$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa File: 9c2f1a51-8782-369d-8ee3-2041611ab896.roa (raw, json) Hash identifier: uulz1D8xdFGwBwGJi0mIBDhd9vftxiOrWwFtjAv4tBI= Subject key identifier: 07:F0:02:0B:34:17:6C:4A:4F:9D:B0:EC:AA:8F:F7:F0:A5:3A:7C:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1A67D5F53A95CD3C1340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.203.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1a:67:d5:f5:3a:95:cd:3c:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=c0945631-189e-4d0c-af8f-3ad81302b374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:cf:de:86:bd:08:84:a4:12:54:cb:b8:97: c9:e6:1c:cf:e7:d6:42:33:98:aa:28:0d:ba:3b:51: 33:91:7c:e8:11:e7:41:3c:8b:be:a9:9a:a5:21:90: 58:c4:76:6b:35:8c:04:c0:8c:df:2a:1b:2e:f2:b7: 19:ac:6a:81:8a:f5:d6:cb:46:8c:8d:f7:f6:a5:5c: bc:b2:f4:61:80:5b:04:a0:77:a2:a2:84:30:ae:ce: d5:f2:a8:cc:84:57:78:4f:bb:1d:f9:a9:07:7a:ad: 51:bd:15:1e:2e:3a:7f:f5:8e:d8:20:11:87:f0:6b: de:79:b7:39:df:94:88:b6:08:4c:5c:d6:54:f9:6d: f4:11:3f:5c:23:9e:70:dd:37:41:e0:2f:8f:54:ac: 24:4a:7c:39:80:ca:3f:20:f0:fa:7e:59:f7:63:c2: 35:f3:48:41:40:c8:5e:01:c4:15:e7:d7:77:a9:4d: 24:76:80:9f:26:9f:81:aa:40:c7:b7:8b:77:7e:e9: be:d9:22:f3:2c:90:04:fe:44:d7:5b:33:96:5c:bb: c9:dd:a0:c2:c2:9e:e2:ce:8f:57:18:ec:05:97:27: 61:86:67:c2:fe:04:80:67:e3:52:c0:b7:23:03:5c: d1:d6:47:8d:b6:2c:23:72:b5:31:33:92:e0:21:18: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F0:02:0B:34:17:6C:4A:4F:9D:B0:EC:AA:8F:F7:F0:A5:3A:7C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:62:b7:46:c5:da:24:32:67:18:c2:5e:08:6b:be:9b:33:98: 30:63:9c:11:13:30:c8:f3:85:cc:ca:97:66:8d:2d:9b:cc:20: 4a:f7:23:c9:2a:26:7e:10:65:99:3e:9b:10:40:6c:07:63:66: 8d:9f:49:68:57:10:df:e6:c6:1e:c9:51:9a:4a:fa:52:a6:ff: 3b:f4:a1:cf:1f:6c:f7:7b:07:3e:15:88:64:d7:02:87:af:cd: 51:a6:77:cc:13:fe:c5:e2:1e:05:95:5d:ac:68:12:a1:bc:97: bf:b2:56:ac:26:86:2e:40:71:eb:68:3f:0b:39:69:73:ab:d0: b7:ae:76:bc:64:d6:30:8e:89:28:54:81:47:1f:19:7a:1b:da: 0d:58:dd:6a:78:33:25:99:73:0a:f1:0f:71:78:f5:38:9e:a1: eb:51:44:7b:c8:a0:94:61:58:d9:69:70:58:92:a4:70:58:97: 3e:80:2e:92:73:35:03:3a:aa:25:47:35:26:6c:08:e8:dd:3e: 65:28:b8:6f:fb:2e:49:31:3f:85:1f:43:ad:18:e4:37:72:bb: ae:06:9b:6a:22:53:19:01:5c:86:c8:50:e9:03:bc:87:af:2c: 5b:bd:34:5a:3a:b5:97:ea:d6:84:f7:c5:79:34:06:77:c2:c2: ab:cc:63:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBpn1fU6lc08E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YzA5NDU2MzEtMTg5ZS00ZDBjLWFmOGYtM2FkODEzMDJiMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3vP3oa9CISkElTLuJfJ5hzP59ZCM5iqKA26 O1EzkXzoEedBPIu+qZqlIZBYxHZrNYwEwIzfKhsu8rcZrGqBivXWy0aMjff2pVy8 svRhgFsEoHeiooQwrs7V8qjMhFd4T7sd+akHeq1RvRUeLjp/9Y7YIBGH8Gveebc5 35SItghMXNZU+W30ET9cI55w3TdB4C+PVKwkSnw5gMo/IPD6fln3Y8I180hBQMhe AcQV59d3qU0kdoCfJp+BqkDHt4t3fum+2SLzLJAE/kTXWzOWXLvJ3aDCwp7izo9X GOwFlydhhmfC/gSAZ+NSwLcjA1zR1keNtiwjcrUxM5LgIRhPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfwAgs0F2xKT52w7KqP9/ClOnydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMyZjFhNTEtODc4Mi0z NjlkLThlZTMtMjA0MTYxMWFiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlit0bF2iQyZxjCXghrvpszmDBjnBETMMjzhczKl2aNLZvMIEr3I8kq Jn4QZZk+mxBAbAdjZo2fSWhXEN/mxh7JUZpK+lKm/zv0oc8fbPd7Bz4ViGTXAoev zVGmd8wT/sXiHgWVXaxoEqG8l7+yVqwmhi5AcetoPws5aXOr0Leudrxk1jCOiShU gUcfGXob2g1Y3Wp4MyWZcwrxD3F49TieoetRRHvIoJRhWNlpcFiSpHBYlz6ALpJz NQM6qiVHNSZsCOjdPmUouG/7LkkxP4UfQ60Y5Ddyu64Gm2oiUxkBXIbIUOkDvIev LFu9NFo6tZfq1oT3xXk0BnfCwqvMY0s= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:07 2024 by rpki-client on console-ams.rpki-client.org