$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa File: 87eb7ad8-367d-3484-866c-a694fd0c58a3.roa (raw, json) Hash identifier: dmVY+Qa5dInr76OSuo/9Uoo2nuQJUXzCwSiTsaKfgcc= Subject key identifier: 49:30:1F:C7:54:D3:EA:7D:C4:B0:3F:78:E6:B9:09:D5:65:90:52:D3 Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Certificate serial: 010D0C9F432858478E1BC2BD42CAD868E56C7D40 Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 212524 IP address blocks: 23.154.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:c2:bd:42:ca:d8:68:e5:6c:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=ee12e38e-8d54-4d69-a5e1-d035f37b01a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:11:e8:52:ce:c8:f3:3b:9e:f3:74:3a:68: 1a:c4:bf:46:16:20:2a:fa:e4:a2:0a:fc:de:83:1b: b1:23:2c:3a:a9:91:e3:59:b4:68:6b:61:c2:03:5b: 1a:fe:13:12:41:33:38:a8:c4:43:f4:a0:a0:2f:a6: d6:81:f5:90:16:37:cd:ae:d1:da:1c:a5:0a:16:f1: 10:58:5c:58:4c:5a:5b:16:08:11:40:67:13:c4:4a: d3:a1:26:88:ff:ba:d3:de:ed:37:c5:2f:b0:16:e3: 8a:68:5f:b0:d7:12:81:8f:47:1f:4a:5c:bb:bd:72: a7:52:35:04:b5:55:28:9e:b5:02:f4:18:41:0a:81: 8e:e4:89:15:f7:dc:95:18:cf:c1:36:e5:e5:f2:81: ef:b1:bc:ef:76:45:3f:15:99:dc:50:56:75:86:2b: 5d:34:16:ed:41:f6:0f:48:f5:9d:ab:e3:66:f9:2c: 30:77:d6:9f:aa:ae:17:83:fe:8f:2b:04:a2:03:01: 99:85:d0:40:02:8f:2e:8b:b0:39:cc:40:f2:3b:ae: 03:ab:cf:e8:8b:5b:21:b2:ca:0e:b1:4d:28:47:42: 6f:4a:03:fb:cd:93:44:ef:be:0d:6d:cf:6a:b9:b4: ab:58:34:b5:da:04:cc:14:7a:c8:a6:58:7c:a3:68: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:1F:C7:54:D3:EA:7D:C4:B0:3F:78:E6:B9:09:D5:65:90:52:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl X509v3 Authority Key Identifier: keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer sbgp-ipAddrBlock: critical IPv4: 23.154.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5f:44:34:2c:d3:7f:47:58:e4:ee:8a:4f:c2:f9:40:67:cc: 8d:34:28:5f:95:3e:8a:11:3e:b3:96:be:e1:6d:f6:b6:93:e0: f7:9d:61:ab:8d:43:20:1e:71:ab:8b:ac:4d:36:1c:65:6a:b2: 4d:5a:3c:98:a4:a5:ea:ee:3e:9b:9e:5a:f2:cb:cf:8f:5e:73: 08:39:e3:34:35:03:d5:75:43:2f:7a:5d:2d:2a:e5:bf:46:e2: 5f:ab:48:7b:0b:cc:62:47:8e:e3:03:3e:79:aa:7d:0b:68:79: 74:61:db:6e:31:97:fe:46:0f:93:cf:f8:bb:1b:f9:82:dd:3a: e8:4a:44:6c:2c:c1:10:a2:a4:35:5e:45:00:f2:4a:1d:c1:b0: 62:22:da:94:54:88:48:da:69:d4:6d:54:9a:38:5c:29:ba:26: eb:12:12:cd:da:12:37:e5:a3:8a:07:8d:67:22:86:88:cd:0a: b2:32:e0:55:1c:79:d6:93:a6:50:91:0a:7e:d5:cb:cb:1f:8a: 7f:e9:e1:20:a4:8f:c1:35:53:e0:6e:58:b9:d2:91:c2:c5:5c: 17:eb:64:d2:d6:9a:e1:5f:3f:5a:7e:ae:32:aa:76:1e:77:ee: 1e:23:53:15:f5:f3:e8:75:41:da:b5:85:77:6e:a3:bf:7f:8d: a8:99:50:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8K9QsrYaOVsfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliNDliYjYtMjc4Mi00YTgyLTgyOWMtZDRiOTRlYjY0 NmYxMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZWUxMmUzOGUtOGQ1NC00ZDY5LWE1ZTEtZDAzNWYzN2IwMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhsR6FLOyPM7nvN0OmgaxL9GFiAq+uSiCvze gxuxIyw6qZHjWbRoa2HCA1sa/hMSQTM4qMRD9KCgL6bWgfWQFjfNrtHaHKUKFvEQ WFxYTFpbFggRQGcTxErToSaI/7rT3u03xS+wFuOKaF+w1xKBj0cfSly7vXKnUjUE tVUonrUC9BhBCoGO5IkV99yVGM/BNuXl8oHvsbzvdkU/FZncUFZ1hitdNBbtQfYP SPWdq+Nm+Swwd9afqq4Xg/6PKwSiAwGZhdBAAo8ui7A5zEDyO64Dq8/oi1shssoO sU0oR0JvSgP7zZNE774Nbc9qubSrWDS12gTMFHrIplh8o2iS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkwH8dU0+p9xLA/eOa5CdVlkFLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OWI0 OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5NGViNjQ2ZjEvODdlYjdhZDgtMzY3ZC0z NDg0LTg2NmMtYTY5NGZkMGM1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTliNDliYjYtMjc4Mi00YTgyLTgy OWMtZDRiOTRlYjY0NmYxLzk5YjQ5YmI2LTI3ODItNGE4Mi04MjljLWQ0Yjk0ZWI2 NDZmMS5jcmwwHwYDVR0jBBgwFoAU1mm0D12iTNZq/ycK6P7yzPnobCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OWI0OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5 NGViNjQ2ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBfRDQs039HWOTuik/C+UBnzI00KF+VPooRPrOWvuFt9raT4PedYauN QyAecauLrE02HGVqsk1aPJikperuPpueWvLLz49ecwg54zQ1A9V1Qy96XS0q5b9G 4l+rSHsLzGJHjuMDPnmqfQtoeXRh224xl/5GD5PP+Lsb+YLdOuhKRGwswRCipDVe RQDySh3BsGIi2pRUiEjaadRtVJo4XCm6JusSEs3aEjflo4oHjWcihojNCrIy4FUc edaTplCRCn7Vy8sfin/p4SCkj8E1U+BuWLnSkcLFXBfrZNLWmuFfP1p+rjKqdh53 7h4jUxX18+h1Qdq1hXduo79/jaiZUCE= -----END CERTIFICATE-----Generated at Fri Nov 22 14:30:35 2024 by rpki-client on console-ams.rpki-client.org