$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa File: 1a064665-f118-3541-b242-c5dfd88cc122.roa (raw, json) Hash identifier: jpCcdMHAKc0ew9hZqaw+7kr6+flNNfYXd6TuxQZE9BU= Subject key identifier: 3F:EB:EF:32:77:27:EF:FD:CB:A7:0C:E3:DE:72:C6:4B:E6:EC:57:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858478E1BD6FCD1DDE7E5E4765BD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 7713 IP address blocks: 23.32.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d6:fc:d1:dd:e7:e5:e4:76:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=a9079068-4d42-4747-bb3d-1874f5e4a225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:ea:f6:b3:be:da:ef:ac:03:2c:19:46:f8: 79:37:34:3e:cf:0b:22:ba:2a:0d:a9:dc:42:13:27: 15:36:f3:9d:ab:00:8c:d0:30:24:bc:02:c3:9e:c3: d4:c1:c3:19:fb:1a:82:78:39:bc:d4:6c:2e:30:af: 49:47:3a:10:a4:a1:e7:64:71:cd:29:7f:bc:89:20: f2:89:3e:3e:6f:d7:64:e4:0b:05:dd:35:fb:5e:9f: 9e:03:03:65:9d:bb:1e:70:c6:6a:27:fb:13:64:6f: a7:18:f4:fc:c3:56:66:2e:ae:8a:64:d7:30:2d:e3: 4f:ec:5d:90:45:88:61:16:d9:69:9d:f2:b6:b8:a9: 00:b3:03:9e:76:e5:b0:f5:25:40:88:dc:84:0e:b0: 2a:a8:5c:96:60:e4:07:c9:e7:f7:64:52:2c:a7:77: e0:99:30:30:78:d3:21:1e:a3:a9:df:ee:2f:df:03: b1:13:9e:40:fc:27:8a:09:48:9f:e1:91:b6:7a:60: 2b:32:94:2f:c3:7c:29:46:24:9d:a1:3f:4a:24:24: 0c:07:ee:26:a0:a9:05:a6:0a:63:73:20:c5:a6:43: 71:f7:43:dc:ef:17:51:49:5e:f6:68:f8:63:ee:a2: 65:e6:1c:8b:06:a6:7e:37:ba:19:a8:13:3a:75:ee: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:EF:32:77:27:EF:FD:CB:A7:0C:E3:DE:72:C6:4B:E6:EC:57:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ee:2c:58:ec:8f:bd:2f:3e:f2:3d:2b:42:54:d9:c7:1b:da: d9:a8:e9:e8:77:09:2b:eb:4f:76:4d:e9:00:36:3c:4c:33:66: d7:c9:4c:db:d6:c6:bd:ad:2e:99:06:a9:b9:99:00:85:0e:2d: c0:76:c3:83:69:a3:62:ee:7e:01:92:23:37:01:a5:34:aa:4c: bf:96:f0:ec:1a:a3:06:68:f3:84:92:a0:8f:b9:ab:e0:6d:37: 69:a1:35:45:28:1c:3b:d2:da:af:78:4c:f0:b2:46:eb:fb:8c: f5:d7:9d:36:3a:cd:95:42:e3:18:ae:51:4b:43:7f:b4:15:05: ff:8a:ea:fc:77:f7:24:a0:2b:4d:19:6f:09:9f:2b:db:f2:d2: 4e:2d:4b:32:a9:27:96:56:84:83:68:38:ab:0a:27:e3:cc:53: 07:a0:89:ab:e7:13:82:a1:c5:86:af:bd:54:dc:26:d2:da:0d: a1:d4:c9:64:e8:16:fc:5b:57:20:d6:17:7f:d1:1d:60:63:3b: e0:bc:ad:f8:71:9e:c4:f7:47:1d:8e:37:ed:b4:05:3e:9b:76: 24:78:48:8b:32:e7:d0:03:b5:fa:ff:6b:07:d8:93:21:24:a6: 1b:30:8d:30:7a:23:b0:68:db:38:75:99:3e:72:a0:62:09:dc: 59:3d:24:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9b80d3n5eR2W9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk YTkwNzkwNjgtNGQ0Mi00NzQ3LWJiM2QtMTg3NGY1ZTRhMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Dq9rO+2u+sAywZRvh5NzQ+zwsiuioNqdxC EycVNvOdqwCM0DAkvALDnsPUwcMZ+xqCeDm81GwuMK9JRzoQpKHnZHHNKX+8iSDy iT4+b9dk5AsF3TX7Xp+eAwNlnbsecMZqJ/sTZG+nGPT8w1ZmLq6KZNcwLeNP7F2Q RYhhFtlpnfK2uKkAswOeduWw9SVAiNyEDrAqqFyWYOQHyef3ZFIsp3fgmTAweNMh HqOp3+4v3wOxE55A/CeKCUif4ZG2emArMpQvw3wpRiSdoT9KJCQMB+4moKkFpgpj cyDFpkNx90Pc7xdRSV72aPhj7qJl5hyLBqZ+N7oZqBM6de415wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/r7zJ3J+/9y6cM495yxkvm7FdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWEwNjQ2NjUtZjExOC0z NTQxLWIyNDItYzVkZmQ4OGNjMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPuLFjsj70vPvI9K0JU2ccb2tmo6eh3CSvrT3ZN6QA2PEwzZtfJTNvW xr2tLpkGqbmZAIUOLcB2w4Npo2LufgGSIzcBpTSqTL+W8OwaowZo84SSoI+5q+Bt N2mhNUUoHDvS2q94TPCyRuv7jPXXnTY6zZVC4xiuUUtDf7QVBf+K6vx39ySgK00Z bwmfK9vy0k4tSzKpJ5ZWhINoOKsKJ+PMUwegiavnE4KhxYavvVTcJtLaDaHUyWTo FvxbVyDWF3/RHWBjO+C8rfhxnsT3Rx2ON+20BT6bdiR4SIsy59ADtfr/awfYkyEk phswjTB6I7Bo2zh1mT5yoGIJ3Fk9JJI= -----END CERTIFICATE-----Generated at Sat Nov 23 04:35:52 2024 by rpki-client on console-ams.rpki-client.org