$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1721874a-e69b-33a3-9dc3-2f99074a1ac2.roa File: 1721874a-e69b-33a3-9dc3-2f99074a1ac2.roa (raw, json) Hash identifier: //MBvS3XntyamQaSNL3hAw0uQlL+4hWzM1OJKvzVsHw= Subject key identifier: 2A:F6:9F:75:92:8D:89:62:79:F5:19:6D:F5:A3:0B:D9:DE:BA:37:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847A5D6B67228A68CCF5D867800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1721874a-e69b-33a3-9dc3-2f99074a1ac2.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.52.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b6:72:28:a6:8c:cf:5d:86:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=56676e3f-c3ab-4f04-9c87-6c1b7b1f5ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:f8:f2:3c:03:4f:cb:cc:48:b4:f1:59:04: ea:2e:95:1c:34:ef:58:57:86:a3:f5:bc:c6:f0:1c: 54:75:e1:df:68:29:b4:7e:cb:02:25:03:3f:60:06: 36:a2:24:44:29:90:99:5d:e2:b5:5c:12:6a:c4:d5: 29:96:61:3d:35:c8:95:68:bd:d7:3e:bb:20:28:02: 2c:ac:b6:70:2c:10:d7:ce:37:cb:f7:12:e0:fd:b7: 06:f5:71:6a:6f:cd:90:a5:09:65:47:a1:b9:04:2f: 3c:95:c8:2c:2b:2f:d7:27:f5:8e:43:e2:25:8a:63: e6:36:f0:2a:e4:a6:82:a9:b5:79:af:20:f5:a7:6d: fb:77:4d:1b:44:ed:08:ed:31:7f:89:b6:c1:21:89: da:48:43:01:f7:27:95:64:dc:6e:ec:3c:d4:7f:9c: 89:44:f7:e6:08:a5:8b:d4:11:a9:3c:b4:ef:da:43: a1:7d:5a:6a:4c:8f:0a:09:84:8c:69:d1:a3:19:26: 15:f3:5f:28:24:8c:cf:07:3a:e1:fc:e6:06:9b:b7: 61:b1:3c:63:80:08:23:ec:7d:c6:e5:17:4b:aa:cd: 1a:e9:56:af:63:ba:a4:b9:22:49:94:c7:78:90:a7: f9:3e:c2:9a:e2:28:3b:a4:1f:5e:16:ee:0a:a8:03: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:9F:75:92:8D:89:62:79:F5:19:6D:F5:A3:0B:D9:DE:BA:37:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1721874a-e69b-33a3-9dc3-2f99074a1ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:e7:bd:c1:4d:65:10:44:1b:b0:fa:70:d7:94:fb:ba:4f: 09:f0:c5:09:e4:cf:85:bc:a8:78:76:25:a4:27:44:3c:4a:3b: 91:0b:bf:50:b7:dc:ea:c6:2e:56:a0:ac:70:0a:98:4e:a8:4c: c5:a9:ab:ee:78:d9:ef:4e:aa:14:c8:d3:7b:ff:d7:7e:9b:86: 41:a0:bf:b0:b5:92:97:11:2a:e1:fc:2f:e2:5c:46:10:76:9c: 4f:2e:e4:02:78:49:31:d5:97:2a:93:7d:fd:ff:3c:c0:f2:82: 86:be:0f:ac:ed:2a:c9:cf:1a:9e:fe:b7:65:3a:29:c1:ad:45: 0c:df:fd:16:da:71:1f:97:50:c5:ad:0f:a5:d1:77:d7:d9:56: 5a:0c:fe:88:09:df:12:de:6f:4b:21:43:5f:69:76:a5:10:0a: 44:35:6c:68:64:04:f1:6f:06:31:09:7b:41:30:57:a3:f1:9e: 61:e9:89:65:5d:bc:0b:41:38:ec:98:d2:6c:95:ad:be:4b:6d: 90:9b:df:b5:59:f6:13:4d:82:d4:6f:fb:31:1e:a8:b0:f7:cb: 92:84:1c:d7:58:b7:01:4c:e2:6a:3e:43:da:37:f8:da:48:bf: e6:26:cc:92:89:b5:b3:6c:ed:cc:78:d5:de:d5:9f:b3:62:b5: 85:63:92:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rZyKKaMz12GeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NTY2NzZlM2YtYzNhYi00ZjA0LTljODctNmMxYjdiMWY1ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSv48jwDT8vMSLTxWQTqLpUcNO9YV4aj9bzG 8BxUdeHfaCm0fssCJQM/YAY2oiREKZCZXeK1XBJqxNUplmE9NciVaL3XPrsgKAIs rLZwLBDXzjfL9xLg/bcG9XFqb82QpQllR6G5BC88lcgsKy/XJ/WOQ+IlimPmNvAq 5KaCqbV5ryD1p237d00bRO0I7TF/ibbBIYnaSEMB9yeVZNxu7DzUf5yJRPfmCKWL 1BGpPLTv2kOhfVpqTI8KCYSMadGjGSYV818oJIzPBzrh/OYGm7dhsTxjgAgj7H3G 5RdLqs0a6VavY7qkuSJJlMd4kKf5PsKa4ig7pB9eFu4KqAMxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr2n3WSjYliefUZbfWjC9neujduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTcyMTg3NGEtZTY5Yi0z M2EzLTlkYzMtMmY5OTA3NGExYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5K573BTWUQRBuw+nDXlPu6TwnwxQnkz4W8qHh2JaQnRDxKO5ELv1C3 3OrGLlagrHAKmE6oTMWpq+542e9OqhTI03v/136bhkGgv7C1kpcRKuH8L+JcRhB2 nE8u5AJ4STHVlyqTff3/PMDygoa+D6ztKsnPGp7+t2U6KcGtRQzf/RbacR+XUMWt D6XRd9fZVloM/ogJ3xLeb0shQ19pdqUQCkQ1bGhkBPFvBjEJe0EwV6PxnmHpiWVd vAtBOOyY0myVrb5LbZCb37VZ9hNNgtRv+zEeqLD3y5KEHNdYtwFM4mo+Q9o3+NpI v+YmzJKJtbNs7cx41d7Vn7NitYVjkjk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:02 2024 by rpki-client on console-ams.rpki-client.org