$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b01bda05-098b-3b4f-8539-7ed7ce8824e2.roa File: b01bda05-098b-3b4f-8539-7ed7ce8824e2.roa (raw, json) Hash identifier: qjhvvlEVJSPgmhE9M3QRtUGe7EJKfEvQg0S7lqpT4rQ= Subject key identifier: AA:ED:06:08:5B:5E:5B:BD:4A:9E:D2:09:F8:81:BF:23:FC:C6:9D:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584790B7A9DEFE909880C75D0080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b01bda05-098b-3b4f-8539-7ed7ce8824e2.roa Signing time: Wed 16 Oct 2024 23:26:25 +0000 ROA not before: Wed 16 Oct 2024 23:26:25 +0000 ROA not after: Wed 15 Jan 2025 00:26:25 +0000 asID: 8881 IP address blocks: 23.27.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:90:b7:a9:de:fe:90:98:80:c7:5d:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 16 23:26:25 2024 GMT Not After : Jan 15 00:26:25 2025 GMT Subject: CN=5164cf99-72c7-4825-a86c-1fd199f95d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:2c:2b:59:47:39:90:5d:5e:c1:23:f3:ca: e8:2f:e2:6a:29:ce:5f:c6:9d:0f:02:3a:b1:e6:5a: 57:7e:5f:ee:d9:55:af:2b:2c:83:b9:3c:2b:4c:51: 81:d9:2b:25:8d:36:37:38:63:62:e5:c4:00:e7:27: 61:ea:59:e5:47:90:45:bc:a5:93:15:d9:de:5a:a9: 70:32:92:0e:4c:1a:8d:cd:5c:80:3a:23:3b:e1:fa: 22:46:5d:d5:72:f3:5d:82:b3:ea:ea:a3:69:cf:1f: 9b:c9:5d:94:d8:dd:93:6f:c2:e8:08:1b:94:d2:c9: b2:78:95:a1:6b:11:94:c8:60:04:7a:d2:4f:a1:18: 12:3e:cb:54:f8:c9:21:ca:25:2f:0a:cf:8f:f3:70: d6:f3:ad:30:54:98:f6:f4:76:99:a7:35:d0:14:fc: 10:03:eb:fb:7f:75:50:c3:26:b9:e2:6b:97:ab:f2: 1a:42:71:04:d6:a5:11:86:af:2c:c2:14:6c:16:19: 5d:78:8e:aa:c0:10:52:16:e9:77:f2:6e:9d:31:d5: 5e:65:d2:0b:ac:fc:12:6e:17:f3:5e:9c:e0:72:29: 28:ee:9f:eb:8b:19:6d:91:3b:f4:27:2a:df:d7:3c: 2e:6d:dd:1a:79:77:9b:c7:20:6d:3c:17:45:28:70: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:06:08:5B:5E:5B:BD:4A:9E:D2:09:F8:81:BF:23:FC:C6:9D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b01bda05-098b-3b4f-8539-7ed7ce8824e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3c:87:cc:14:5d:98:72:c6:5f:15:f7:08:a0:54:4e:5b:99: 85:ae:b0:14:af:99:13:7c:24:2b:bb:ec:17:83:44:61:b5:22: 57:fd:95:11:88:ac:90:8f:eb:21:b6:25:93:2a:fb:3d:4b:08: 6e:5f:ff:6a:34:e2:0f:b0:9d:57:de:46:87:ca:f3:bc:f4:fa: 08:7c:a5:ac:8b:d6:dd:df:82:c7:5e:5b:7d:32:d4:84:6e:74: 4c:f8:f4:20:7f:a6:7c:a2:db:ca:f4:13:0c:59:dc:e7:70:73: 6a:af:bd:96:d5:f8:37:8e:d6:89:59:27:45:d5:73:9a:fc:aa: a7:eb:d4:e6:ee:8b:7e:77:b9:d6:95:3d:71:ba:8a:17:99:21: 86:7b:96:19:f1:44:54:fc:4e:6d:96:23:e1:d8:9d:75:00:7e: 26:ae:8f:4f:74:d8:ef:01:da:b2:2a:0e:e8:74:ae:79:b9:c7: a5:01:2d:4d:a3:c4:8f:9f:e8:00:fe:7a:91:9b:9b:90:b1:1d: bf:eb:ff:c4:3e:20:6a:b3:1a:26:d5:70:64:91:85:b6:73:54: 2f:f5:c1:7c:67:b3:5d:14:f7:2f:7b:c1:7b:80:2a:f1:8c:6b: 07:ee:7f:64:92:9e:b1:d2:dd:ea:51:e6:f0:b3:33:a3:dd:61: cf:9a:09:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeQt6ne/pCYgMddAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAxNjIzMjYyNVoXDTI1MDExNTAwMjYyNVowLzEtMCsGA1UEAxMk NTE2NGNmOTktNzJjNy00ODI1LWE4NmMtMWZkMTk5Zjk1ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD4sK1lHOZBdXsEj88roL+JqKc5fxp0PAjqx 5lpXfl/u2VWvKyyDuTwrTFGB2SsljTY3OGNi5cQA5ydh6lnlR5BFvKWTFdneWqlw MpIOTBqNzVyAOiM74foiRl3VcvNdgrPq6qNpzx+byV2U2N2Tb8LoCBuU0smyeJWh axGUyGAEetJPoRgSPstU+MkhyiUvCs+P83DW860wVJj29HaZpzXQFPwQA+v7f3VQ wya54muXq/IaQnEE1qURhq8swhRsFhldeI6qwBBSFul38m6dMdVeZdILrPwSbhfz Xpzgciko7p/rixltkTv0Jyrf1zwubd0aeXebxyBtPBdFKHAIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrtBghbXlu9Sp7SCfiBvyP8xp3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjAxYmRhMDUtMDk4Yi0z YjRmLTg1MzktN2VkN2NlODgyNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ8h8wUXZhyxl8V9wigVE5bmYWusBSvmRN8JCu77BeDRGG1Ilf9lRGI rJCP6yG2JZMq+z1LCG5f/2o04g+wnVfeRofK87z0+gh8payL1t3fgsdeW30y1IRu dEz49CB/pnyi28r0EwxZ3Odwc2qvvZbV+DeO1olZJ0XVc5r8qqfr1Obui353udaV PXG6iheZIYZ7lhnxRFT8Tm2WI+HYnXUAfiauj0902O8B2rIqDuh0rnm5x6UBLU2j xI+f6AD+epGbm5CxHb/r/8Q+IGqzGibVcGSRhbZzVC/1wXxns10U9y97wXuAKvGM awfuf2SSnrHS3epR5vCzM6PdYc+aCTk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:05 2024 by rpki-client on console-ams.rpki-client.org