$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa File: 88da4a9b-a078-3908-bd52-ada1e01420fc.roa (raw, json) Hash identifier: lXHjiS11hZv1TSDOlORg+rn5VTaaTk7MHPG9kNb2fFM= Subject key identifier: 69:18:CF:89:13:9B:60:4E:23:58:62:9C:95:2A:8E:0B:63:0F:12:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477EC120275B2BAB7A59FABF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.50.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:20:27:5b:2b:ab:7a:59:fa:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=641fd430-d159-4bdd-b89f-6cd14db7e46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:fe:e0:73:a7:be:31:11:74:be:54:c6:91: 6f:af:6f:12:8c:ed:ff:aa:ca:3d:0a:20:43:d1:d3: 47:87:09:bd:9a:b6:4f:9f:e4:2e:0a:b7:2c:68:2d: 75:78:16:6d:c0:27:fe:51:fa:c0:82:7e:c3:79:c4: 6d:16:18:9c:9b:76:99:34:b3:8a:d2:e0:5c:c3:d2: a3:31:f6:f2:24:ad:92:ff:8f:5a:c8:f8:5f:7a:13: 89:76:bf:fb:b8:b4:af:b2:08:04:28:35:e4:1d:79: 34:ae:f9:ab:5a:4b:6b:f6:5f:4c:33:62:4e:b6:be: b2:25:a7:47:f3:4a:fa:e5:60:c7:7a:9f:cd:b3:53: 34:e9:b0:61:47:fc:85:91:fb:cf:9b:e0:15:6b:40: c9:7d:2e:8c:98:2f:81:52:a8:36:12:c7:9e:f9:42: df:07:56:fc:ba:7e:2c:04:77:23:06:ea:4e:99:d0: 8e:da:70:27:31:48:ff:c2:4c:22:01:4f:27:6c:66: d6:79:38:a7:ab:68:76:c7:90:7d:7e:3e:40:55:b0: 31:ea:76:b6:f0:9d:e0:dd:9a:27:70:24:c2:f7:ba: 6b:58:6c:d7:1c:bf:a0:59:4b:9c:a0:9e:af:d4:de: 1c:2d:23:71:b5:ea:57:b7:5f:c8:b9:50:ad:88:d2: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:18:CF:89:13:9B:60:4E:23:58:62:9C:95:2A:8E:0B:63:0F:12:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cf:03:e6:26:42:2a:dc:6d:36:cc:c5:ee:d0:74:f4:d8:30: 49:73:0e:60:d6:00:51:05:b3:1f:31:29:58:e6:18:d1:a5:33: 95:b9:57:24:41:d0:49:9b:5d:0c:f7:be:de:5d:87:33:50:24: 8b:a4:6b:be:e7:34:a4:55:d0:5d:40:ba:89:2a:2f:84:b2:bc: d6:28:49:eb:ec:c6:1f:9e:1d:37:70:b2:e7:a1:34:83:99:76: fb:de:34:38:54:61:be:f9:4b:18:21:5e:57:16:02:64:a7:23: 30:ae:94:0e:47:ea:95:f9:99:aa:72:c5:a0:bd:3d:a6:10:92: 33:9e:f7:36:da:39:23:89:f4:8d:ec:47:8b:50:62:8c:73:10: 78:96:d3:a8:ff:2f:11:a7:a6:61:9c:cc:39:67:b6:b4:98:24: 8a:ee:1c:8f:0c:31:85:98:bc:d3:02:37:8e:00:98:c3:0e:9d: 45:0b:f1:cd:e5:7f:d2:96:e7:3d:18:57:50:6e:8f:49:70:38: 81:e4:58:0d:05:71:71:00:e7:bb:32:52:c0:3b:b9:b9:29:7e: 65:2d:76:08:72:e2:79:80:d0:0b:0c:2e:70:ed:60:e8:50:0a: ad:94:f9:89:65:a9:48:4c:ab:aa:1d:e7:7e:65:47:f9:9a:44: c9:6a:af:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wSAnWyureln6v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk NjQxZmQ0MzAtZDE1OS00YmRkLWI4OWYtNmNkMTRkYjdlNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbP+4HOnvjERdL5UxpFvr28SjO3/qso9CiBD 0dNHhwm9mrZPn+QuCrcsaC11eBZtwCf+UfrAgn7DecRtFhicm3aZNLOK0uBcw9Kj MfbyJK2S/49ayPhfehOJdr/7uLSvsggEKDXkHXk0rvmrWktr9l9MM2JOtr6yJadH 80r65WDHep/Ns1M06bBhR/yFkfvPm+AVa0DJfS6MmC+BUqg2Esee+ULfB1b8un4s BHcjBupOmdCO2nAnMUj/wkwiAU8nbGbWeTinq2h2x5B9fj5AVbAx6na28J3g3Zon cCTC97prWGzXHL+gWUucoJ6v1N4cLSNxtepXt1/IuVCtiNJmqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkYz4kTm2BOI1hinJUqjgtjDxJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhkYTRhOWItYTA3OC0z OTA4LWJkNTItYWRhMWUwMTQyMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbPA+YmQircbTbMxe7QdPTYMElzDmDWAFEFsx8xKVjmGNGlM5W5VyRB 0EmbXQz3vt5dhzNQJIuka77nNKRV0F1AuokqL4SyvNYoSevsxh+eHTdwsuehNIOZ dvveNDhUYb75SxghXlcWAmSnIzCulA5H6pX5mapyxaC9PaYQkjOe9zbaOSOJ9I3s R4tQYoxzEHiW06j/LxGnpmGczDlntrSYJIruHI8MMYWYvNMCN44AmMMOnUUL8c3l f9KW5z0YV1Buj0lwOIHkWA0FcXEA57syUsA7ubkpfmUtdghy4nmA0AsMLnDtYOhQ Cq2U+YllqUhMq6od535lR/maRMlqr9s= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:55 2024 by rpki-client on console-ams.rpki-client.org