$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca4bd75b-f711-3c05-9e60-22ae2344ddca.roa File: ca4bd75b-f711-3c05-9e60-22ae2344ddca.roa (raw, json) Hash identifier: Efvg+/cun4dx2ogCKi5rbAcJeXmebVkHuzpdi+kxj1s= Subject key identifier: 30:F4:47:6D:06:FB:F0:61:80:BE:76:B0:04:7D:F0:D8:1D:5C:5C:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CF2CB99172535DFCAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca4bd75b-f711-3c05-9e60-22ae2344ddca.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.223.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cf:2c:b9:91:72:53:5d:fc:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=afc126ca-7f39-4d76-904d-355fb911ae2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:aa:a9:50:1b:79:c0:2e:00:8d:f1:eb:f2: 75:ac:19:37:04:71:3c:8c:ab:7c:01:2f:63:38:04: 8c:cc:48:e5:d2:7e:18:38:54:87:9f:d8:f8:ea:d5: 49:1f:80:f4:80:b0:9c:1d:77:c3:8a:c9:89:0a:89: 2a:95:a0:c6:65:d0:03:1d:b9:33:3d:fa:e1:ee:60: 4b:ef:be:77:4a:bb:9b:fe:bd:34:17:91:b1:4a:8f: 2e:71:2f:eb:0c:11:f4:ef:1a:df:4b:00:5b:d4:10: 92:a3:1a:44:e5:20:f4:3b:1b:eb:ef:40:aa:45:6d: 57:d1:d2:1b:e9:65:68:88:12:b4:dd:8f:a7:ee:31: 8a:e8:67:01:13:b8:c7:15:42:38:c5:3a:a8:98:73: bc:3a:b0:c4:d2:2b:d8:45:6b:39:47:9d:4b:2c:9f: 2b:fc:1b:50:87:23:b2:a5:a4:4a:34:68:46:f1:83: 8e:a6:3a:33:cc:21:89:79:2b:5d:53:35:71:2a:47: a5:3a:bc:96:5c:30:79:28:82:6d:bf:88:f3:e9:3a: 05:3d:94:1f:62:81:d5:ce:0c:13:29:ab:f2:8b:81: 45:bf:55:61:18:61:4c:51:ea:10:0a:bb:ec:6f:0c: ae:bc:7a:6e:c1:59:ee:3d:6f:0a:05:36:6b:32:5f: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F4:47:6D:06:FB:F0:61:80:BE:76:B0:04:7D:F0:D8:1D:5C:5C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca4bd75b-f711-3c05-9e60-22ae2344ddca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e5:6b:d5:3a:a0:9d:46:b9:26:bb:44:74:f0:19:f6:87:2b: 8c:88:62:a2:30:dd:03:46:0c:ee:a7:68:90:8f:fb:f5:8d:87: 02:1f:9a:49:ab:80:10:28:3c:d5:c8:76:3c:fe:69:02:6a:61: 26:e9:48:6d:2e:97:92:97:97:e9:79:f4:6c:7c:bc:ef:de:18: fb:fd:88:ee:8e:01:f4:78:21:ed:4a:78:92:6e:d0:c7:c3:62: fd:b4:00:1b:a7:fc:b9:c3:97:e3:b9:8a:95:4e:01:42:eb:e4: 7e:97:7d:c6:43:b4:6a:89:98:02:8c:a6:74:ba:c7:aa:c8:5e: d7:30:f7:96:e5:d1:64:1f:56:a8:e2:29:85:38:20:c1:86:e2: 68:de:e2:ae:6b:4a:43:05:1b:ea:f9:d9:99:0d:e5:cb:0d:61: e5:2b:7e:0e:96:45:8d:77:47:0b:08:98:fc:98:fa:e9:d3:42: 31:f2:3b:9a:5c:9d:70:a8:d8:e7:2e:9b:35:34:42:1d:17:57: 54:01:c7:6c:4f:7b:9a:99:f0:11:ad:de:5d:9e:97:61:b0:56: e2:d0:c6:6f:48:93:e5:f9:a3:8f:43:a5:86:ee:5c:bb:11:fb: 8f:4b:cd:41:1c:9e:f6:8b:a1:93:cd:f7:f5:ed:02:a9:00:b1: 51:cd:5f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJM8suZFyU138rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk YWZjMTI2Y2EtN2YzOS00ZDc2LTkwNGQtMzU1ZmI5MTFhZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61KqqVAbecAuAI3x6/J1rBk3BHE8jKt8AS9j OASMzEjl0n4YOFSHn9j46tVJH4D0gLCcHXfDismJCokqlaDGZdADHbkzPfrh7mBL 7753Srub/r00F5GxSo8ucS/rDBH07xrfSwBb1BCSoxpE5SD0Oxvr70CqRW1X0dIb 6WVoiBK03Y+n7jGK6GcBE7jHFUI4xTqomHO8OrDE0ivYRWs5R51LLJ8r/BtQhyOy paRKNGhG8YOOpjozzCGJeStdUzVxKkelOryWXDB5KIJtv4jz6ToFPZQfYoHVzgwT Kavyi4FFv1VhGGFMUeoQCrvsbwyuvHpuwVnuPW8KBTZrMl8ZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD0R20G+/BhgL52sAR98NgdXFy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E0YmQ3NWItZjcxMS0z YzA1LTllNjAtMjJhZTIzNDRkZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjla9U6oJ1GuSa7RHTwGfaHK4yIYqIw3QNGDO6naJCP+/WNhwIfmkmr gBAoPNXIdjz+aQJqYSbpSG0ul5KXl+l59Gx8vO/eGPv9iO6OAfR4Ie1KeJJu0MfD Yv20ABun/LnDl+O5ipVOAULr5H6XfcZDtGqJmAKMpnS6x6rIXtcw95bl0WQfVqji KYU4IMGG4mje4q5rSkMFG+r52ZkN5csNYeUrfg6WRY13RwsImPyY+unTQjHyO5pc nXCo2OcumzU0Qh0XV1QBx2xPe5qZ8BGt3l2el2GwVuLQxm9Ik+X5o49DpYbuXLsR +49LzUEcnvaLoZPN9/XtAqkAsVHNX2s= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:25 2024 by rpki-client on console-ams.rpki-client.org