$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ae2e5f-2628-3d14-82d9-ddd1d14c74c8.roa File: 89ae2e5f-2628-3d14-82d9-ddd1d14c74c8.roa (raw, json) Hash identifier: ZiM90kfm/G1oWPJvFeMVsTZcy0VjWmX3uXd1XPxd3k8= Subject key identifier: 7E:3E:6C:92:02:88:2C:A4:8D:A8:A0:81:DD:4A:EE:B1:EB:F5:2C:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1C948F540AA1EF450E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ae2e5f-2628-3d14-82d9-ddd1d14c74c8.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.210.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1c:94:8f:54:0a:a1:ef:45:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=9e7a8dda-5530-4a1c-931e-e006580ef9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:c1:82:c3:2f:c3:41:ab:86:59:fd:4b:5d: f7:22:20:f7:e7:a6:db:3b:f0:1e:87:42:3e:9f:07: 1f:51:d9:f0:47:53:70:6f:32:67:f4:d8:89:c3:03: 82:9a:41:d9:87:af:f8:a6:a4:c9:e3:7c:bd:0a:d4: cb:56:97:64:9e:c1:0a:be:d4:db:06:5a:42:a9:dd: 9a:7c:7d:ce:21:59:21:c5:b8:da:9d:50:ef:d0:20: be:ed:34:1d:32:74:85:a2:8a:34:57:47:1f:6e:47: 45:e5:6b:0e:ea:98:8a:ff:c6:89:01:9e:51:71:7c: 1a:f8:91:85:e8:a5:a4:96:d8:22:81:ef:5f:dd:c6: e7:bd:ec:48:8e:b7:93:2c:91:ea:e2:5d:95:d6:7f: bc:d8:8d:ab:53:e7:99:e2:0c:93:45:28:38:3c:81: c3:f3:17:21:f2:51:77:09:46:fe:34:33:e0:01:8d: da:49:7f:4e:58:83:ef:84:ac:38:66:7f:f5:46:f3: 59:8c:30:0c:ae:99:50:26:1c:a6:59:2d:ab:bc:ad: a2:df:d2:01:35:fc:39:a9:28:d5:3b:47:52:e6:e7: b5:1b:d8:d7:86:38:85:5f:17:ca:73:81:28:57:3f: 3e:ec:ff:3a:b6:5b:93:03:cc:97:fd:74:6a:71:3c: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:6C:92:02:88:2C:A4:8D:A8:A0:81:DD:4A:EE:B1:EB:F5:2C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ae2e5f-2628-3d14-82d9-ddd1d14c74c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ae:7d:ce:22:05:6a:d7:33:a7:5b:92:48:a4:71:d0:7b:7b: 2b:7f:be:b9:85:14:28:df:6f:98:10:de:6d:87:07:bf:d6:51: 38:a3:6c:db:c4:3c:5a:7a:9a:b0:ab:2f:b6:43:c7:02:b1:85: 33:35:43:2a:58:30:0d:3f:51:cf:98:51:bb:bc:f8:b2:01:76: b6:93:f2:dd:61:4d:38:82:2f:bf:c3:a7:44:73:c0:a1:ae:c9: 71:d7:20:cb:af:c1:35:00:a2:6b:e7:83:39:76:30:12:6d:16: b7:fa:5b:bb:e6:8f:bd:11:e1:b0:4f:41:6d:03:d0:51:13:a5: 6a:21:34:bb:c0:de:54:ef:b4:86:3a:03:d2:10:cb:a5:07:9d: ff:62:fe:2f:9d:36:c2:46:db:35:ab:19:01:53:0d:c0:00:ff: 47:c3:38:93:7c:d2:c5:3a:f0:45:c6:74:a9:ac:17:58:ea:1a: 84:b0:a2:2f:18:5b:d5:31:2d:d0:ff:d7:68:38:fd:64:72:7f: 28:f3:0a:d3:32:d1:0d:72:f1:d0:2a:53:9c:54:ba:42:91:a6: cd:b1:79:10:75:4a:4c:68:ec:7a:ba:d5:22:c8:ca:b5:43:aa: 7c:0f:8f:33:c6:6b:99:b1:91:f7:0f:92:44:89:ab:51:b3:c5: 7e:d6:f2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzByUj1QKoe9FDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk OWU3YThkZGEtNTUzMC00YTFjLTkzMWUtZTAwNjU4MGVmOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaXBgsMvw0Grhln9S133IiD356bbO/Aeh0I+ nwcfUdnwR1NwbzJn9NiJwwOCmkHZh6/4pqTJ43y9CtTLVpdknsEKvtTbBlpCqd2a fH3OIVkhxbjanVDv0CC+7TQdMnSFooo0V0cfbkdF5WsO6piK/8aJAZ5RcXwa+JGF 6KWkltgige9f3cbnvexIjreTLJHq4l2V1n+82I2rU+eZ4gyTRSg4PIHD8xch8lF3 CUb+NDPgAY3aSX9OWIPvhKw4Zn/1RvNZjDAMrplQJhymWS2rvK2i39IBNfw5qSjV O0dS5ue1G9jXhjiFXxfKc4EoVz8+7P86tluTA8yX/XRqcTwrDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4+bJICiCykjaiggd1K7rHr9SwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlhZTJlNWYtMjYyOC0z ZDE0LTgyZDktZGRkMWQxNGM3NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9I8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ufc4iBWrXM6dbkkikcdB7eyt/vrmFFCjfb5gQ3m2HB7/WUTijbNvE PFp6mrCrL7ZDxwKxhTM1QypYMA0/Uc+YUbu8+LIBdraT8t1hTTiCL7/Dp0RzwKGu yXHXIMuvwTUAomvngzl2MBJtFrf6W7vmj70R4bBPQW0D0FETpWohNLvA3lTvtIY6 A9IQy6UHnf9i/i+dNsJG2zWrGQFTDcAA/0fDOJN80sU68EXGdKmsF1jqGoSwoi8Y W9UxLdD/12g4/WRyfyjzCtMy0Q1y8dAqU5xUukKRps2xeRB1Skxo7Hq61SLIyrVD qnwPjzPGa5mxkfcPkkSJq1GzxX7W8r8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:55 2024 by rpki-client on console-ams.rpki-client.org