$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa File: 41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa (raw, json) Hash identifier: QWtAkaLpA+qXPoRDu1j7hD5ECjR2dR8frVfk687qT0A= Subject key identifier: FE:5D:73:7C:1C:75:8A:0C:99:0D:64:7C:F2:FC:89:AD:C6:85:96:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999FC9C622F535B87ACDC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.205.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:fc:9c:62:2f:53:5b:87:ac:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=59b63e34-1105-4ec6-b9e1-3497df15f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:82:4c:05:39:89:bc:9f:c4:39:3b:0f:d1: 98:b4:f7:62:44:e2:ee:ee:34:6e:b5:59:03:c6:29: d2:4f:41:08:4a:f8:3e:2e:58:22:ca:9a:aa:f2:f9: 14:07:20:c0:cc:d8:ae:91:4e:bf:0b:a0:55:f1:6c: 2b:8a:8b:af:30:69:74:62:1b:3a:29:f5:25:1e:4d: 5f:dd:7e:43:1d:3f:8e:18:c6:7d:3f:fd:d9:dd:9c: e3:0e:ec:f2:4e:03:dd:49:87:4e:f9:85:02:b9:b5: 3d:53:56:d4:e8:16:69:fa:e1:94:ad:e0:a9:3f:3c: 3e:cd:43:35:b6:3d:0f:34:a4:f6:e7:cc:a9:29:b4: b3:e3:9c:cd:72:03:d3:d1:85:8f:82:49:07:65:27: 42:ee:d0:bf:b6:2b:0f:df:cf:94:ed:6f:bf:57:4c: 62:35:9e:c9:51:1b:86:9e:82:ba:59:2b:d2:77:c5: ca:56:6e:fd:aa:f1:b7:6e:e8:b4:c5:8f:26:ab:b0: f0:3a:ed:8f:51:86:ba:01:c6:13:11:5d:65:84:d1: 81:e1:60:ed:b2:11:cd:f2:a6:f3:ac:fb:71:d8:3f: 0c:e8:e2:3a:1a:6f:6c:f8:10:5f:e7:e8:15:21:93: 9a:f0:2c:7b:a4:a9:33:63:5f:92:e0:2e:28:44:dc: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5D:73:7C:1C:75:8A:0C:99:0D:64:7C:F2:FC:89:AD:C6:85:96:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a7:7b:b5:09:92:03:2e:99:ae:ce:c6:65:7a:f1:be:9a:b6: 36:78:66:c9:8c:b9:08:36:69:72:87:31:37:09:f0:26:91:98: db:30:d4:3f:98:cb:27:72:6d:80:1f:ce:b4:99:87:bc:fb:03: 2d:e8:48:f7:35:35:0b:47:bd:3a:8d:16:82:4f:16:da:9e:4f: 47:a8:07:6c:2e:0c:d7:ea:2c:2e:3d:37:c4:aa:b4:90:8f:32: fd:5f:c6:f6:f3:62:d3:3f:dc:f2:44:fa:21:24:73:a8:5e:09: 8f:52:24:ac:69:4c:31:ca:b5:48:bb:38:53:25:70:5c:d0:d8: c9:ed:cc:5f:28:8f:36:d5:7f:3b:be:1d:7a:b3:3f:fe:f6:cd: 67:fa:26:1c:a3:7b:04:00:70:ab:2e:3d:68:d3:8d:20:94:bc: e2:b3:39:c9:80:3f:66:ab:36:5d:77:d7:67:08:cd:d3:e0:dc: 58:62:34:5f:9e:99:b0:69:12:56:40:ed:83:24:de:47:f3:18: 8d:ba:cb:e6:d4:07:9b:40:4c:da:51:67:0a:5c:dc:16:54:4d: 4d:1f:34:b7:08:69:c0:0b:70:ce:90:8a:13:10:29:cc:a7:8b: 53:34:91:48:ce:07:42:80:ef:c0:e4:37:51:99:8e:3c:2d:f4: ae:f5:ad:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfycYi9TW4es3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NTliNjNlMzQtMTEwNS00ZWM2LWI5ZTEtMzQ5N2RmMTVmMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiumCTAU5ibyfxDk7D9GYtPdiROLu7jRutVkD xinST0EISvg+Llgiypqq8vkUByDAzNiukU6/C6BV8WwriouvMGl0Yhs6KfUlHk1f 3X5DHT+OGMZ9P/3Z3ZzjDuzyTgPdSYdO+YUCubU9U1bU6BZp+uGUreCpPzw+zUM1 tj0PNKT258ypKbSz45zNcgPT0YWPgkkHZSdC7tC/tisP38+U7W+/V0xiNZ7JURuG noK6WSvSd8XKVm79qvG3bui0xY8mq7DwOu2PUYa6AcYTEV1lhNGB4WDtshHN8qbz rPtx2D8M6OI6Gm9s+BBf5+gVIZOa8Cx7pKkzY1+S4C4oRNyy4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5dc3wcdYoMmQ1kfPL8ia3GhZZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDFjZjA4ZTEtMmExNi0z ZjBhLTkwMGItNGQ3M2U1ZTllNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF81MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOne7UJkgMuma7OxmV68b6atjZ4ZsmMuQg2aXKHMTcJ8CaRmNsw1D+Y yydybYAfzrSZh7z7Ay3oSPc1NQtHvTqNFoJPFtqeT0eoB2wuDNfqLC49N8SqtJCP Mv1fxvbzYtM/3PJE+iEkc6heCY9SJKxpTDHKtUi7OFMlcFzQ2MntzF8ojzbVfzu+ HXqzP/72zWf6JhyjewQAcKsuPWjTjSCUvOKzOcmAP2arNl1312cIzdPg3FhiNF+e mbBpElZA7YMk3kfzGI26y+bUB5tATNpRZwpc3BZUTU0fNLcIacALcM6QihMQKcyn i1M0kUjOB0KA78DkN1GZjjwt9K71rTA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:51 2024 by rpki-client on console-ams.rpki-client.org