$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d507803d-668d-3c51-9664-8e03a294cf86.roa File: d507803d-668d-3c51-9664-8e03a294cf86.roa (raw, json) Hash identifier: C+3vqrB63wFzp1kHocBP8jPzp2ACq5W1ZST2bofYKzQ= Subject key identifier: A1:71:FA:7A:41:13:DA:4C:1C:5D:BD:29:B6:58:88:93:E9:43:FD:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847F2BA3BDB2DC06A9C748E24E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d507803d-668d-3c51-9664-8e03a294cf86.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 16625 IP address blocks: 23.49.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:3b:db:2d:c0:6a:9c:74:8e:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=4233758c-e40f-4c17-a140-b00eab8b7f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:d5:c1:a9:c6:df:ec:25:0a:85:6a:77:a6: 45:2f:ba:3d:e2:3d:d0:1b:73:38:e9:65:6a:ed:2a: 9a:4b:64:78:58:1f:88:e3:ac:af:fb:d9:ea:0d:9e: 45:1e:f7:10:0d:7a:47:d2:54:07:e1:ca:dd:75:c9: 99:77:07:a6:a1:b2:f2:9b:c9:cc:ea:c1:38:5b:e4: 43:64:9d:50:1d:b8:2c:fc:85:ca:ab:c0:71:37:b3: 5f:46:9a:58:d6:f8:0d:e7:cb:2c:f3:76:cc:49:77: bf:b3:79:d0:5f:43:a0:89:a0:dc:59:7b:65:14:89: 6d:e2:11:5d:53:5d:4e:92:d5:fa:e0:72:2d:72:6e: e0:b6:d5:34:7e:db:60:be:8e:7c:e7:28:91:bb:0c: 43:15:85:db:db:1f:5b:81:e3:96:88:43:95:83:e2: 4b:82:8d:cd:26:4a:5a:6c:23:77:f7:37:c6:82:78: a4:d0:b0:16:be:21:09:51:01:67:a8:41:08:30:04: 8a:38:42:6a:50:c9:8d:8e:63:bd:5b:83:73:a2:e1: ca:25:15:a2:2a:cb:9a:3a:70:d8:b1:7a:7d:11:15: a8:30:fa:20:f5:6c:d8:3b:b9:35:26:92:48:43:0d: 5e:23:4c:6d:bb:08:b5:53:6c:08:bd:d2:3a:0f:1c: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:FA:7A:41:13:DA:4C:1C:5D:BD:29:B6:58:88:93:E9:43:FD:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d507803d-668d-3c51-9664-8e03a294cf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4b:58:76:83:64:aa:1d:d4:d7:24:c9:a5:6c:c3:a5:25:c3: b0:9d:d6:b0:10:ba:1a:c3:3c:d4:c4:36:27:12:fa:32:ff:c7: d0:73:6c:f7:ed:0f:f8:63:99:28:0f:7e:54:15:c2:1a:36:b3: fd:08:68:b8:9f:78:b8:fc:8d:bc:e5:25:7a:e1:32:a3:76:28: 5c:cb:d8:c8:8f:aa:50:06:f6:0b:20:99:1a:99:78:65:ba:2e: 21:15:34:86:cf:71:98:b6:05:5c:d8:7a:f1:81:9c:ff:39:71: 29:65:08:c2:7e:b5:dd:27:38:c5:b9:57:b0:15:79:26:11:88: 23:de:c6:1c:40:42:8b:08:0d:4b:42:2b:63:e0:63:60:26:10: 07:eb:8f:2e:24:e9:ec:43:d1:1e:db:da:3f:43:44:b2:ad:92: 67:54:bd:d5:0d:83:f3:56:a6:8c:e4:f3:0e:71:58:1b:4f:84: 64:f2:9e:07:a7:41:7e:79:07:d9:e0:34:9f:07:4e:38:2e:80: 94:63:51:c5:db:06:a4:3c:81:f7:8c:27:53:ed:42:00:7d:4e: 10:1d:7f:f2:3e:8e:d7:77:b4:2b:a8:de:e4:2f:ee:4c:03:d2: b7:2e:9c:4c:24:9d:50:bc:7e:ef:37:c5:06:bd:ec:74:d9:06: 49:36:36:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujvbLcBqnHSOJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk NDIzMzc1OGMtZTQwZi00YzE3LWExNDAtYjAwZWFiOGI3ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VXVwanG3+wlCoVqd6ZFL7o94j3QG3M46WVq 7SqaS2R4WB+I46yv+9nqDZ5FHvcQDXpH0lQH4crddcmZdwemobLym8nM6sE4W+RD ZJ1QHbgs/IXKq8BxN7NfRppY1vgN58ss83bMSXe/s3nQX0OgiaDcWXtlFIlt4hFd U11OktX64HItcm7gttU0fttgvo585yiRuwxDFYXb2x9bgeOWiEOVg+JLgo3NJkpa bCN39zfGgnik0LAWviEJUQFnqEEIMASKOEJqUMmNjmO9W4NzouHKJRWiKsuaOnDY sXp9ERWoMPog9WzYO7k1JpJIQw1eI0xtuwi1U2wIvdI6DxwbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFx+npBE9pMHF29KbZYiJPpQ/16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUwNzgwM2QtNjY4ZC0z YzUxLTk2NjQtOGUwM2EyOTRjZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANLWHaDZKod1NckyaVsw6Ulw7Cd1rAQuhrDPNTENicS+jL/x9BzbPft D/hjmSgPflQVwho2s/0IaLifeLj8jbzlJXrhMqN2KFzL2MiPqlAG9gsgmRqZeGW6 LiEVNIbPcZi2BVzYevGBnP85cSllCMJ+td0nOMW5V7AVeSYRiCPexhxAQosIDUtC K2PgY2AmEAfrjy4k6exD0R7b2j9DRLKtkmdUvdUNg/NWpozk8w5xWBtPhGTyngen QX55B9ngNJ8HTjgugJRjUcXbBqQ8gfeMJ1PtQgB9ThAdf/I+jtd3tCuo3uQv7kwD 0rcunEwknVC8fu83xQa97HTZBkk2NjI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:57 2024 by rpki-client on console-ams.rpki-client.org