$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f79dde9-a8a4-3d9c-8de8-d807f67cf45b.roa File: 3f79dde9-a8a4-3d9c-8de8-d807f67cf45b.roa (raw, json) Hash identifier: 54bAIAk4QAWPPpYR2VdAOaLi6rAXSp+GnGm9taUz6tU= Subject key identifier: A0:F7:B7:D7:27:25:54:E8:11:7D:3C:A0:4D:A4:D5:F3:C5:53:21:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847626B4E49DC5A55F7F9EEBC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f79dde9-a8a4-3d9c-8de8-d807f67cf45b.roa Signing time: Mon 30 Sep 2024 09:25:23 +0000 ROA not before: Mon 30 Sep 2024 09:25:23 +0000 ROA not after: Sun 29 Dec 2024 10:25:23 +0000 asID: 20940 IP address blocks: 23.200.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:6b:4e:49:dc:5a:55:f7:f9:ee:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 09:25:23 2024 GMT Not After : Dec 29 10:25:23 2024 GMT Subject: CN=3ce6f133-1920-45f7-98b5-27cfed5470c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:65:87:be:0f:f7:01:10:d2:0f:ea:b4:a7: 85:e2:f7:28:dc:e0:0d:d4:a0:60:cb:18:54:ba:6f: 68:47:04:38:82:68:a8:34:79:df:a2:bf:00:4d:eb: 4f:42:24:8d:9c:c2:f3:a8:21:26:ff:03:f3:4c:64: b6:7f:bc:de:91:c3:fd:43:ec:3b:44:65:b8:58:35: 6d:bd:13:9a:8e:9f:39:f6:18:79:43:bb:45:27:ec: eb:98:e5:e8:6a:5e:c4:4f:52:6b:be:5e:b8:8c:6e: 35:be:09:e0:cd:bc:3e:b8:cf:e4:cb:7a:79:b9:b4: d6:ed:9c:09:68:18:78:d7:f3:6e:ea:91:14:2b:f3: 72:2a:fc:4f:74:64:ea:e1:87:d1:85:fe:76:1c:de: e8:1e:b0:f3:f9:2b:43:ca:75:27:5d:0a:c9:36:ea: b5:04:51:08:75:2e:bd:75:a9:58:0c:de:63:c2:67: 99:fa:9a:1d:1a:62:65:b1:43:87:8e:02:58:5e:9b: 98:9c:77:ee:81:10:98:f6:1b:20:11:b2:39:16:a5: bd:ff:9f:20:ce:0f:1e:da:ef:40:09:1a:0c:df:c0: d9:fd:85:57:63:c9:1d:2a:6c:ee:4b:e9:7a:f2:91: 2a:df:bf:24:ae:ba:b6:f8:3f:c9:87:4d:bb:43:4c: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:B7:D7:27:25:54:E8:11:7D:3C:A0:4D:A4:D5:F3:C5:53:21:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f79dde9-a8a4-3d9c-8de8-d807f67cf45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:26:f7:f3:42:46:50:2e:86:c8:9f:56:72:37:bd:bb:30: d3:a4:8c:28:59:75:06:e3:1a:88:db:5e:ac:6b:f3:73:77:cc: 02:46:55:f1:ea:90:51:fc:24:b7:ea:33:5f:4f:88:0e:da:d6: 49:f1:17:95:26:ed:10:85:75:4f:51:73:60:7a:dd:99:ff:38: 1b:ef:0f:28:8f:fe:ec:81:bb:79:b3:c9:95:98:ac:88:33:2a: 39:db:97:40:c2:ed:b3:14:32:7d:90:b7:15:dc:40:f2:10:1e: 5b:86:db:64:d2:4e:1f:32:8b:06:a2:ac:2d:22:51:c4:eb:fe: f3:f1:f0:47:9d:46:1c:c4:5f:7e:a6:2a:4d:58:a6:5d:1a:c5: cb:bf:76:36:5c:71:61:02:3f:e2:21:9e:79:34:e1:37:dd:54: 4e:31:c6:e5:4c:78:5b:31:ea:5e:6d:29:cf:10:c5:7d:01:5d: b1:ff:21:53:95:67:cb:86:0e:31:87:9b:29:53:42:4f:de:97: e9:ea:48:f9:ed:8f:88:b6:bb:c1:13:33:40:ff:18:d3:06:11: f7:eb:37:72:fc:17:2b:47:a8:ae:d7:f8:3a:70:bb:2b:00:9e: 34:7a:49:e4:0e:73:df:22:92:46:52:3a:fd:59:15:b7:11:c9: 65:17:54:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdia05J3FpV9/nuvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkzMDA5MjUyM1oXDTI0MTIyOTEwMjUyM1owLzEtMCsGA1UEAxMk M2NlNmYxMzMtMTkyMC00NWY3LTk4YjUtMjdjZmVkNTQ3MGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdlh74P9wEQ0g/qtKeF4vco3OAN1KBgyxhU um9oRwQ4gmioNHnfor8ATetPQiSNnMLzqCEm/wPzTGS2f7zekcP9Q+w7RGW4WDVt vROajp859hh5Q7tFJ+zrmOXoal7ET1Jrvl64jG41vgngzbw+uM/ky3p5ubTW7ZwJ aBh41/Nu6pEUK/NyKvxPdGTq4YfRhf52HN7oHrDz+StDynUnXQrJNuq1BFEIdS69 dalYDN5jwmeZ+podGmJlsUOHjgJYXpuYnHfugRCY9hsgEbI5FqW9/58gzg8e2u9A CRoM38DZ/YVXY8kdKmzuS+l68pEq378krrq2+D/Jh027Q0wBzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD3t9cnJVToEX08oE2k1fPFUyEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y3OWRkZTktYThhNC0z ZDljLThkZTgtZDgwN2Y2N2NmNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoSJvfzQkZQLobIn1ZyN727MNOkjChZdQbjGojbXqxr83N3zAJGVfHq kFH8JLfqM19PiA7a1knxF5Um7RCFdU9Rc2B63Zn/OBvvDyiP/uyBu3mzyZWYrIgz Kjnbl0DC7bMUMn2QtxXcQPIQHluG22TSTh8yiwairC0iUcTr/vPx8EedRhzEX36m Kk1Ypl0axcu/djZccWECP+Ihnnk04TfdVE4xxuVMeFsx6l5tKc8QxX0BXbH/IVOV Z8uGDjGHmylTQk/el+nqSPntj4i2u8ETM0D/GNMGEffrN3L8FytHqK7X+DpwuysA njR6SeQOc98ikkZSOv1ZFbcRyWUXVDo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:21 2024 by rpki-client on console-ams.rpki-client.org