$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903e7f59-0b39-3366-b6fe-9ddcb5051142.roa File: 903e7f59-0b39-3366-b6fe-9ddcb5051142.roa (raw, json) Hash identifier: 8XWkb17L0v4/ywEhzD9C1Z7EzUYy0/JmYXz1w9POhZg= Subject key identifier: 61:90:ED:FA:92:8A:7C:E1:96:EA:B2:74:A4:74:CE:8B:B6:29:EC:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474850B984EFB98A1940028700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903e7f59-0b39-3366-b6fe-9ddcb5051142.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 35994 IP address blocks: 23.52.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:b9:84:ef:b9:8a:19:40:02:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=7c19d470-bced-4e6c-a095-a435e6f3feac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:16:1a:32:66:2d:d3:36:36:cc:01:9f:54: da:4f:d4:d8:21:67:8d:75:36:61:ae:86:ca:4c:1f: b9:44:6b:81:29:d9:59:c7:1a:a0:52:a8:74:f2:6c: e4:41:50:52:c9:54:c4:39:08:b3:39:74:9a:4f:03: 01:10:78:a8:60:a6:df:dc:70:64:97:3a:71:ee:2e: 87:63:41:9b:fc:29:19:e9:48:0b:f6:28:cf:76:76: ca:ab:59:4e:ad:da:88:f0:75:60:79:7e:f3:df:c9: 4e:f0:3d:d9:1f:aa:82:a1:22:97:7f:1e:dc:8b:c5: 07:a1:11:2d:64:88:39:82:99:42:00:d0:27:dd:63: d8:19:92:60:49:be:fb:95:fc:f6:dd:b1:4d:9b:f5: e2:38:54:35:70:83:41:bf:3d:55:aa:fe:89:e5:57: 7b:ab:c2:21:94:99:b6:66:b0:b2:9b:31:19:7d:99: db:c6:7e:97:c8:b7:6a:d8:65:60:e2:c3:95:d3:66: b5:ad:5e:1f:b5:ff:ea:63:93:32:a3:ee:80:e8:e3: 62:cc:aa:8a:e9:a2:6a:f7:bc:b0:62:0b:c9:18:62: 87:de:60:ec:d0:3d:77:e3:29:92:a7:64:58:4b:83: 5c:98:45:a4:cd:63:77:f8:11:48:1a:b0:ee:28:02: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:ED:FA:92:8A:7C:E1:96:EA:B2:74:A4:74:CE:8B:B6:29:EC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903e7f59-0b39-3366-b6fe-9ddcb5051142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1d:30:93:3e:1b:66:78:f1:d1:6f:55:04:67:9d:f6:9a:2e: e6:9c:66:c3:7b:3f:a7:bd:c2:dc:68:9d:df:d9:bf:5d:a0:3c: 57:49:b4:37:0c:88:91:0b:52:8f:26:6f:17:e4:25:ce:90:9c: 8f:39:7d:78:b6:09:be:10:50:2d:99:e4:53:41:f0:6f:99:00: a4:46:24:35:27:2a:37:4f:0c:51:1d:b0:58:d7:20:39:ab:33: 75:38:51:21:23:73:33:7b:42:55:75:c7:72:71:f4:e6:13:e0: 44:ea:68:9b:18:78:c8:ea:86:ab:ee:32:1f:e9:93:88:55:e9: 00:c7:b3:fa:65:ca:34:95:68:63:46:73:9f:de:ca:24:ba:28: 33:a1:e1:11:39:f4:ae:ee:ef:f1:0a:87:72:5c:db:9f:73:6b: f6:cc:3d:05:ea:2c:2c:b1:2a:9c:66:82:aa:9f:44:91:11:84: c9:c8:47:c2:02:b6:ad:d3:98:1b:c7:9a:ff:bd:86:f6:dc:59: ce:7f:df:9d:d0:39:03:af:92:10:73:23:f4:f1:59:75:f4:22: 1c:81:c0:44:90:85:0d:b6:1b:5a:8c:47:be:0c:0c:69:1f:f3: 9a:a6:55:fa:27:2d:72:98:0b:4c:f5:17:1a:4f:5f:7c:86:84: 83:02:1a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIULmE77mKGUAChwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk N2MxOWQ0NzAtYmNlZC00ZTZjLWEwOTUtYTQzNWU2ZjNmZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjosWGjJmLdM2NswBn1TaT9TYIWeNdTZhrobK TB+5RGuBKdlZxxqgUqh08mzkQVBSyVTEOQizOXSaTwMBEHioYKbf3HBklzpx7i6H Y0Gb/CkZ6UgL9ijPdnbKq1lOrdqI8HVgeX7z38lO8D3ZH6qCoSKXfx7ci8UHoREt ZIg5gplCANAn3WPYGZJgSb77lfz23bFNm/XiOFQ1cINBvz1Vqv6J5Vd7q8IhlJm2 ZrCymzEZfZnbxn6XyLdq2GVg4sOV02a1rV4ftf/qY5Myo+6A6ONizKqK6aJq97yw YgvJGGKH3mDs0D134ymSp2RYS4NcmEWkzWN3+BFIGrDuKAJMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGQ7fqSinzhluqydKR0zou2KezMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzZTdmNTktMGIzOS0z MzY2LWI2ZmUtOWRkY2I1MDUxMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYdMJM+G2Z48dFvVQRnnfaaLuacZsN7P6e9wtxond/Zv12gPFdJtDcM iJELUo8mbxfkJc6QnI85fXi2Cb4QUC2Z5FNB8G+ZAKRGJDUnKjdPDFEdsFjXIDmr M3U4USEjczN7QlV1x3Jx9OYT4ETqaJsYeMjqhqvuMh/pk4hV6QDHs/plyjSVaGNG c5/eyiS6KDOh4RE59K7u7/EKh3Jc259za/bMPQXqLCyxKpxmgqqfRJERhMnIR8IC tq3TmBvHmv+9hvbcWc5/353QOQOvkhBzI/TxWXX0IhyBwESQhQ22G1qMR74MDGkf 85qmVfonLXKYC0z1FxpPX3yGhIMCGn8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:35 2024 by rpki-client on console-ams.rpki-client.org