$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9617b1-a5ac-34b5-b1a0-77ac3b834d30.roa File: 5a9617b1-a5ac-34b5-b1a0-77ac3b834d30.roa (raw, json) Hash identifier: cAu1gdO8t0RX5pvFJj6vQhy3bFffeSucuv+XkGepxnI= Subject key identifier: AC:3E:CD:7E:E5:2F:83:94:1E:C3:7F:26:F5:0C:F1:39:C9:7E:33:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36DCD6077724E392EC8170 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9617b1-a5ac-34b5-b1a0-77ac3b834d30.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.56.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:dc:d6:07:77:24:e3:92:ec:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=cf9b941f-b966-4063-845c-dd9c6ce81950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:63:e3:4b:fb:82:0e:1f:03:49:22:ba:ff: a7:b9:17:0a:e4:22:17:17:dd:93:4b:af:52:58:a1: 10:97:fc:d9:17:3c:0b:b0:bb:49:a9:f3:b4:35:ed: 81:96:fb:b4:42:ac:cd:49:71:21:5c:d6:1b:19:ca: 81:b7:e8:ab:85:14:c2:b0:be:83:ed:00:dc:63:3d: b8:99:6f:84:68:42:19:d2:0d:54:33:d2:14:7e:0b: f3:fa:8e:0a:17:af:a7:f3:70:6e:89:7c:7a:4e:01: aa:0e:34:7e:2a:51:63:f3:9d:20:b7:c3:6f:95:6c: 1d:54:a8:8b:ca:85:25:5f:fb:82:9b:22:37:ab:f4: 92:74:7a:4e:4e:cf:f2:ae:29:59:e5:41:3c:2b:c9: 14:71:81:8c:38:f4:86:dd:f2:c4:32:78:49:02:30: 8c:25:31:42:48:ae:b5:60:09:a0:46:e8:97:52:2d: 84:56:70:74:4b:51:0b:e5:71:86:2d:d1:5e:1e:e7: 1f:26:29:05:d3:7e:78:a1:63:76:d3:d1:84:6e:f3: 73:8c:91:63:4c:72:84:9b:e5:d7:3a:94:67:22:ca: 2f:49:1c:9a:89:4b:9f:a7:52:8b:1a:b0:78:f6:ca: 6e:ca:c1:5c:b0:bb:82:a3:29:c9:eb:b9:54:48:08: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:CD:7E:E5:2F:83:94:1E:C3:7F:26:F5:0C:F1:39:C9:7E:33:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9617b1-a5ac-34b5-b1a0-77ac3b834d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e4:5b:dd:3d:20:2d:51:95:b8:c7:d4:6b:55:52:ed:b0:3d: 64:7d:0a:db:da:22:4d:b7:6e:6f:26:d9:1e:c0:56:51:90:91: 90:a5:82:7b:62:ed:ef:35:f0:e3:2c:86:4a:e3:7c:6a:4b:19: 0e:a6:c6:4b:90:1f:ca:f1:fa:3b:e1:5d:0e:ee:99:e8:8c:0e: 51:b8:c2:73:51:40:41:c3:a8:24:ba:3c:46:74:a4:04:06:b3: 28:8c:96:f4:4c:fe:b8:4a:46:8e:ab:1c:c4:91:4f:1c:7d:08: 2a:86:6e:17:83:9b:07:50:c9:df:35:7e:a7:d5:3d:72:94:81: 0f:0b:f4:6e:fb:98:cb:19:0b:f7:fa:48:93:43:81:d4:98:cf: a6:89:4c:19:52:c4:d4:2a:1c:e5:c4:d1:74:89:c0:61:4a:2a: ef:6b:03:57:1f:5e:c4:8b:c0:43:b1:a4:07:66:f0:a7:81:4d: 7c:8e:8b:bd:7f:9c:d8:b4:52:1b:5f:72:3a:9e:50:65:f7:a6: a1:7d:6f:cd:39:7b:27:97:4b:3f:d9:74:f1:b8:f3:62:73:1a: 68:90:7a:a8:89:1d:94:98:22:52:3f:ae:85:05:80:bd:89:57: cf:9b:72:dc:01:a0:36:61:57:0a:9e:5a:7f:b0:93:75:3b:c5: d8:cd:af:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNtzWB3ck45LsgXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2Y5Yjk0MWYtYjk2Ni00MDYzLTg0NWMtZGQ5YzZjZTgxOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzChj40v7gg4fA0kiuv+nuRcK5CIXF92TS69S WKEQl/zZFzwLsLtJqfO0Ne2Blvu0QqzNSXEhXNYbGcqBt+irhRTCsL6D7QDcYz24 mW+EaEIZ0g1UM9IUfgvz+o4KF6+n83BuiXx6TgGqDjR+KlFj850gt8NvlWwdVKiL yoUlX/uCmyI3q/SSdHpOTs/yrilZ5UE8K8kUcYGMOPSG3fLEMnhJAjCMJTFCSK61 YAmgRuiXUi2EVnB0S1EL5XGGLdFeHucfJikF0354oWN209GEbvNzjJFjTHKEm+XX OpRnIsovSRyaiUufp1KLGrB49spuysFcsLuCoynJ67lUSAjAOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw+zX7lL4OUHsN/JvUM8TnJfjPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE5NjE3YjEtYTVhYy0z NGI1LWIxYTAtNzdhYzNiODM0ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHkW909IC1RlbjH1GtVUu2wPWR9CtvaIk23bm8m2R7AVlGQkZClgnti 7e818OMshkrjfGpLGQ6mxkuQH8rx+jvhXQ7umeiMDlG4wnNRQEHDqCS6PEZ0pAQG syiMlvRM/rhKRo6rHMSRTxx9CCqGbheDmwdQyd81fqfVPXKUgQ8L9G77mMsZC/f6 SJNDgdSYz6aJTBlSxNQqHOXE0XSJwGFKKu9rA1cfXsSLwEOxpAdm8KeBTXyOi71/ nNi0UhtfcjqeUGX3pqF9b805eyeXSz/ZdPG482JzGmiQeqiJHZSYIlI/roUFgL2J V8+bctwBoDZhVwqeWn+wk3U7xdjNr0g= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:06 2024 by rpki-client on console-ams.rpki-client.org