$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa File: a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa (raw, json) Hash identifier: KRCXLEk8xC28eOtZKE7010QyWMlcRYD2Gsz30c/v7WM= Subject key identifier: FE:71:6B:BA:0E:FE:43:15:03:C0:59:28:1C:15:67:34:A2:D8:C1:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C77498EFC6344726EFD72F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa Signing time: Tue 05 Nov 2024 14:00:38 +0000 ROA not before: Tue 05 Nov 2024 14:00:38 +0000 ROA not after: Mon 03 Feb 2025 14:00:38 +0000 asID: 20940 IP address blocks: 23.199.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c7:74:98:ef:c6:34:47:26:ef:d7:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 5 14:00:38 2024 GMT Not After : Feb 3 14:00:38 2025 GMT Subject: CN=d25afac5-8529-4687-badc-cb79d48d225c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:e4:35:1c:2b:a9:75:43:72:27:88:32:b9: 45:a5:b1:81:a3:86:ac:35:52:c3:86:a4:3a:14:08: 90:6d:d8:f2:51:0e:8a:e6:b3:92:97:08:cc:a7:0f: b2:b6:aa:6d:5f:01:eb:a1:eb:51:2b:a3:1a:5f:54: fe:21:38:c4:27:9b:2b:49:9e:c6:97:2d:00:da:2d: dd:6b:80:8b:af:76:9c:41:2b:b3:c6:be:61:4f:1a: 64:72:2f:c3:6d:83:6f:ff:09:ac:38:32:c4:1e:aa: 35:da:33:15:87:57:7e:9f:08:1e:ed:69:cf:4c:af: 99:f8:25:19:9e:74:06:77:d0:2c:32:58:2e:cf:08: 46:2a:19:a8:d9:15:b8:70:51:a0:49:14:b9:18:05: 30:17:f4:a9:29:93:d4:e3:3b:b8:84:4d:b1:81:6b: e3:89:93:9d:8e:99:b8:65:f4:86:44:a3:54:45:cb: 83:b0:6c:1a:e9:a6:06:4c:66:8f:00:b3:61:27:01: 17:8d:7b:e9:0d:ae:42:f6:37:ba:aa:2b:73:af:3a: 81:3f:5d:40:92:c7:cd:be:48:1d:99:f7:68:ae:f2: 76:16:f1:d9:69:b3:f9:74:ce:45:c0:83:13:f2:06: 15:91:b7:9e:b0:dd:fd:df:49:a7:df:57:77:31:cc: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:6B:BA:0E:FE:43:15:03:C0:59:28:1C:15:67:34:A2:D8:C1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a401b9ce-91c6-364d-bf85-56b1a59df6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:00:ce:9c:ee:64:67:66:3f:39:47:02:6f:6a:c3:db:0b:34: 7e:c0:cf:dd:27:b3:85:8f:98:0d:b0:a5:9c:44:a5:b8:ec:97: 42:df:4b:c8:ad:38:4f:e5:6d:fc:89:42:3f:e5:93:df:3e:d8: 79:df:c8:45:a7:3e:1c:f7:13:90:a3:92:6a:b8:f6:8e:4a:85: f7:4c:87:98:74:cd:eb:4a:89:8b:86:14:35:e3:a6:41:05:c2: 67:87:b9:8a:ba:c7:91:41:67:59:16:46:12:83:ba:6b:ea:8a: 00:0e:55:fd:ac:96:98:3a:1e:26:47:c9:7d:ef:23:39:6d:73: d2:47:06:50:1a:98:1c:05:da:42:c9:de:4e:17:7e:16:9f:18: 55:d3:8a:16:ae:d8:c4:59:09:3f:35:32:86:c4:cf:34:48:a3: d5:3e:81:fa:6d:1c:c6:e5:9e:3f:84:35:49:35:11:6d:6e:ff: 31:bf:be:56:03:ca:e6:00:73:b2:8f:29:dc:04:85:c8:c5:4d: 29:fd:8b:51:94:fd:73:b7:d1:37:12:bc:21:82:c3:c5:7d:62: eb:29:6b:d3:a9:79:22:e1:32:82:b1:f4:49:cf:40:17:94:fb: 28:24:42:a2:03:e7:9c:eb:8c:00:ca:01:8a:a6:30:27:af:03: 7a:b7:be:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfHdJjvxjRHJu/XL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNTE0MDAzOFoXDTI1MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZDI1YWZhYzUtODUyOS00Njg3LWJhZGMtY2I3OWQ0OGQyMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPnkNRwrqXVDcieIMrlFpbGBo4asNVLDhqQ6 FAiQbdjyUQ6K5rOSlwjMpw+ytqptXwHroetRK6MaX1T+ITjEJ5srSZ7Gly0A2i3d a4CLr3acQSuzxr5hTxpkci/DbYNv/wmsODLEHqo12jMVh1d+nwge7WnPTK+Z+CUZ nnQGd9AsMlguzwhGKhmo2RW4cFGgSRS5GAUwF/SpKZPU4zu4hE2xgWvjiZOdjpm4 ZfSGRKNURcuDsGwa6aYGTGaPALNhJwEXjXvpDa5C9je6qitzrzqBP11AksfNvkgd mfdorvJ2FvHZabP5dM5FwIMT8gYVkbeesN3930mn31d3McxaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5xa7oO/kMVA8BZKBwVZzSi2MGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQwMWI5Y2UtOTFjNi0z NjRkLWJmODUtNTZiMWE1OWRmNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYAzpzuZGdmPzlHAm9qw9sLNH7Az90ns4WPmA2wpZxEpbjsl0LfS8it OE/lbfyJQj/lk98+2HnfyEWnPhz3E5Cjkmq49o5KhfdMh5h0zetKiYuGFDXjpkEF wmeHuYq6x5FBZ1kWRhKDumvqigAOVf2slpg6HiZHyX3vIzltc9JHBlAamBwF2kLJ 3k4XfhafGFXTihau2MRZCT81MobEzzRIo9U+gfptHMblnj+ENUk1EW1u/zG/vlYD yuYAc7KPKdwEhcjFTSn9i1GU/XO30TcSvCGCw8V9Yuspa9OpeSLhMoKx9EnPQBeU +ygkQqID55zrjADKAYqmMCevA3q3vnI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:11 2024 by rpki-client on console-ams.rpki-client.org