$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c3a137-9297-36bb-92ea-8ec7b476d64a.roa File: 71c3a137-9297-36bb-92ea-8ec7b476d64a.roa (raw, json) Hash identifier: vELSEICYk3vVhtYIm8EQfdpHhMSv6lfVCh0aTs9EVKQ= Subject key identifier: 44:4D:28:E4:CF:6D:F9:AE:2C:0A:99:C3:0A:76:7B:05:FC:7F:23:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A0F8EAE0FECDB21FB3FE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c3a137-9297-36bb-92ea-8ec7b476d64a.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16625 IP address blocks: 23.0.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f8:ea:e0:fe:cd:b2:1f:b3:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=d7a1d648-8b20-48fe-a151-3680c4732e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:71:b3:3f:0f:ce:d5:a9:28:5e:80:f6:85: 4a:1e:7a:89:1e:a4:14:1c:8d:49:b6:22:3e:6e:ca: ce:6c:88:da:56:c5:d5:61:58:a8:eb:c8:01:21:00: 53:dc:84:ab:47:9d:d9:6b:76:d8:5b:0a:6c:35:45: ad:f0:c1:fa:fd:b8:e2:f9:3c:94:3d:be:d0:cc:fc: 29:e8:b1:94:6b:c3:31:5a:48:b6:a3:0c:8d:94:9b: d7:4c:65:45:a3:d1:5b:55:5e:e5:37:87:9d:27:80: 66:37:ac:c3:ef:64:2b:27:cf:6f:99:f6:4f:bb:3e: 17:00:fb:47:8a:a8:b4:f7:0c:e8:af:1d:1c:93:85: ab:7e:9f:e5:5e:cf:2d:59:2c:93:13:b0:17:e9:87: 88:6f:0c:18:5b:45:9c:4b:a1:b2:8a:3b:b8:2e:e5: a2:5c:a1:8f:bd:a4:55:89:fb:8a:cf:9f:b5:42:fa: eb:9e:b5:5d:cf:5a:9b:0c:fc:8a:85:09:f8:e8:1b: 80:09:2c:d7:88:43:f2:98:bc:aa:2d:34:84:00:8d: 7e:1b:05:2d:77:eb:12:76:da:88:88:84:c0:89:28: b4:76:e4:43:cd:a8:4e:38:61:c7:7c:de:0d:1e:a3: ba:6a:62:08:3b:b2:ff:b5:05:ba:17:3a:e6:ca:65: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4D:28:E4:CF:6D:F9:AE:2C:0A:99:C3:0A:76:7B:05:FC:7F:23:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71c3a137-9297-36bb-92ea-8ec7b476d64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d1:1d:3c:cb:f2:ab:07:ca:bf:b2:da:97:46:be:d9:6b:72: c8:89:8d:93:8c:d2:ba:88:4c:80:8a:f4:e5:64:85:31:51:f8: 66:8b:82:98:b8:cf:85:58:b2:37:01:ff:55:08:72:1b:95:bd: fa:48:3e:f2:60:1a:71:84:12:14:92:92:92:ee:a2:c0:1a:67: ba:f6:04:6c:01:79:82:1a:50:9f:65:9c:e3:d4:07:8b:ca:7a: e4:51:e0:15:57:a9:5c:ec:ec:ef:29:5f:de:a8:c0:79:a8:8f: 18:fa:2b:ec:2a:b4:58:7e:49:ef:88:9b:74:1d:54:8f:29:b2: e5:33:94:ba:5d:a5:3a:84:11:48:86:c8:7f:98:c1:a3:f6:52: 8b:1f:f1:82:35:1d:c9:64:db:4c:c8:7b:f7:11:8c:f8:9f:61: 88:c1:62:19:f2:b1:25:2f:fb:44:9c:18:ba:fe:75:81:41:b3: 5e:07:3c:01:3b:c0:c9:ba:de:d5:69:c5:fc:0c:11:6d:29:54: 34:41:8d:3f:c5:e0:8b:28:55:6a:d0:c9:82:dd:51:a5:ec:27: 05:57:56:37:3b:05:4e:6e:99:3c:b8:94:00:31:03:b9:1d:38: d4:4f:03:a0:10:61:cf:29:a6:a4:e3:12:fa:f4:e5:02:f1:05: a0:2c:f9:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPjq4P7Nsh+z/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk ZDdhMWQ2NDgtOGIyMC00OGZlLWExNTEtMzY4MGM0NzMyZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnxxsz8PztWpKF6A9oVKHnqJHqQUHI1JtiI+ bsrObIjaVsXVYVio68gBIQBT3ISrR53Za3bYWwpsNUWt8MH6/bji+TyUPb7QzPwp 6LGUa8MxWki2owyNlJvXTGVFo9FbVV7lN4edJ4BmN6zD72QrJ89vmfZPuz4XAPtH iqi09wzorx0ck4Wrfp/lXs8tWSyTE7AX6YeIbwwYW0WcS6Gyiju4LuWiXKGPvaRV ifuKz5+1QvrrnrVdz1qbDPyKhQn46BuACSzXiEPymLyqLTSEAI1+GwUtd+sSdtqI iITAiSi0duRDzahOOGHHfN4NHqO6amIIO7L/tQW6FzrmymUQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERNKOTPbfmuLAqZwwp2ewX8fyNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFjM2ExMzctOTI5Ny0z NmJiLTkyZWEtOGVjN2I0NzZkNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArRHTzL8qsHyr+y2pdGvtlrcsiJjZOM0rqITICK9OVkhTFR+GaLgpi4 z4VYsjcB/1UIchuVvfpIPvJgGnGEEhSSkpLuosAaZ7r2BGwBeYIaUJ9lnOPUB4vK euRR4BVXqVzs7O8pX96owHmojxj6K+wqtFh+Se+Im3QdVI8psuUzlLpdpTqEEUiG yH+YwaP2Uosf8YI1Hclk20zIe/cRjPifYYjBYhnysSUv+0ScGLr+dYFBs14HPAE7 wMm63tVpxfwMEW0pVDRBjT/F4IsoVWrQyYLdUaXsJwVXVjc7BU5umTy4lAAxA7kd ONRPA6AQYc8ppqTjEvr05QLxBaAs+Uk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:16 2024 by rpki-client on console-ams.rpki-client.org