$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff583cf3-18ff-3ff7-acdf-fcf5f40fe270.roa File: ff583cf3-18ff-3ff7-acdf-fcf5f40fe270.roa (raw, json) Hash identifier: Kn+FiLXShU//0G4NxLnbfSlFnipbB5L4JX3Rxn91IXI= Subject key identifier: D3:37:EC:54:59:85:81:57:B0:A5:9A:F6:97:0D:64:3D:55:0F:10:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B1017887C6B7916961066380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff583cf3-18ff-3ff7-acdf-fcf5f40fe270.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.197.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:78:87:c6:b7:91:69:61:06:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=5c89d30c-d0a8-40f0-9c40-404722a02988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:da:6b:10:f0:63:06:16:81:d4:bf:7f:0b: 2b:96:a0:7d:74:0e:e9:c1:ba:25:cb:71:79:e4:c9: 33:99:dc:24:dc:68:a6:79:63:8f:69:62:e3:7c:50: 77:fa:c6:90:e3:65:2a:76:fc:39:bc:f6:f2:24:89: 32:32:8e:b6:e4:c5:f1:a6:77:1f:54:ab:0e:97:9b: 86:09:dd:07:84:1e:4c:3e:51:ed:69:9d:b4:02:42: d7:ef:4d:e3:93:c2:a1:ad:b2:a0:7a:87:ba:d6:54: eb:bb:dc:74:36:27:52:eb:86:78:d1:80:7e:dd:0d: 58:99:da:e8:c3:5b:d5:29:54:95:b5:7e:be:b1:a8: 39:0a:9a:a0:ae:24:2f:b1:d7:d6:62:3b:0e:96:20: dd:aa:06:d6:2f:fb:1c:95:29:14:0c:49:64:df:bb: 8e:3e:d8:2f:35:b4:c0:ab:de:82:9c:dc:76:34:72: a3:8b:7d:d5:b0:dc:fa:06:dd:f5:41:57:30:a9:45: 2f:dd:ea:07:3a:be:9e:7b:ef:47:d9:d3:ba:5a:99: f8:f5:cc:81:44:55:9d:49:8a:a5:f7:2f:84:c1:21: 2f:29:a6:e9:c5:c4:15:16:3d:29:9d:bc:7c:5c:ef: 53:14:6e:32:54:42:13:e9:35:49:51:51:59:05:5b: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:EC:54:59:85:81:57:B0:A5:9A:F6:97:0D:64:3D:55:0F:10:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff583cf3-18ff-3ff7-acdf-fcf5f40fe270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4f:b1:0b:94:97:09:56:5a:48:d8:8c:59:06:75:64:64:ae: 19:a9:75:a5:8a:14:d0:30:0d:03:5b:9c:62:67:26:c0:ea:32: 02:0d:91:5a:f1:1b:5f:ab:f8:2c:af:fa:5f:c3:13:60:ae:34: f1:a8:45:e8:fe:a6:7d:62:68:f3:ce:41:99:67:ef:32:96:fc: 25:82:f9:7d:b9:6f:aa:15:3d:e3:2c:7f:a3:2f:6f:7f:0c:66: ff:4d:fa:07:e9:05:eb:35:56:e9:f8:35:3b:a5:2c:97:81:ba: 64:dc:da:87:06:85:49:97:75:f8:27:6c:56:f2:5f:32:18:88: d7:10:2a:ae:c7:42:42:7b:ea:b2:43:66:de:4c:f7:10:a5:51: 38:87:a8:17:de:68:23:0b:3f:28:b1:53:81:39:c5:fa:8c:04: 63:f4:cc:01:d2:fe:14:4b:ea:03:8d:b9:94:13:f1:51:0e:86: 04:90:72:fe:fa:49:cb:94:35:b0:e6:a4:3a:c1:e8:c1:6d:c4: 1c:d5:b9:f9:80:24:2f:33:d2:0b:4b:5c:9b:65:cb:75:c0:63: 03:e7:68:b8:ba:2f:4f:ec:ad:1b:bd:d6:60:f7:46:75:fd:f8: 38:42:1a:9e:fd:d1:70:a9:c3:10:b9:99:67:51:9f:0a:b3:a4: d0:d3:9b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAXiHxreRaWEGY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NWM4OWQzMGMtZDBhOC00MGYwLTljNDAtNDA0NzIyYTAyOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJHaaxDwYwYWgdS/fwsrlqB9dA7pwboly3F5 5Mkzmdwk3GimeWOPaWLjfFB3+saQ42Uqdvw5vPbyJIkyMo625MXxpncfVKsOl5uG Cd0HhB5MPlHtaZ20AkLX703jk8KhrbKgeoe61lTru9x0NidS64Z40YB+3Q1Ymdro w1vVKVSVtX6+sag5CpqgriQvsdfWYjsOliDdqgbWL/sclSkUDElk37uOPtgvNbTA q96CnNx2NHKji33VsNz6Bt31QVcwqUUv3eoHOr6ee+9H2dO6Wpn49cyBRFWdSYql 9y+EwSEvKabpxcQVFj0pnbx8XO9TFG4yVEIT6TVJUVFZBVs9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM37FRZhYFXsKWa9pcNZD1VDxCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY1ODNjZjMtMThmZi0z ZmY3LWFjZGYtZmNmNWY0MGZlMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxPsQuUlwlWWkjYjFkGdWRkrhmpdaWKFNAwDQNbnGJnJsDqMgINkVrx G1+r+Cyv+l/DE2CuNPGoRej+pn1iaPPOQZln7zKW/CWC+X25b6oVPeMsf6Mvb38M Zv9N+gfpBes1Vun4NTulLJeBumTc2ocGhUmXdfgnbFbyXzIYiNcQKq7HQkJ76rJD Zt5M9xClUTiHqBfeaCMLPyixU4E5xfqMBGP0zAHS/hRL6gONuZQT8VEOhgSQcv76 ScuUNbDmpDrB6MFtxBzVufmAJC8z0gtLXJtly3XAYwPnaLi6L0/srRu91mD3RnX9 +DhCGp790XCpwxC5mWdRnwqzpNDTm10= -----END CERTIFICATE-----Generated at Mon Nov 25 16:33:12 2024 by rpki-client on console-ams.rpki-client.org