$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac824af-a5b8-3d43-893e-94774181d959.roa File: 0ac824af-a5b8-3d43-893e-94774181d959.roa (raw, json) Hash identifier: c/VJsp1TL9JQi1ENrGjFLGE/HqICaOUAGSzRpbMXFEE= Subject key identifier: 71:D1:C2:2C:7E:8F:77:E8:FA:EE:FB:69:37:69:36:20:FA:90:9C:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36CBEBC2472B0ABB2EE380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac824af-a5b8-3d43-893e-94774181d959.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.55.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:cb:eb:c2:47:2b:0a:bb:2e:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=f61574ee-6108-43f2-8b87-5aede6477cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:64:65:36:d2:37:97:c0:f1:eb:e4:27:c3:fe: ec:7c:93:71:b4:62:3f:7d:17:6c:11:79:63:79:ff: b4:21:c8:84:0f:f8:67:5d:be:e0:d7:c4:21:01:3e: 57:09:63:de:f5:9c:1d:b6:32:a1:b4:9e:05:04:6e: 8c:9e:66:68:41:b7:f4:25:53:ae:1b:37:e0:c9:a0: 12:46:c6:c9:53:14:49:29:67:69:a6:be:f9:09:32: ec:91:a0:cf:84:8c:9a:15:05:75:4b:79:aa:0d:a5: b1:82:bc:70:85:2b:c2:7e:a5:ed:40:bf:82:ea:f7: 46:32:b8:d2:04:a1:84:3d:94:bd:f9:f8:94:72:ce: 54:22:4f:7e:8b:8a:f8:f8:08:14:ad:49:09:08:0f: 4e:59:8e:cf:43:50:8c:02:58:96:49:1d:14:e6:5a: 5e:12:db:d8:fc:2a:17:57:11:50:98:75:ef:25:41: cb:42:4d:8f:d9:52:fb:0a:ac:4e:21:d7:c4:78:71: 36:29:e1:fc:a4:24:0c:7c:24:3d:1f:67:39:6a:35: 4f:d7:32:e8:e7:0b:fe:62:40:13:90:79:0b:b9:6f: 90:fb:74:f2:db:a7:42:20:49:0a:eb:fa:e2:c6:71: 70:70:5d:fb:58:07:ef:92:36:96:f3:c8:37:55:0c: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:C2:2C:7E:8F:77:E8:FA:EE:FB:69:37:69:36:20:FA:90:9C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac824af-a5b8-3d43-893e-94774181d959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:72:3e:70:60:ad:00:eb:8d:50:2f:a7:ba:95:10:03:06:82: 81:7d:12:62:0c:aa:0d:b0:58:33:b9:c4:6a:ce:43:68:ce:f0: ff:46:80:3e:c7:a5:22:2f:34:50:55:d8:08:f8:d2:2a:1c:59: 5f:af:24:57:2c:b5:c9:10:83:01:65:d7:d5:91:e4:aa:45:84: 35:2e:7c:78:c5:6f:e2:cb:ad:84:3e:08:c7:17:b6:9f:1a:4c: b2:8b:07:5c:cf:ca:3a:8e:f6:7e:2c:32:c3:3b:1b:19:7e:5f: c3:13:4e:99:03:18:0c:8b:77:3b:75:91:a0:0c:f3:8d:7d:58: 59:bb:15:2e:bd:6c:9f:7b:da:63:34:8f:10:1c:b7:24:23:ed: 18:ec:9e:fb:f2:0c:78:14:e6:9e:7c:8f:c9:05:ba:fa:ad:b0: 30:d0:66:d6:e7:28:a7:3f:80:5d:b7:7d:68:be:b6:16:83:19: 63:ab:69:cc:51:7f:b0:23:dc:d0:69:e6:1f:ca:b9:2d:cb:9a: bd:99:c2:c1:96:3e:8b:c6:c7:c2:68:9a:b2:c7:ff:65:a7:53: 74:f4:41:d5:b5:b9:d9:32:e1:d3:88:e0:8e:17:be:ec:43:35: d0:f5:ec:c5:e4:e5:11:3c:2f:0a:6e:97:2e:68:1a:a6:c4:b0: 5d:24:9c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNsvrwkcrCrsu44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjYxNTc0ZWUtNjEwOC00M2YyLThiODctNWFlZGU2NDc3Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGRlNtI3l8Dx6+Qnw/7sfJNxtGI/fRdsEXlj ef+0IciED/hnXb7g18QhAT5XCWPe9ZwdtjKhtJ4FBG6MnmZoQbf0JVOuGzfgyaAS RsbJUxRJKWdppr75CTLskaDPhIyaFQV1S3mqDaWxgrxwhSvCfqXtQL+C6vdGMrjS BKGEPZS9+fiUcs5UIk9+i4r4+AgUrUkJCA9OWY7PQ1CMAliWSR0U5lpeEtvY/CoX VxFQmHXvJUHLQk2P2VL7CqxOIdfEeHE2KeH8pCQMfCQ9H2c5ajVP1zLo5wv+YkAT kHkLuW+Q+3Ty26dCIEkK6/rixnFwcF37WAfvkjaW88g3VQzrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHRwix+j3fo+u77aTdpNiD6kJxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFjODI0YWYtYTViOC0z ZDQzLTg5M2UtOTQ3NzQxODFkOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtyPnBgrQDrjVAvp7qVEAMGgoF9EmIMqg2wWDO5xGrOQ2jO8P9GgD7H pSIvNFBV2Aj40iocWV+vJFcstckQgwFl19WR5KpFhDUufHjFb+LLrYQ+CMcXtp8a TLKLB1zPyjqO9n4sMsM7Gxl+X8MTTpkDGAyLdzt1kaAM8419WFm7FS69bJ972mM0 jxActyQj7RjsnvvyDHgU5p58j8kFuvqtsDDQZtbnKKc/gF23fWi+thaDGWOracxR f7Aj3NBp5h/KuS3Lmr2ZwsGWPovGx8JomrLH/2WnU3T0QdW1udky4dOI4I4XvuxD NdD17MXk5RE8Lwpuly5oGqbEsF0knEI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:56 2024 by rpki-client on console-ams.rpki-client.org