$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa File: 904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa (raw, json) Hash identifier: w9M8r5hHMEXpvXrqeSmEsBFqAzpszpgvLYz+0qsy9kU= Subject key identifier: 15:E9:22:E3:7C:5F:3F:37:29:B4:66:AC:9D:64:80:3B:E7:30:08:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C8D9FF1BC42454A09E92A500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 16625 IP address blocks: 23.201.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:ff:1b:c4:24:54:a0:9e:92:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=5bb85d22-0b3f-4d5d-b9b3-b2bc3b25caee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:c2:91:a1:eb:0a:5c:9f:65:00:57:ca:9e: 34:d9:e9:11:a9:ef:0f:90:e2:d1:d7:1d:d5:1b:2c: c3:7a:9e:bb:9a:3c:ef:28:b5:8f:ad:1c:ab:50:70: cc:51:7a:67:af:90:4b:06:7a:62:14:3c:4a:aa:f9: a3:83:30:11:46:87:f2:e1:c0:73:59:5e:1d:b8:b6: a3:78:5b:ac:1e:e1:df:13:59:6e:1d:e2:98:66:9c: 16:0c:8e:4c:6a:08:33:e3:60:92:0f:f2:ee:34:40: ba:62:33:b8:b7:b6:87:74:13:28:61:88:ce:cf:24: 51:0f:5c:a8:bd:c5:31:62:13:7f:ff:07:2f:83:ef: 05:78:e6:32:e9:1c:c4:87:10:6f:f8:56:d9:cc:87: fd:72:93:ef:71:be:ad:a2:74:37:66:42:18:cb:fb: ca:2e:3b:44:8c:78:7b:2f:30:70:47:91:88:00:cb: ff:4b:bd:0c:6f:0e:fc:0c:aa:8b:0e:19:f4:bc:47: fc:d7:53:0f:88:49:84:cc:f3:6b:87:86:a5:a3:50: 11:27:fc:e7:41:ea:e3:3d:c6:08:62:64:17:66:b2: ba:22:ea:8d:4f:bf:09:a9:89:d2:d4:58:43:37:17: a6:e8:2e:ba:dd:e7:7b:17:51:bd:90:89:3b:cc:56: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:22:E3:7C:5F:3F:37:29:B4:66:AC:9D:64:80:3B:E7:30:08:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5d:9c:f2:ec:6b:57:62:a8:69:93:18:bf:97:a9:94:db:d6: 5f:37:ef:77:65:c6:c4:53:83:84:33:86:d0:f4:17:7a:43:05: 65:3b:83:ab:cf:02:49:7c:2d:9e:4d:3b:12:22:4a:fd:d0:15: e0:8f:87:fb:70:9b:cc:db:ca:fd:6c:22:0e:6d:d3:7f:da:88: 29:e3:8a:84:8a:7b:e4:29:b5:02:f1:8b:74:65:ad:64:56:82: ac:ad:25:dc:44:15:7e:82:b8:5a:9a:08:ab:27:9d:93:95:76: bd:72:26:81:91:6e:89:c2:ed:fc:a6:30:fe:fc:59:72:c6:f5: 64:09:f8:86:b6:c8:ed:73:9a:2d:c7:56:98:cf:a1:c3:b3:98: 4a:34:21:e9:8c:57:81:2e:3c:2d:1a:48:a9:61:79:f1:fd:7b: 05:8c:e6:11:32:7c:d7:20:15:18:0a:84:37:f8:87:00:35:ef: 8a:6f:21:93:a4:9f:40:01:a0:15:e5:60:73:ae:38:78:9d:88: c7:70:65:9d:e2:1c:e9:2e:f4:1f:aa:ee:f3:1f:67:a9:b6:dd: 63:e4:1f:71:fd:d9:3c:37:fd:6c:9a:f5:8f:61:70:d7:1d:d2: 05:ab:d5:35:51:c2:ac:d3:e5:72:df:72:51:46:52:cc:2c:fe: 2f:7f:79:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2f8bxCRUoJ6SpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NWJiODVkMjItMGIzZi00ZDVkLWI5YjMtYjJiYzNiMjVjYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0fCkaHrClyfZQBXyp402ekRqe8PkOLR1x3V GyzDep67mjzvKLWPrRyrUHDMUXpnr5BLBnpiFDxKqvmjgzARRofy4cBzWV4duLaj eFusHuHfE1luHeKYZpwWDI5Maggz42CSD/LuNEC6YjO4t7aHdBMoYYjOzyRRD1yo vcUxYhN//wcvg+8FeOYy6RzEhxBv+FbZzIf9cpPvcb6tonQ3ZkIYy/vKLjtEjHh7 LzBwR5GIAMv/S70Mbw78DKqLDhn0vEf811MPiEmEzPNrh4alo1ARJ/znQerjPcYI YmQXZrK6IuqNT78JqYnS1FhDNxem6C663ed7F1G9kIk7zFaxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXpIuN8Xz83KbRmrJ1kgDvnMAhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA0YmY5YzQtM2Q2Zi0z NTAzLWJjZTktYjY5YjJhNzlmYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERdnPLsa1diqGmTGL+XqZTb1l8373dlxsRTg4QzhtD0F3pDBWU7g6vP Akl8LZ5NOxIiSv3QFeCPh/twm8zbyv1sIg5t03/aiCnjioSKe+QptQLxi3RlrWRW gqytJdxEFX6CuFqaCKsnnZOVdr1yJoGRbonC7fymMP78WXLG9WQJ+Ia2yO1zmi3H VpjPocOzmEo0IemMV4EuPC0aSKlhefH9ewWM5hEyfNcgFRgKhDf4hwA174pvIZOk n0ABoBXlYHOuOHidiMdwZZ3iHOku9B+q7vMfZ6m23WPkH3H92Tw3/Wya9Y9hcNcd 0gWr1TVRwqzT5XLfclFGUsws/i9/eSg= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:27 2024 by rpki-client on console-ams.rpki-client.org