$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: Eu+HASc5+g/97sR0XPA+Fk9IbIsXIHx3B8sYlDNtYHk= Subject key identifier: 5E:8F:A6:A4:25:03:BE:76:33:AA:CA:CA:7D:81:6B:32:EE:65:2E:60 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F43285847E35F76EF19ECE48B8B451E40 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:76:ef:19:ec:e4:8b:8b:45:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=23a38f93-564d-4abd-bd54-b28254ce9410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:20:f1:51:54:00:9d:49:1d:6d:ed:f4:0f: d0:54:50:af:dc:b4:ea:6d:18:ff:d9:ee:a5:2c:b7: 59:bc:af:f4:03:ba:66:b5:11:74:e4:25:2a:b8:aa: 71:91:e7:cb:2d:a8:4a:02:11:86:09:b4:cf:79:81: 37:c4:54:0c:1f:2b:94:ec:60:d3:b2:ec:24:c7:ed: 57:ce:8a:9b:de:10:bd:3a:94:d6:c8:53:56:15:aa: a3:8a:c2:81:5f:46:80:f8:fb:4f:2b:f0:8e:9e:03: df:ca:1c:24:86:7a:ea:69:89:6d:e9:eb:25:20:f6: 84:0e:7e:b1:ba:eb:ff:21:31:5f:e3:ac:11:ff:c3: a1:e6:d2:de:2d:37:03:14:f3:dd:f1:f6:92:9f:0f: e0:64:e4:6a:17:6e:ed:eb:f0:9c:a9:d1:cf:e9:1a: 2c:97:fb:6b:fb:d7:dd:a5:aa:47:92:2e:ce:f8:77: 45:87:6c:80:f1:3e:e9:5c:a2:f1:de:86:42:40:41: 7e:fb:06:6c:74:6f:77:03:e0:9c:d0:6e:d4:e7:15: 4c:f3:1b:e7:ac:58:1a:ea:8c:54:a9:7e:d9:68:47: 6d:04:3f:b2:d3:d0:0c:40:ae:13:88:1f:85:5e:01: 91:11:e6:2e:44:6c:15:a5:97:5b:ba:fa:2f:11:4c: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:A6:A4:25:03:BE:76:33:AA:CA:CA:7D:81:6B:32:EE:65:2E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3b:ed:a9:7b:38:b1:1d:21:d1:2d:77:bf:74:e5:db:d1:cc: e4:b5:e8:81:6d:e7:fb:68:c3:3e:01:90:eb:e7:67:4e:29:31: 79:63:af:eb:58:cf:c1:fb:f1:75:0f:fe:b0:5a:ec:0f:1a:be: a1:4e:3c:38:49:b8:e0:fa:6f:ae:4f:55:9a:26:fd:4f:ec:ec: 85:69:ef:94:32:31:9a:ed:9b:75:9b:75:18:d2:71:01:27:e6: 19:ce:9b:90:63:2f:cb:8c:54:aa:a1:7a:e8:31:81:14:f7:94: 65:a2:88:40:87:0c:46:7e:8c:ad:60:bc:5f:d9:4d:32:f0:7e: e9:46:ca:53:77:28:c7:fc:74:c9:24:17:36:80:90:5c:b7:2f: 3c:fe:e9:c4:93:a4:61:e8:47:6f:5b:4b:1e:52:72:b4:70:dc: f9:1c:39:67:de:72:ca:d9:19:60:e2:eb:e5:0c:88:0f:3f:d0: ef:31:43:6a:a3:88:ea:14:01:38:bf:39:78:a2:89:a8:da:53: db:71:33:73:bf:04:27:46:5e:8b:85:84:b4:7f:37:09:03:f8: e5:94:ba:ef:c5:92:bc:a2:df:61:7c:87:c5:69:30:7f:9a:6b: 06:7d:6b:64:ae:99:3c:30:57:0d:53:d6:38:67:70:12:fc:1f: a3:c9:12:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3bvGezki4tFHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk MjNhMzhmOTMtNTY0ZC00YWJkLWJkNTQtYjI4MjU0Y2U5NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK0g8VFUAJ1JHW3t9A/QVFCv3LTqbRj/2e6l LLdZvK/0A7pmtRF05CUquKpxkefLLahKAhGGCbTPeYE3xFQMHyuU7GDTsuwkx+1X zoqb3hC9OpTWyFNWFaqjisKBX0aA+PtPK/COngPfyhwkhnrqaYlt6eslIPaEDn6x uuv/ITFf46wR/8Oh5tLeLTcDFPPd8faSnw/gZORqF27t6/CcqdHP6Rosl/tr+9fd papHki7O+HdFh2yA8T7pXKLx3oZCQEF++wZsdG93A+Cc0G7U5xVM8xvnrFga6oxU qX7ZaEdtBD+y09AMQK4TiB+FXgGREeYuRGwVpZdbuvovEUw70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6PpqQlA752M6rKyn2BazLuZS5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM77al7OLEdIdEtd7905dvRzOS16IFt5/towz4BkOvnZ04pMXljr+tY z8H78XUP/rBa7A8avqFOPDhJuOD6b65PVZom/U/s7IVp75QyMZrtm3WbdRjScQEn 5hnOm5BjL8uMVKqheugxgRT3lGWiiECHDEZ+jK1gvF/ZTTLwfulGylN3KMf8dMkk FzaAkFy3Lzz+6cSTpGHoR29bSx5ScrRw3PkcOWfecsrZGWDi6+UMiA8/0O8xQ2qj iOoUATi/OXiiiajaU9txM3O/BCdGXouFhLR/NwkD+OWUuu/Fkryi32F8h8VpMH+a awZ9a2SumTwwVw1T1jhncBL8H6PJEtQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org