$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa File: a89708f9-f6dd-39d4-b67f-98ba8899950c.roa (raw, json) Hash identifier: i5an76wk+WmmMLexkyGT8rwvluMGjPJW/Ez3liLCHPc= Subject key identifier: 71:B8:54:00:2F:80:B0:D8:2B:E2:CC:4D:63:BB:14:08:20:17:FB:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584765A0FB027AD1B9213E1FF300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 20940 IP address blocks: 23.3.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:fb:02:7a:d1:b9:21:3e:1f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=c2ada0b6-63bd-4e2f-bc8b-8bfafc76f294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:79:b4:ba:ef:b1:97:43:e3:c8:64:35:39: 1f:4f:5c:fb:db:9d:d2:5a:ff:ff:d4:04:f2:64:50: d5:6c:2c:0b:80:18:79:5e:af:b8:d6:43:fa:44:58: fb:75:c9:4b:75:4e:03:57:7f:90:8d:ea:55:eb:01: 8c:eb:28:e9:fe:ce:14:f8:a1:68:a7:64:d6:e3:2d: b5:b8:3f:c1:63:c8:de:e1:81:d9:b8:81:04:40:ce: 1d:37:8a:3c:69:cb:a8:d2:30:b7:1e:4f:5e:e9:3a: 3c:81:a5:ec:e5:a4:4e:35:9b:cc:07:63:2a:24:45: 42:ae:6e:22:8d:57:32:dd:37:ce:b7:37:0b:91:94: 53:d1:7b:70:c0:56:1f:a2:f0:54:53:78:40:be:21: 9e:fb:bd:91:a5:54:e2:7d:4c:1f:1c:66:83:ff:03: cf:c4:48:ff:9b:df:e6:a3:6d:41:49:28:8d:e4:f8: 00:0f:82:fb:42:71:7c:f4:dd:21:fa:4a:b0:8c:2a: ba:ce:d3:0e:69:49:a5:1b:07:19:a2:fb:1e:5e:e7: 96:a9:df:5c:c6:10:92:6c:8e:2e:9f:d5:86:dc:e6: 5c:2f:c2:98:26:11:99:93:e1:dc:16:a3:75:97:7d: 24:b1:12:66:0a:5f:3e:97:06:35:57:a1:4a:23:4a: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:54:00:2F:80:B0:D8:2B:E2:CC:4D:63:BB:14:08:20:17:FB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a89708f9-f6dd-39d4-b67f-98ba8899950c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9f:07:b2:6c:13:72:6d:5d:6e:c7:bd:db:12:fa:d7:28:c4: 30:f6:bb:50:c2:96:fb:2a:f8:bb:19:a5:cd:21:a4:d0:6b:bb: 03:85:fe:f5:d2:cc:fe:80:8e:37:cf:6a:32:57:c6:d9:4a:08: b2:73:80:f2:97:e4:c7:2c:89:ac:c6:97:28:1b:d5:80:fb:7e: ed:a4:0c:03:4a:d4:12:9d:8c:64:95:66:c5:3c:a7:8f:47:d2: 3c:85:95:b9:a1:01:f4:59:72:40:e7:0c:1d:f8:bb:0c:09:5f: 32:ae:7f:63:99:85:15:2b:05:f7:27:10:9e:00:b9:23:e5:8b: dc:e7:c7:fc:3d:25:d1:61:2f:03:9b:ab:4c:78:96:3e:93:a0: 33:cb:c7:5d:70:ec:b4:ac:9c:91:ba:0f:ae:73:71:8d:22:99: fb:50:1a:8f:00:4c:24:e6:a6:b3:ce:21:22:85:d5:a3:b5:5c: a9:2d:ef:7c:e1:39:26:b1:77:b6:6a:40:f8:7a:ba:3c:d1:1a: 9d:a0:d2:c4:4e:4c:ea:bb:ea:14:27:2b:6c:4e:41:2b:69:c5: 38:69:b0:07:d8:4a:9d:89:47:df:07:e8:6a:f0:9b:a4:bf:92: c6:4c:83:5f:7d:a5:bb:58:c4:b1:13:a8:46:96:af:90:7e:9d: 41:78:fc:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPsCetG5IT4f8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk YzJhZGEwYjYtNjNiZC00ZTJmLWJjOGItOGJmYWZjNzZmMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT15tLrvsZdD48hkNTkfT1z7253SWv//1ATy ZFDVbCwLgBh5Xq+41kP6RFj7dclLdU4DV3+QjepV6wGM6yjp/s4U+KFop2TW4y21 uD/BY8je4YHZuIEEQM4dN4o8acuo0jC3Hk9e6To8gaXs5aRONZvMB2MqJEVCrm4i jVcy3TfOtzcLkZRT0XtwwFYfovBUU3hAviGe+72RpVTifUwfHGaD/wPPxEj/m9/m o21BSSiN5PgAD4L7QnF89N0h+kqwjCq6ztMOaUmlGwcZovseXueWqd9cxhCSbI4u n9WG3OZcL8KYJhGZk+HcFqN1l30ksRJmCl8+lwY1V6FKI0oLZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG4VAAvgLDYK+LMTWO7FAggF/uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg5NzA4ZjktZjZkZC0z OWQ0LWI2N2YtOThiYTg4OTk5NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqfB7JsE3JtXW7HvdsS+tcoxDD2u1DClvsq+LsZpc0hpNBruwOF/vXS zP6AjjfPajJXxtlKCLJzgPKX5McsiazGlygb1YD7fu2kDANK1BKdjGSVZsU8p49H 0jyFlbmhAfRZckDnDB34uwwJXzKuf2OZhRUrBfcnEJ4AuSPli9znx/w9JdFhLwOb q0x4lj6ToDPLx11w7LSsnJG6D65zcY0imftQGo8ATCTmprPOISKF1aO1XKkt73zh OSaxd7ZqQPh6ujzRGp2g0sROTOq76hQnK2xOQStpxThpsAfYSp2JR98H6Grwm6S/ ksZMg199pbtYxLETqEaWr5B+nUF4/Ik= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:13 2024 by rpki-client on console-ams.rpki-client.org