$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa File: 8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa (raw, json) Hash identifier: nhNZTdgm8IOf6ftvgs/dysv459cB1tbsizGL0FjTIJw= Subject key identifier: B5:F9:66:A0:E4:11:A8:1A:D9:00:6F:75:19:63:20:4C:F1:F1:FA:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C4AA25034BAEFB1A7CC52100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 16625 IP address blocks: 23.198.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:25:03:4b:ae:fb:1a:7c:c5:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=81b3515c-454e-41df-b033-fd9ab29bdd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:6f:9b:55:05:ea:03:40:13:01:cb:0d:89: 51:30:69:56:df:3a:e3:71:80:ac:85:06:cc:7f:69: 59:b3:5f:e6:da:a4:b8:7b:11:9b:da:39:9e:92:5d: f9:20:0c:62:d3:07:ba:76:1b:f7:4d:20:d1:34:31: 1d:39:0a:19:2a:ad:b5:46:c1:97:86:17:1d:1e:c5: 21:21:93:2b:09:bc:47:28:8d:a0:b8:19:45:5b:97: 11:7e:a5:66:6f:b7:25:25:eb:0a:10:a0:c4:d5:96: f6:58:0e:47:d4:65:77:da:3b:17:ce:1d:9f:82:7f: 6c:cf:27:59:40:15:8a:45:3f:dd:31:df:f0:ac:53: 2f:00:5e:d9:75:ef:27:bd:30:37:53:e8:cc:5d:f5: 22:42:b3:df:56:c2:bf:25:1f:68:c8:81:ff:d1:70: b5:2b:19:51:4e:d7:7e:32:91:ef:eb:7a:fc:50:40: ea:cd:c7:8c:c0:de:29:1d:e7:72:78:26:82:b3:1a: 43:be:aa:6a:6c:55:0e:8c:0f:aa:fe:1c:18:cf:81: 77:0e:c5:33:ca:49:c6:1e:98:83:a4:aa:a9:bd:63: d4:fa:b1:d4:78:55:5b:1d:c8:ba:f9:10:f2:58:f7: 91:48:88:9d:44:44:2e:a9:76:1b:6c:4a:91:b7:a2: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:66:A0:E4:11:A8:1A:D9:00:6F:75:19:63:20:4C:F1:F1:FA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7c:8f:15:fa:69:39:e5:e0:89:b4:e2:66:12:36:37:fe:17: a8:15:cd:4f:6f:e1:cf:e3:7d:57:f0:0c:b5:02:f7:cd:c0:d6: 77:d7:b0:26:48:10:fe:52:84:71:a0:1b:4c:d9:56:1e:94:75: a8:22:52:6c:b0:95:f5:ca:73:39:8b:35:43:69:15:e2:53:2f: 1a:45:e3:1e:38:b2:c2:ae:29:c7:e0:6e:5e:f8:0f:37:6a:18: 50:98:5d:ea:7f:c5:00:83:31:c8:db:e9:18:59:5b:19:ac:43: f4:d0:f2:54:b8:96:c9:46:03:18:d5:9f:b7:9f:e7:3a:ad:40: 11:fe:1e:ac:0f:05:68:e6:0f:a9:1b:d0:c9:b9:26:99:28:c0: ba:21:c6:07:23:46:35:2d:48:8b:ff:f3:ef:3e:37:29:5e:50: 13:17:01:28:12:f3:6f:11:a9:ff:d7:4f:ff:64:c2:ef:16:1c: be:6b:9a:8f:ae:8f:b1:34:fc:ef:0b:6b:ac:d4:ce:33:d9:00: d1:18:9c:c8:da:a8:79:e6:ec:4d:e1:78:28:75:69:d9:fc:18: 72:77:99:8c:55:7d:c4:b6:bb:9c:03:aa:e6:fc:67:e0:bc:f1: 6d:29:62:15:ae:8f:42:66:ac:41:ab:cb:4b:27:da:b3:29:91: 9b:52:b3:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqiUDS677GnzFIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk ODFiMzUxNWMtNDU0ZS00MWRmLWIwMzMtZmQ5YWIyOWJkZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYdvm1UF6gNAEwHLDYlRMGlW3zrjcYCshQbM f2lZs1/m2qS4exGb2jmekl35IAxi0we6dhv3TSDRNDEdOQoZKq21RsGXhhcdHsUh IZMrCbxHKI2guBlFW5cRfqVmb7clJesKEKDE1Zb2WA5H1GV32jsXzh2fgn9szydZ QBWKRT/dMd/wrFMvAF7Zde8nvTA3U+jMXfUiQrPfVsK/JR9oyIH/0XC1KxlRTtd+ MpHv63r8UEDqzceMwN4pHedyeCaCsxpDvqpqbFUOjA+q/hwYz4F3DsUzyknGHpiD pKqpvWPU+rHUeFVbHci6+RDyWPeRSIidREQuqXYbbEqRt6Jf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX5ZqDkEaga2QBvdRljIEzx8fp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYxZWU1MjQtNWZlNy0z YzE1LTlkZjMtOGNiZTE2ZjRkNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN8jxX6aTnl4Im04mYSNjf+F6gVzU9v4c/jfVfwDLUC983A1nfXsCZI EP5ShHGgG0zZVh6UdagiUmywlfXKczmLNUNpFeJTLxpF4x44ssKuKcfgbl74Dzdq GFCYXep/xQCDMcjb6RhZWxmsQ/TQ8lS4lslGAxjVn7ef5zqtQBH+HqwPBWjmD6kb 0Mm5JpkowLohxgcjRjUtSIv/8+8+NyleUBMXASgS828Rqf/XT/9kwu8WHL5rmo+u j7E0/O8La6zUzjPZANEYnMjaqHnm7E3heCh1adn8GHJ3mYxVfcS2u5wDqub8Z+C8 8W0pYhWuj0JmrEGry0sn2rMpkZtSszM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:27 2024 by rpki-client on console-ams.rpki-client.org