$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa File: d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa (raw, json) Hash identifier: 3Q0o0o0FVt4heTEhbVPouA9i5/69el1RpzFHEJDGAFk= Subject key identifier: C5:F1:D5:0E:4E:3B:2B:9F:9D:05:D3:CA:12:47:BD:F1:B0:F3:C0:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C8D9EBF837B174532C1E7540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:eb:f8:37:b1:74:53:2c:1e:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=56419af7-3e7f-4375-a904-e6673185e0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:f8:36:1a:6d:cf:f0:be:29:92:dc:27:a4: c7:52:ef:34:08:d4:a5:d2:4b:75:18:01:2a:70:c4: 0c:b1:da:df:c1:b5:32:4e:87:be:7a:f3:fb:da:fd: 80:e2:99:65:c1:6c:8c:f7:6d:a5:2b:8c:4f:a2:00: 2a:4b:2e:21:cd:58:b8:4c:b6:25:19:19:98:36:74: 74:41:e5:b0:b6:ae:64:8e:fd:6d:ee:3a:7c:1d:e6: 13:25:b0:77:91:42:4d:eb:b1:dd:22:5d:80:ed:9d: 6e:a6:22:7f:b2:a3:04:e4:47:9e:35:e8:93:bb:87: d9:51:a6:1b:9e:89:33:b0:15:ab:da:8e:98:a6:8a: fa:3f:4c:6a:40:e2:7e:e1:64:ca:14:e8:4f:69:67: 87:05:1c:a8:cc:f7:82:27:7c:36:04:ce:2a:01:0b: 7a:35:17:6d:63:a1:45:8a:e4:58:d6:e5:a9:b4:00: 1c:fb:69:de:d9:70:73:3f:fb:15:d4:a0:13:01:48: cf:af:40:66:06:7b:c7:27:c7:ba:06:54:34:7e:32: 9e:03:03:f9:15:5b:7e:aa:98:c5:d4:2a:bb:56:f0: 62:9e:9e:f7:7d:b0:ec:80:da:25:38:5e:ec:ea:af: ce:86:36:ca:35:c3:1a:7d:c0:2c:03:c1:32:f7:77: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:D5:0E:4E:3B:2B:9F:9D:05:D3:CA:12:47:BD:F1:B0:F3:C0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c9:9c:61:31:07:fe:05:cb:74:35:a6:ad:95:76:24:e7:f7: 1f:0a:67:2b:4c:a7:08:af:4d:48:54:ba:32:d4:51:d6:52:21: 0b:b1:84:8c:59:8a:14:8f:38:59:32:ec:35:52:ca:50:e4:4e: 4c:64:12:09:03:2e:99:7f:ef:7a:79:7b:74:d1:26:6f:28:62: 35:dd:b1:b1:83:a7:4b:d7:50:d5:c1:4b:9e:0e:16:09:63:6d: 95:78:00:13:68:35:e5:48:d2:94:d4:e1:9c:21:1a:7d:33:62: 57:90:bf:36:8f:a9:24:81:ec:eb:0b:d3:f9:75:4b:db:22:c8: 35:ee:a8:73:f5:6a:1c:ca:28:b2:cd:e5:c6:34:94:ad:d7:eb: c0:3d:54:9a:73:db:13:5a:cd:1e:0a:b1:77:4a:2c:60:85:37: 32:b8:bd:30:9b:64:25:71:55:72:61:d7:2e:44:5e:06:ef:c5: 92:16:8c:75:a5:db:99:ab:03:a2:6f:8d:5a:ef:01:e8:a1:21: 36:8a:a9:93:a3:fb:0d:99:b4:16:40:ec:af:6f:3e:76:88:d5: f4:70:06:7f:82:02:47:f2:ce:1d:38:29:90:f6:ec:b7:dc:67: e1:97:f5:9c:92:e5:4c:46:50:43:a4:cf:5b:0b:2c:d6:1a:35: 0d:fb:0d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2ev4N7F0UywedUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NTY0MTlhZjctM2U3Zi00Mzc1LWE5MDQtZTY2NzMxODVlMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHf4Nhptz/C+KZLcJ6THUu80CNSl0kt1GAEq cMQMsdrfwbUyToe+evP72v2A4pllwWyM922lK4xPogAqSy4hzVi4TLYlGRmYNnR0 QeWwtq5kjv1t7jp8HeYTJbB3kUJN67HdIl2A7Z1upiJ/sqME5EeeNeiTu4fZUaYb nokzsBWr2o6Ypor6P0xqQOJ+4WTKFOhPaWeHBRyozPeCJ3w2BM4qAQt6NRdtY6FF iuRY1uWptAAc+2ne2XBzP/sV1KATAUjPr0BmBnvHJ8e6BlQ0fjKeAwP5FVt+qpjF 1Cq7VvBinp73fbDsgNolOF7s6q/OhjbKNcMafcAsA8Ey93fRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXx1Q5OOyufnQXTyhJHvfGw88BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVkY2QyOGUtMzVjMy0z YWY2LWI5YWEtZTQ2NjkyYWMzNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjJnGExB/4Fy3Q1pq2VdiTn9x8KZytMpwivTUhUujLUUdZSIQuxhIxZ ihSPOFky7DVSylDkTkxkEgkDLpl/73p5e3TRJm8oYjXdsbGDp0vXUNXBS54OFglj bZV4ABNoNeVI0pTU4ZwhGn0zYleQvzaPqSSB7OsL0/l1S9siyDXuqHP1ahzKKLLN 5cY0lK3X68A9VJpz2xNazR4KsXdKLGCFNzK4vTCbZCVxVXJh1y5EXgbvxZIWjHWl 25mrA6JvjVrvAeihITaKqZOj+w2ZtBZA7K9vPnaI1fRwBn+CAkfyzh04KZD27Lfc Z+GX9ZyS5UxGUEOkz1sLLNYaNQ37DXs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:30 2024 by rpki-client on console-ams.rpki-client.org