$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa File: d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa (raw, json) Hash identifier: mE052H/rawLLYwHBsLfyV7LrNSyABRJ2ddmpVNCvo6Y= Subject key identifier: D1:20:E8:30:DA:4C:3D:12:21:66:91:07:D7:72:FD:5C:24:66:BB:48 Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F43285847A30C069B6AC25E4D1D190E18 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 31799 IP address blocks: 23.138.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:06:9b:6a:c2:5e:4d:1d:19:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=5a0e14c2-c1b9-40cc-a0b3-3fc19bf727eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:b4:d6:46:f8:68:fc:ec:43:53:6d:f2:02: ee:c8:fa:b7:62:c0:ad:0e:ae:47:44:a9:51:fc:2f: 9c:dd:83:74:36:1d:db:0e:37:c6:b5:69:62:47:3e: 41:54:2b:00:89:ed:c7:65:f3:c1:f3:9e:40:07:45: 58:25:f6:25:1b:93:66:9a:8a:f8:01:5f:2c:e5:41: 49:5f:74:6b:07:f7:5b:24:d6:17:65:7e:99:98:da: df:0c:3a:e4:f9:a3:1e:e1:4f:3e:cb:7c:5e:f5:78: ac:60:f7:b7:0a:63:c1:ac:e5:42:61:99:ec:05:c3: 5f:a9:ca:5d:8b:70:4e:9d:9b:57:61:e7:c4:7f:27: 96:14:0f:e7:f1:25:9e:49:fb:d0:d1:1f:8f:a0:f5: e9:b3:a6:63:e9:6d:3b:39:c6:c1:f4:f8:5c:b7:70: 6f:2e:e4:36:c2:57:4d:eb:77:aa:c6:ef:55:65:ee: a1:d2:d3:67:96:e9:b5:a6:03:4f:47:8c:10:82:92: 9e:8b:04:e4:dc:f9:b4:af:85:8e:1d:39:9c:15:3a: aa:e8:b6:be:11:d0:4b:29:4d:57:2c:68:da:0b:a9: 36:6b:3e:5a:bf:ae:cf:fd:34:fb:c3:11:d6:67:45: 3d:94:fc:ed:a2:ef:94:be:9c:e1:90:ca:21:c2:6e: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:20:E8:30:DA:4C:3D:12:21:66:91:07:D7:72:FD:5C:24:66:BB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 23.138.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ab:0b:3a:2a:2b:c7:48:20:73:7a:03:e9:9a:84:32:77:f4: 8f:21:7d:68:55:65:15:3d:13:8d:ce:3a:4b:91:cd:c8:c4:a8: dc:d7:39:f1:b2:0d:79:47:d0:47:e2:5b:cf:d4:5e:0b:0f:7d: db:46:d6:79:a9:df:0d:b2:bc:72:ef:80:0c:95:24:a9:18:92: 81:fb:d1:03:f0:89:1c:c8:18:98:04:02:f2:0b:1c:8a:a9:77: 1d:89:47:6e:c0:81:13:88:a9:98:f1:54:fc:6a:01:c7:7a:62: 37:4b:91:97:99:10:5a:b4:3c:6a:52:a6:c0:0e:a4:a8:d4:62: 25:20:33:14:22:75:cf:0b:ba:d3:8e:c0:b1:9d:08:ed:12:92: 2d:31:45:a3:13:e0:10:c5:cb:05:9a:ac:75:71:11:e3:02:89: aa:39:d5:8e:d0:ab:89:1f:05:c1:30:f0:4f:b2:eb:43:91:bd: d2:34:6f:63:bb:ca:74:29:60:56:d5:05:a0:74:21:09:4f:84: 53:45:25:56:55:f9:4c:35:bc:c6:d8:30:38:18:dd:8b:9d:f8: 9d:4d:09:a0:5c:52:11:01:36:ee:d9:e5:67:08:7b:07:77:02: 5e:03:3d:fe:c3:48:64:4c:31:f1:72:47:6d:4d:e2:31:27:e5: 0f:2e:47:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejDAabasJeTR0ZDhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk NWEwZTE0YzItYzFiOS00MGNjLWEwYjMtM2ZjMTliZjcyN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7201kb4aPzsQ1Nt8gLuyPq3YsCtDq5HRKlR /C+c3YN0Nh3bDjfGtWliRz5BVCsAie3HZfPB855AB0VYJfYlG5Nmmor4AV8s5UFJ X3RrB/dbJNYXZX6ZmNrfDDrk+aMe4U8+y3xe9XisYPe3CmPBrOVCYZnsBcNfqcpd i3BOnZtXYefEfyeWFA/n8SWeSfvQ0R+PoPXps6Zj6W07OcbB9Phct3BvLuQ2wldN 63eqxu9VZe6h0tNnlum1pgNPR4wQgpKeiwTk3Pm0r4WOHTmcFTqq6La+EdBLKU1X LGjaC6k2az5av67P/TT7wxHWZ0U9lPztou+UvpzhkMohwm5elQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEg6DDaTD0SIWaRB9dy/VwkZrtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZDYyOWYxZjAtMGNjZC0z YzlkLTk1NDgtYmYxOTJjZDMyZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKrCzoqK8dIIHN6A+mahDJ39I8hfWhVZRU9E43OOkuRzcjEqNzXOfGy DXlH0EfiW8/UXgsPfdtG1nmp3w2yvHLvgAyVJKkYkoH70QPwiRzIGJgEAvILHIqp dx2JR27AgROIqZjxVPxqAcd6YjdLkZeZEFq0PGpSpsAOpKjUYiUgMxQidc8LutOO wLGdCO0Ski0xRaMT4BDFywWarHVxEeMCiao51Y7Qq4kfBcEw8E+y60ORvdI0b2O7 ynQpYFbVBaB0IQlPhFNFJVZV+Uw1vMbYMDgY3Yud+J1NCaBcUhEBNu7Z5WcIewd3 Al4DPf7DSGRMMfFyR21N4jEn5Q8uR8Y= -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:51 2024 by rpki-client on console-ams.rpki-client.org