$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaad21b3-b957-3f93-98d5-533d9c355453.roa File: eaad21b3-b957-3f93-98d5-533d9c355453.roa (raw, json) Hash identifier: 4Z7H6vkfIiD/vTYvKXBTMTaDjeXnifKQH4Ncbx3Tlu0= Subject key identifier: B2:93:F7:2D:2C:3E:48:3A:00:88:5E:9D:54:25:8F:37:06:97:55:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64BE44D90817C801CFF2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaad21b3-b957-3f93-98d5-533d9c355453.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 16625 IP address blocks: 23.210.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:be:44:d9:08:17:c8:01:cf:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=a0de11a4-9666-4d8d-bdf5-614a769b62b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:32:1c:39:28:6b:24:e2:6c:db:20:18:ab: 5d:cd:c0:4a:c9:a0:63:8a:7c:76:e4:d1:57:84:c9: 59:61:48:7e:06:42:34:83:47:dc:a9:f6:e3:b8:5e: ae:6f:b0:e2:3d:d4:7b:ea:77:eb:08:e8:db:22:4b: f5:18:bc:92:b9:a1:22:74:ce:fe:87:8a:54:1d:19: de:2e:10:68:07:45:eb:99:25:03:b2:8d:ea:a3:8e: cc:db:54:a2:93:37:f9:ce:40:73:95:61:fb:cb:eb: d7:ad:38:cd:4f:25:11:d3:81:e9:4f:29:58:68:87: ff:07:bd:77:9a:0c:a1:49:c1:93:5a:db:14:29:1f: 32:05:61:28:d4:1a:5c:7b:28:65:e0:a3:29:9e:66: af:40:87:1d:6a:48:74:f5:31:32:8d:79:11:fb:ab: a4:a1:70:8b:92:0b:fd:28:b6:db:12:74:8c:9b:7d: 0a:90:a8:35:14:e4:ea:8e:08:4a:bd:55:4e:8a:76: b7:1c:64:05:9b:22:c3:5f:83:b0:05:4d:c9:7a:7d: a1:7a:84:a1:fb:59:b9:be:38:8b:ed:89:41:f8:5e: 8b:26:f3:60:b4:a9:26:89:26:5a:67:a3:12:ba:bf: 2b:8d:f0:ac:a6:8a:9e:a8:5f:18:24:e4:47:e1:71: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:F7:2D:2C:3E:48:3A:00:88:5E:9D:54:25:8F:37:06:97:55:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaad21b3-b957-3f93-98d5-533d9c355453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:23:12:b5:6e:4b:f7:9d:6c:1f:f9:09:99:5a:20:cb:06: f8:ce:73:96:ac:d9:aa:26:b5:24:9d:bd:a4:60:f7:86:f4:00: 74:69:84:d0:15:c8:52:c9:83:ae:95:5c:cb:6a:4d:25:ac:31: af:69:4b:32:7e:10:67:eb:53:f6:ad:e3:f7:b3:8f:56:80:58: 3a:04:d9:2d:b4:0c:7b:56:64:14:ce:bf:8a:89:79:c7:a7:95: 74:73:69:51:ec:68:69:10:76:bf:4f:fe:cc:3d:0b:7f:f8:b9: 68:5f:47:68:3a:03:d1:48:e0:f8:32:84:bc:5e:9c:84:10:90: e3:3f:66:1d:17:fe:da:9f:97:79:2e:37:79:27:1e:e9:97:91: 93:24:8e:4d:d8:af:2f:60:f4:50:9a:bb:f2:e8:f5:e9:14:d3: c3:10:1c:ef:1c:02:b1:8e:02:37:58:cf:10:4d:c0:5d:1c:2e: 86:e7:18:18:5f:f4:86:49:99:7b:9c:80:7f:b5:b0:0c:6d:62: 0d:ba:16:50:44:cc:51:28:90:30:b1:6b:5e:1a:a4:76:b7:d6: 3c:c8:29:b6:0a:a1:3d:c4:3a:25:a1:31:ae:8c:3e:de:35:5e: 42:8a:42:39:ca:a6:84:0b:9a:2c:0f:5f:7d:49:51:38:29:bb: 82:66:00:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZL5E2QgXyAHP8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YTBkZTExYTQtOTY2Ni00ZDhkLWJkZjUtNjE0YTc2OWI2MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMIyHDkoayTibNsgGKtdzcBKyaBjinx25NFX hMlZYUh+BkI0g0fcqfbjuF6ub7DiPdR76nfrCOjbIkv1GLySuaEidM7+h4pUHRne LhBoB0XrmSUDso3qo47M21Sikzf5zkBzlWH7y+vXrTjNTyUR04HpTylYaIf/B713 mgyhScGTWtsUKR8yBWEo1Bpceyhl4KMpnmavQIcdakh09TEyjXkR+6ukoXCLkgv9 KLbbEnSMm30KkKg1FOTqjghKvVVOina3HGQFmyLDX4OwBU3Jen2heoSh+1m5vjiL 7YlB+F6LJvNgtKkmiSZaZ6MSur8rjfCspoqeqF8YJORH4XFPOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKT9y0sPkg6AIhenVQljzcGl1UMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFhZDIxYjMtYjk1Ny0z ZjkzLTk4ZDUtNTMzZDljMzU1NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9JUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpjIxK1bkv3nWwf+QmZWiDLBvjOc5as2aomtSSdvaRg94b0AHRphNAV yFLJg66VXMtqTSWsMa9pSzJ+EGfrU/at4/ezj1aAWDoE2S20DHtWZBTOv4qJecen lXRzaVHsaGkQdr9P/sw9C3/4uWhfR2g6A9FI4PgyhLxenIQQkOM/Zh0X/tqfl3ku N3knHumXkZMkjk3Yry9g9FCau/Lo9ekU08MQHO8cArGOAjdYzxBNwF0cLobnGBhf 9IZJmXucgH+1sAxtYg26FlBEzFEokDCxa14apHa31jzIKbYKoT3EOiWhMa6MPt41 XkKKQjnKpoQLmiwPX31JUTgpu4JmAHQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:38 2024 by rpki-client on console-ams.rpki-client.org