$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a18461c2-ad22-39d6-a5c6-e60e83b09c2e.roa File: a18461c2-ad22-39d6-a5c6-e60e83b09c2e.roa (raw, json) Hash identifier: BkALePTf1I70zu5ASqh7oeEXebn02YUogo1BDb2ot0Y= Subject key identifier: A8:DC:61:73:DE:11:3D:B5:E8:A9:4F:65:27:C3:1F:59:69:67:49:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A04153497F2BD31947487500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a18461c2-ad22-39d6-a5c6-e60e83b09c2e.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.48.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:53:49:7f:2b:d3:19:47:48:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=6ef6f29d-cfdc-4fc5-b0c1-304f21c32000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:d2:91:f4:bc:f0:ad:61:e6:e5:3e:c0:32: dd:a7:df:dd:66:ee:7d:03:c3:2d:c2:c7:91:cf:2e: ef:6d:98:4a:90:d3:5e:03:40:dd:ae:fb:de:fc:4b: 3f:dc:c4:34:a2:55:f3:af:ae:58:55:7d:09:1e:af: 99:8c:e9:ec:89:70:eb:b2:3c:65:df:e9:ba:d6:1c: 26:56:a3:6b:ae:e2:c3:95:fc:b9:86:dc:7d:4e:19: bb:f2:79:51:27:07:bf:6d:dd:60:47:e3:13:d3:3a: 6d:15:8e:af:0b:c7:e8:28:7a:53:fc:85:63:3b:a0: b8:6c:0a:22:51:1e:14:b8:d4:f2:3e:2c:58:34:d6: 4d:9c:a4:a8:95:f0:3c:78:5b:7f:1d:79:a4:0d:87: d1:a8:9d:59:bf:89:d6:58:67:f1:4d:23:4c:5b:cb: 38:53:3e:5e:b1:61:78:b0:56:f6:ae:2d:7e:2d:94: d1:c2:90:42:82:19:11:a6:14:5d:dd:31:b9:ef:30: 8b:da:67:65:b1:9a:fc:6d:09:ed:0f:93:03:e3:c9: e0:52:66:8f:10:e6:ef:cb:26:b6:5b:cc:f3:8b:69: 32:24:d3:e4:79:e8:71:6f:c0:3d:11:bd:07:d9:38: b4:cc:10:14:04:f7:80:81:25:c8:39:0f:a0:9a:56: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DC:61:73:DE:11:3D:B5:E8:A9:4F:65:27:C3:1F:59:69:67:49:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a18461c2-ad22-39d6-a5c6-e60e83b09c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:05:3c:da:32:12:57:ff:02:08:ea:0b:3b:eb:f6:74:93:0f: 0e:25:da:20:e5:b4:e4:32:ae:0b:3f:83:89:f5:61:1c:49:79: cb:29:1f:ce:f2:f2:69:da:da:49:cb:f4:59:49:df:66:56:be: d0:20:37:7c:1c:45:41:02:c3:13:05:49:c0:45:06:36:bb:98: d8:58:65:26:42:37:99:f4:5f:53:25:8f:9b:66:5e:2b:3d:8c: df:ca:33:eb:21:2e:e6:a2:d7:eb:19:53:12:66:32:c6:8f:b9: 79:0e:69:76:fb:9d:b6:94:1c:91:13:dd:7b:53:c5:20:f2:0c: 03:0a:a4:90:17:f5:3b:79:2e:a4:3b:0c:f1:7d:6f:67:7d:f9: ed:0e:1f:5a:54:db:27:df:8e:72:f7:a1:82:93:8d:69:b1:c3: e7:15:37:64:e1:8d:99:7d:5f:12:22:d5:1d:70:3c:49:ac:86: 85:1d:1b:4f:2d:45:68:30:5f:fc:4c:57:43:95:b8:c9:82:43: 4d:03:54:42:d2:ed:62:d9:bc:29:8b:4b:7a:29:65:ed:3e:66: 3a:e5:cc:af:c4:e0:fd:ce:db:50:ee:46:2f:77:b2:e9:cb:0f: b7:47:e7:95:7a:2b:95:1c:d0:a6:b4:1a:f4:2d:18:a1:3a:31: d4:69:c7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVNJfyvTGUdIdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk NmVmNmYyOWQtY2ZkYy00ZmM1LWIwYzEtMzA0ZjIxYzMyMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSzSkfS88K1h5uU+wDLdp9/dZu59A8MtwseR zy7vbZhKkNNeA0Ddrvve/Es/3MQ0olXzr65YVX0JHq+ZjOnsiXDrsjxl3+m61hwm VqNrruLDlfy5htx9Thm78nlRJwe/bd1gR+MT0zptFY6vC8foKHpT/IVjO6C4bAoi UR4UuNTyPixYNNZNnKSolfA8eFt/HXmkDYfRqJ1Zv4nWWGfxTSNMW8s4Uz5esWF4 sFb2ri1+LZTRwpBCghkRphRd3TG57zCL2mdlsZr8bQntD5MD48ngUmaPEObvyya2 W8zzi2kyJNPkeehxb8A9Eb0H2Ti0zBAUBPeAgSXIOQ+gmlaWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjcYXPeET216KlPZSfDH1lpZ0ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE4NDYxYzItYWQyMi0z OWQ2LWE1YzYtZTYwZTgzYjA5YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEFPNoyElf/AgjqCzvr9nSTDw4l2iDltOQyrgs/g4n1YRxJecspH87y 8mna2knL9FlJ32ZWvtAgN3wcRUECwxMFScBFBja7mNhYZSZCN5n0X1Mlj5tmXis9 jN/KM+shLuai1+sZUxJmMsaPuXkOaXb7nbaUHJET3XtTxSDyDAMKpJAX9Tt5LqQ7 DPF9b2d9+e0OH1pU2yffjnL3oYKTjWmxw+cVN2ThjZl9XxIi1R1wPEmshoUdG08t RWgwX/xMV0OVuMmCQ00DVELS7WLZvCmLS3opZe0+ZjrlzK/E4P3O21DuRi93sunL D7dH55V6K5Uc0Ka0GvQtGKE6MdRpx+A= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:10 2024 by rpki-client on console-ams.rpki-client.org