$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa File: 8614b32a-2b24-3288-aa66-942237dbf140.roa (raw, json) Hash identifier: 1is0rtlVW0VWG1U/8a2pbr/2ZetBTzpO9PF8Jdfnnj0= Subject key identifier: E5:9F:E4:C4:13:AD:19:9C:0F:5A:45:F4:9F:AF:33:35:CF:4E:4E:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B101795647BA4B2841B2A780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.198.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:79:56:47:ba:4b:28:41:b2:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=fa3eaedb-bf1e-4054-b97b-fc07d3a054c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:d8:e4:25:8f:09:5a:e9:de:ca:d9:d2:4e: 3c:48:60:b7:da:8b:8f:3c:41:7b:7b:90:d6:d6:28: 13:8a:9b:04:4d:99:55:77:7b:9b:10:eb:fd:8d:70: 30:45:49:a1:3e:a4:30:e7:2e:71:b9:35:e5:96:a6: 89:2e:3e:81:b0:94:c6:88:6c:21:12:88:03:d3:b3: aa:7d:33:6f:c0:92:f2:97:eb:d8:ca:5c:3a:87:fd: 37:b8:6d:31:f3:61:5c:65:06:c0:0c:f3:08:be:a2: a0:e8:88:ba:e8:71:fd:21:77:56:ef:17:a8:19:99: 92:35:ab:de:3c:47:46:d5:56:51:03:1e:52:0a:0d: 31:4a:db:37:e2:98:39:7b:68:16:cc:b2:9f:0a:68: 83:3e:8a:0a:e0:71:a1:d0:f0:02:09:3d:76:67:3e: 23:34:62:b5:69:e7:48:fa:b0:8f:2f:3e:d6:ce:1b: 1b:38:34:e3:a0:eb:c8:ed:f8:4a:b4:5c:02:b8:c0: 51:fd:e5:29:77:87:28:9c:bc:1e:80:b5:db:8d:47: 26:a1:a3:51:f2:83:92:37:9b:93:d9:75:af:fc:09: 6e:f2:8f:93:c4:6e:fa:dc:3c:cf:98:d5:a9:fc:50: 86:a0:b1:60:00:47:21:47:70:17:03:70:a7:4a:46: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:E4:C4:13:AD:19:9C:0F:5A:45:F4:9F:AF:33:35:CF:4E:4E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:52:95:9d:42:f4:0e:64:8b:95:0e:86:af:cb:91:f4:e0:d1: 86:74:32:b7:74:47:3a:20:8d:a3:bb:b7:16:c3:7c:66:0a:12: 36:6c:e3:b4:87:ff:50:34:69:d5:af:b3:98:e2:70:7e:aa:b0: 56:eb:e0:39:30:c7:c6:f5:4e:71:98:d5:01:52:76:d6:58:59: e3:02:72:0a:88:98:91:b0:ca:0d:c5:f9:58:93:34:4e:3b:4d: 06:b8:1e:b1:14:28:ab:b8:33:d1:f6:e2:77:08:95:80:93:71: 9c:4a:c4:b8:cc:7e:f1:13:b4:24:ad:15:48:91:5d:13:32:f2: 10:50:d4:8b:f7:e3:fe:08:e4:f3:bb:0a:cc:7d:b2:f1:51:4d: c5:cc:7f:2f:d6:75:8f:6b:1d:31:86:27:30:94:6f:cc:dd:af: b0:14:3f:ef:ba:d0:7f:32:4e:67:20:34:73:4b:6d:fa:ca:45: 43:8c:13:14:11:34:21:5c:aa:43:ff:44:18:1d:b2:e0:55:18: eb:f4:37:42:e6:d5:30:72:7a:1c:07:81:4f:ca:6d:2c:a1:53: 12:33:9a:67:f6:57:31:fb:8e:b7:4a:a0:80:69:18:be:71:76: ae:30:a4:15:51:f2:1b:55:80:a6:8e:ff:fb:b6:6c:a4:65:a4: 3b:b8:c2:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAXlWR7pLKEGyp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZmEzZWFlZGItYmYxZS00MDU0LWI5N2ItZmMwN2QzYTA1NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlovY5CWPCVrp3srZ0k48SGC32ouPPEF7e5DW 1igTipsETZlVd3ubEOv9jXAwRUmhPqQw5y5xuTXllqaJLj6BsJTGiGwhEogD07Oq fTNvwJLyl+vYylw6h/03uG0x82FcZQbADPMIvqKg6Ii66HH9IXdW7xeoGZmSNave PEdG1VZRAx5SCg0xSts34pg5e2gWzLKfCmiDPooK4HGh0PACCT12Zz4jNGK1aedI +rCPLz7WzhsbODTjoOvI7fhKtFwCuMBR/eUpd4conLwegLXbjUcmoaNR8oOSN5uT 2XWv/Alu8o+TxG763DzPmNWp/FCGoLFgAEchR3AXA3CnSka9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWf5MQTrRmcD1pF9J+vMzXPTk5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxNGIzMmEtMmIyNC0z Mjg4LWFhNjYtOTQyMjM3ZGJmMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChSlZ1C9A5ki5UOhq/LkfTg0YZ0Mrd0RzogjaO7txbDfGYKEjZs47SH /1A0adWvs5jicH6qsFbr4Dkwx8b1TnGY1QFSdtZYWeMCcgqImJGwyg3F+ViTNE47 TQa4HrEUKKu4M9H24ncIlYCTcZxKxLjMfvETtCStFUiRXRMy8hBQ1Iv34/4I5PO7 Csx9svFRTcXMfy/WdY9rHTGGJzCUb8zdr7AUP++60H8yTmcgNHNLbfrKRUOMExQR NCFcqkP/RBgdsuBVGOv0N0Lm1TByehwHgU/KbSyhUxIzmmf2VzH7jrdKoIBpGL5x dq4wpBVR8htVgKaO//u2bKRlpDu4wjI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:24 2024 by rpki-client on console-ams.rpki-client.org