$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b983aed-4d77-3db7-9654-7eb62e0ec0e9.roa File: 1b983aed-4d77-3db7-9654-7eb62e0ec0e9.roa (raw, json) Hash identifier: bSHoGt8ZtRry4xE6Vwq29xbPur+WXbDaSXcL64SAJ2k= Subject key identifier: D1:5F:7B:2C:C5:CB:54:7E:3C:80:66:A2:50:B1:4F:EC:21:B0:79:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473FF09DBD7859402E69B54D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b983aed-4d77-3db7-9654-7eb62e0ec0e9.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 35994 IP address blocks: 23.201.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:9d:bd:78:59:40:2e:69:b5:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=67eade0d-e307-4296-a134-684837fa2bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:7c:0c:f8:63:20:84:94:30:4f:0b:d7:ec: 3e:e0:88:54:32:8d:fc:3f:98:15:0a:14:1d:4c:33: 0d:0f:2d:77:ca:e4:cf:7d:18:ee:43:66:74:43:fc: 16:1f:1e:7d:ba:5d:8f:e9:b4:93:ce:18:52:51:ef: 9e:2c:7f:6b:63:7c:a7:02:52:ae:40:6e:04:d6:23: af:bc:cc:52:f9:a3:22:7d:43:8f:8b:96:83:99:34: 81:6b:ec:c2:e6:b3:98:cc:aa:1e:a0:be:29:04:93: 53:58:9b:a1:77:38:95:92:4c:9f:2f:8d:71:a9:b8: ce:a8:9b:10:57:e0:41:eb:e7:8e:e9:3e:f5:30:9f: 7e:2b:57:12:07:22:f4:7b:25:24:79:35:45:22:07: 1b:cd:ac:72:bd:86:d9:1f:4f:84:24:90:da:4f:a2: 6e:63:c0:ec:ff:91:29:be:ac:db:d4:8e:b2:c3:3e: 1b:e6:fc:c1:63:33:b1:54:37:14:88:01:a6:d7:df: 69:6c:89:18:0a:53:6b:53:2b:e3:62:de:7a:2e:ed: a7:ad:bb:47:e3:4f:8d:93:61:a9:48:e8:08:21:21: c7:74:23:fc:c9:ec:80:9d:7c:b1:10:b5:70:79:d4: 37:0b:ed:25:c5:0e:83:53:62:fd:61:57:30:75:d6: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5F:7B:2C:C5:CB:54:7E:3C:80:66:A2:50:B1:4F:EC:21:B0:79:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b983aed-4d77-3db7-9654-7eb62e0ec0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b8:5f:d8:e3:75:9e:cf:fe:d1:78:55:06:7d:c5:c5:0a:2f: 7f:40:4c:11:e0:59:eb:15:72:29:d5:b0:de:5b:70:64:b2:d3: 13:1e:53:b2:23:46:31:b4:14:f5:d7:c1:86:3b:40:5c:ec:42: 0e:39:50:23:05:1b:6b:bc:c9:f5:d7:1a:ba:da:33:8d:38:2a: 1c:96:27:95:4b:0f:77:02:46:1b:85:78:aa:09:72:db:09:97: 32:9c:49:87:22:d3:5d:e7:32:cd:84:89:aa:fa:93:ab:ec:db: d7:8d:c8:a5:26:10:fb:b0:ba:0d:bc:12:14:0a:ca:86:be:e2: e7:bf:32:26:ee:08:20:63:22:17:6f:67:0f:7d:26:60:ee:07: f6:24:2b:b9:f6:df:a8:59:aa:1a:9c:cb:ab:5a:65:11:fd:b5: e0:29:27:12:29:ae:5e:e7:df:ad:10:61:37:87:75:e2:8f:9e: bf:eb:d7:aa:d4:e4:42:11:53:34:9f:5a:fb:d3:d4:94:67:3e: b8:80:b0:64:60:fc:4a:de:35:36:15:08:24:42:88:97:db:75: a8:17:cc:a6:6a:94:f3:92:ab:72:2e:bb:9e:70:a2:53:9a:10: 18:05:6f:25:bc:d2:75:2e:b5:01:bc:c3:58:ca:37:d5:ce:9c: 32:30:b4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8J29eFlALmm1TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NjdlYWRlMGQtZTMwNy00Mjk2LWExMzQtNjg0ODM3ZmEyYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mp8DPhjIISUME8L1+w+4IhUMo38P5gVChQd TDMNDy13yuTPfRjuQ2Z0Q/wWHx59ul2P6bSTzhhSUe+eLH9rY3ynAlKuQG4E1iOv vMxS+aMifUOPi5aDmTSBa+zC5rOYzKoeoL4pBJNTWJuhdziVkkyfL41xqbjOqJsQ V+BB6+eO6T71MJ9+K1cSByL0eyUkeTVFIgcbzaxyvYbZH0+EJJDaT6JuY8Ds/5Ep vqzb1I6ywz4b5vzBYzOxVDcUiAGm199pbIkYClNrUyvjYt56Lu2nrbtH40+Nk2Gp SOgIISHHdCP8yeyAnXyxELVwedQ3C+0lxQ6DU2L9YVcwddbIrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFfeyzFy1R+PIBmolCxT+whsHkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI5ODNhZWQtNGQ3Ny0z ZGI3LTk2NTQtN2ViNjJlMGVjMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe4X9jjdZ7P/tF4VQZ9xcUKL39ATBHgWesVcinVsN5bcGSy0xMeU7Ij RjG0FPXXwYY7QFzsQg45UCMFG2u8yfXXGrraM404KhyWJ5VLD3cCRhuFeKoJctsJ lzKcSYci013nMs2Eiar6k6vs29eNyKUmEPuwug28EhQKyoa+4ue/MibuCCBjIhdv Zw99JmDuB/YkK7n236hZqhqcy6taZRH9teApJxIprl7n360QYTeHdeKPnr/r16rU 5EIRUzSfWvvT1JRnPriAsGRg/EreNTYVCCRCiJfbdagXzKZqlPOSq3Iuu55wolOa EBgFbyW80nUutQG8w1jKN9XOnDIwtDI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:31 2024 by rpki-client on console-ams.rpki-client.org