$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310d8414-5ca4-3187-8bc8-9d9554748e55.roa File: 310d8414-5ca4-3187-8bc8-9d9554748e55.roa (raw, json) Hash identifier: tBSfZJ41maa6j6oCD83h5LyoeX/nQqyrVIZRKS8Ifzc= Subject key identifier: 19:DF:97:5E:90:43:90:54:35:FF:47:76:15:11:CD:CD:80:72:EC:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C4AA2D6FBEAF34C0AF067E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310d8414-5ca4-3187-8bc8-9d9554748e55.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 16625 IP address blocks: 23.198.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:2d:6f:be:af:34:c0:af:06:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=8fa63b82-1212-4c35-b1fe-59c28ca0aa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:bc:29:81:ed:d1:8d:83:b1:43:66:b7:19: 55:91:00:12:a4:10:a9:07:f4:67:7d:ae:3b:a0:88: da:a9:ac:b6:e7:a5:f6:b2:b1:ca:7b:5c:16:fc:60: 6e:fc:9b:f9:ac:9e:05:7a:aa:ae:49:8c:4b:85:6b: 7b:a7:ac:c8:cf:65:28:a1:7a:0b:ab:c7:2f:10:11: df:06:37:a9:ae:30:44:1c:81:93:8c:79:0c:7d:92: 49:51:e8:88:49:47:d9:4d:fe:4f:23:af:60:78:1b: 0c:10:a4:f6:45:9f:a0:2c:cc:6f:6a:3d:26:b3:96: 9d:c5:51:d3:fc:ca:94:4f:fd:19:be:5c:15:1e:11: 91:19:e0:08:66:8b:ce:f0:59:d5:b6:ee:54:60:7e: 40:4c:56:72:25:89:b2:4b:26:5c:b2:05:5b:83:0c: 67:9c:8f:ce:2c:0d:2f:95:2a:fe:cb:bc:d2:70:9b: 60:e2:29:29:0c:27:14:e8:a9:94:ab:ce:90:29:7b: f5:d3:e5:82:f5:a6:63:7d:e3:09:06:71:d6:fa:0b: f0:3a:13:eb:80:31:c4:0a:1c:f3:55:a4:d6:af:9d: 29:82:f4:46:8d:13:f9:4e:a1:4a:2e:f8:54:f3:56: 39:23:3d:53:d6:da:e3:d8:69:39:1f:e9:14:95:be: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:97:5E:90:43:90:54:35:FF:47:76:15:11:CD:CD:80:72:EC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310d8414-5ca4-3187-8bc8-9d9554748e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:65:c2:51:d0:18:68:5c:df:07:58:19:22:18:c1:be:ac:4e: bc:72:85:c4:29:73:fd:a8:9a:04:93:e9:ac:1b:2d:67:04:90: 92:15:2d:43:7a:5c:57:0c:40:b5:43:98:46:f7:93:39:35:db: 64:b4:b8:26:1b:01:a5:96:10:14:d0:df:db:1d:1d:29:5c:8c: 2a:6c:14:9c:65:e0:3f:b1:05:a0:e6:b7:1f:36:2c:62:05:1f: ac:8f:17:e1:d3:d0:0a:c4:0a:9d:c7:77:cc:4e:9b:be:c3:24: 79:a4:38:10:82:0a:0c:e8:24:0e:c3:8d:34:ee:dd:c0:92:c9: be:cb:da:e1:bf:eb:b4:f8:77:23:6c:94:85:4d:c1:62:d6:28: 09:5a:f8:56:3e:be:13:ce:6f:d5:5d:3e:c3:60:8a:da:93:ed: 05:e2:ac:25:a2:35:3c:46:ad:db:ae:5e:79:12:fc:f2:8b:75: b2:99:fd:ff:3e:92:f9:4e:4e:a0:ce:1e:19:a0:30:c0:52:6f: 87:ec:ce:e0:9b:c9:31:67:36:99:09:e0:bb:34:c6:93:39:20: 1a:f1:a5:f9:88:69:ee:8b:2e:69:83:87:74:a4:39:b8:93:1d: 3d:f4:ea:85:31:41:b9:a6:2d:14:3e:f6:e7:1b:d6:a3:a6:59: 14:9c:db:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqi1vvq80wK8GfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk OGZhNjNiODItMTIxMi00YzM1LWIxZmUtNTljMjhjYTBhYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAe8KYHt0Y2DsUNmtxlVkQASpBCpB/Rnfa47 oIjaqay256X2srHKe1wW/GBu/Jv5rJ4FeqquSYxLhWt7p6zIz2UooXoLq8cvEBHf BjeprjBEHIGTjHkMfZJJUeiISUfZTf5PI69geBsMEKT2RZ+gLMxvaj0ms5adxVHT /MqUT/0ZvlwVHhGRGeAIZovO8FnVtu5UYH5ATFZyJYmySyZcsgVbgwxnnI/OLA0v lSr+y7zScJtg4ikpDCcU6KmUq86QKXv10+WC9aZjfeMJBnHW+gvwOhPrgDHEChzz VaTWr50pgvRGjRP5TqFKLvhU81Y5Iz1T1trj2Gk5H+kUlb5WnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnfl16QQ5BUNf9HdhURzc2Acuz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEwZDg0MTQtNWNhNC0z MTg3LThiYzgtOWQ5NTU0NzQ4ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZlwlHQGGhc3wdYGSIYwb6sTrxyhcQpc/2omgST6awbLWcEkJIVLUN6 XFcMQLVDmEb3kzk122S0uCYbAaWWEBTQ39sdHSlcjCpsFJxl4D+xBaDmtx82LGIF H6yPF+HT0ArECp3Hd8xOm77DJHmkOBCCCgzoJA7DjTTu3cCSyb7L2uG/67T4dyNs lIVNwWLWKAla+FY+vhPOb9VdPsNgitqT7QXirCWiNTxGrduuXnkS/PKLdbKZ/f8+ kvlOTqDOHhmgMMBSb4fszuCbyTFnNpkJ4Ls0xpM5IBrxpfmIae6LLmmDh3SkObiT HT306oUxQbmmLRQ+9ucb1qOmWRSc2zQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:47 2024 by rpki-client on console-ams.rpki-client.org