$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270480f9-767b-3594-95ca-1d9d0b9c2a2c.roa File: 270480f9-767b-3594-95ca-1d9d0b9c2a2c.roa (raw, json) Hash identifier: 7gcIIEcUqgTL/qiXpmqchya3Tl3P2tAdnR6IKR2Gh7c= Subject key identifier: 1C:C8:30:C7:5A:4E:0C:0B:62:1B:E5:30:F2:9F:E5:51:F4:17:F7:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C774975E0FD8D38CCDE960C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270480f9-767b-3594-95ca-1d9d0b9c2a2c.roa Signing time: Tue 05 Nov 2024 14:00:38 +0000 ROA not before: Tue 05 Nov 2024 14:00:38 +0000 ROA not after: Mon 03 Feb 2025 14:00:38 +0000 asID: 16625 IP address blocks: 23.199.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c7:74:97:5e:0f:d8:d3:8c:cd:e9:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 5 14:00:38 2024 GMT Not After : Feb 3 14:00:38 2025 GMT Subject: CN=1bc92b62-6dee-47cb-83ac-949ce828947b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:2a:d0:94:87:6e:60:51:9b:a3:bc:f5:1d: 5f:7d:3a:48:30:32:55:ce:08:c2:c5:90:20:57:14: f9:44:c2:f3:68:da:49:38:d9:6c:33:f8:35:00:bc: 95:76:83:31:9e:c7:4e:92:7f:e0:c6:12:eb:d8:3e: 62:e0:c0:28:52:b7:a3:75:cb:1b:e9:4f:be:8a:1d: fd:b7:88:b1:6b:33:9a:0e:bf:87:67:9c:dc:9e:e1: d4:b5:26:9a:66:58:dc:fa:ce:14:2d:0a:e9:64:af: 0c:7a:e6:d2:62:c7:3e:f2:ea:ff:04:b0:df:67:35: 53:47:b9:a9:a6:2c:1e:10:25:03:d2:00:55:fb:e6: 0e:af:14:2b:d1:2e:b9:e7:bd:2d:fb:7d:ba:6f:cf: fb:60:f8:d9:3e:fe:70:ab:70:0c:fe:2d:20:52:c5: 41:c7:ce:aa:c9:30:0b:33:45:ad:87:c1:02:21:00: 57:14:2b:8d:2c:e1:a6:ea:82:0b:26:19:6b:3e:73: fa:a7:fe:80:88:7a:3f:99:81:43:03:bb:7a:d3:6d: ce:df:8c:40:6e:87:6f:f7:1f:02:0d:19:47:0e:44: 6b:ca:67:c2:a4:04:0d:b2:5a:64:e6:38:23:d6:84: 71:d7:02:0d:09:a7:59:01:f7:44:07:21:07:2f:33: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:30:C7:5A:4E:0C:0B:62:1B:E5:30:F2:9F:E5:51:F4:17:F7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270480f9-767b-3594-95ca-1d9d0b9c2a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7f:62:30:82:4b:f3:52:6e:86:0f:80:67:38:29:c6:78:8e: bc:af:e8:3e:d0:7d:69:b7:e3:79:88:fd:8a:ee:8e:49:ee:7e: c4:8c:a6:2f:15:be:89:5f:ee:07:a7:1d:ae:4a:e8:30:47:d8: e5:cf:46:fc:92:ac:39:92:64:30:4e:61:23:18:3f:c5:64:1f: b7:9b:e0:41:1f:46:d7:8c:ea:56:0b:68:09:37:77:6c:af:28: 28:49:93:23:c5:4b:07:b4:48:8d:f1:07:8a:03:2b:0f:ee:ae: f7:89:ff:42:65:c9:50:48:2e:f3:18:88:9a:06:5e:60:bc:ae: 16:9f:16:42:a7:ee:2e:ce:d5:c4:7c:31:43:84:c3:b4:86:e0: 7e:02:a8:7e:74:5c:be:3c:df:eb:4d:a3:1b:ee:3f:27:32:90: d5:16:a6:d3:81:78:4b:7d:33:cd:db:7f:77:53:e5:56:ef:1b: 1a:c9:d2:08:e2:86:a8:eb:65:62:94:e9:7e:40:77:c4:01:28: e4:6c:34:78:8a:38:84:e4:e0:64:01:e8:a9:9e:89:a5:05:d4: cb:4d:71:8f:cd:99:f3:62:be:00:ec:7e:44:ee:27:32:ee:46: 59:b6:6e:df:bb:82:4d:1d:67:13:e2:49:1b:52:25:7a:02:8f: 72:b1:54:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfHdJdeD9jTjM3pYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNTE0MDAzOFoXDTI1MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MWJjOTJiNjItNmRlZS00N2NiLTgzYWMtOTQ5Y2U4Mjg5NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZMq0JSHbmBRm6O89R1ffTpIMDJVzgjCxZAg VxT5RMLzaNpJONlsM/g1ALyVdoMxnsdOkn/gxhLr2D5i4MAoUrejdcsb6U++ih39 t4ixazOaDr+HZ5zcnuHUtSaaZljc+s4ULQrpZK8MeubSYsc+8ur/BLDfZzVTR7mp piweECUD0gBV++YOrxQr0S65570t+326b8/7YPjZPv5wq3AM/i0gUsVBx86qyTAL M0Wth8ECIQBXFCuNLOGm6oILJhlrPnP6p/6AiHo/mYFDA7t6023O34xAbodv9x8C DRlHDkRrymfCpAQNslpk5jgj1oRx1wINCadZAfdEByEHLzMZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzIMMdaTgwLYhvlMPKf5VH0F/fcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjcwNDgwZjktNzY3Yi0z NTk0LTk1Y2EtMWQ5ZDBiOWMyYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd/YjCCS/NSboYPgGc4KcZ4jryv6D7QfWm343mI/YrujknufsSMpi8V volf7genHa5K6DBH2OXPRvySrDmSZDBOYSMYP8VkH7eb4EEfRteM6lYLaAk3d2yv KChJkyPFSwe0SI3xB4oDKw/urveJ/0JlyVBILvMYiJoGXmC8rhafFkKn7i7O1cR8 MUOEw7SG4H4CqH50XL483+tNoxvuPycykNUWptOBeEt9M83bf3dT5VbvGxrJ0gji hqjrZWKU6X5Ad8QBKORsNHiKOITk4GQB6KmeiaUF1MtNcY/NmfNivgDsfkTuJzLu Rlm2bt+7gk0dZxPiSRtSJXoCj3KxVGM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:38 2024 by rpki-client on console-ams.rpki-client.org