPvnMbN/ Z1krgEidxCLfkChfDXgV1nK7a1CX+AZYCEgg7ACYbasdZYYelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM6UJA3y507pwPrn2kHyEcpeuvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvODE5NzE0NTctZGE2My0z MTViLWE0NmItYjFmMzUyMzRkNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwGGwq5GaQ+wnPxTdedSHY43eYTdAJw02xxq63fLoC+f3OnHiLdFslV kIhI5zHXdk0WZY48xCmKVJ3D63VKgeiGEDq4RKPhVR153T2ryejWGQ7ufb8moEC+ Ud+JyRPCSi+4jIElgAXPRYJwCLNPNii9Ad/Q9uwRtWz4eoD2xDhrMpHnWNRS8gBO X3Vjc4YjtU7WXLe2Wrkt7wtsa0bbnJzdg1Z3WX38ss+vGGcRfNEJALa/NeD6wGSQ V4N495Rq4EdHsrxm4M/3xsmg4lDoSQ5PCSlHghg8lOEEIsXQT04Zhn9LrNGJ/wmf qbpilvbit/A1FzAVaKqyTcp6ROQwXnc= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:14 2024 by rpki-client on console-ams.rpki-client.org