$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f32ebc-d66f-3ea9-960e-8c3de0947e82.roa File: 72f32ebc-d66f-3ea9-960e-8c3de0947e82.roa (raw, json) Hash identifier: 7VM+nwD7dYXxmXjgG0wgurMC7l41Gll/XIdQiQVodJc= Subject key identifier: 7B:E1:51:19:09:D4:E8:98:9D:9F:5F:31:1C:1B:62:2F:B3:A7:7C:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475EA612DE4571EE9A8F396DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f32ebc-d66f-3ea9-960e-8c3de0947e82.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 16625 IP address blocks: 23.219.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:12:de:45:71:ee:9a:8f:39:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=d6c11099-07d7-41df-a58c-e9e166200d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:4f:06:4c:6b:95:25:e1:24:b5:66:db:69: c6:62:98:36:54:8e:b5:6d:53:8a:c4:9c:f1:13:92: 92:91:4c:de:da:4d:bb:cb:c3:fa:36:a2:e4:76:4f: 31:42:b0:f8:00:ab:4c:1b:4d:94:ce:06:14:25:40: 8b:b6:b9:e0:dc:6a:0c:69:f6:c8:a2:c4:12:a4:f7: b0:23:79:43:f4:ef:8f:a8:47:0e:4f:72:ba:a1:ce: 74:c7:52:a8:18:b1:46:a0:90:53:10:13:f1:b0:c3: 49:93:6d:77:3d:fb:40:ba:b9:0f:6b:5d:ed:d5:0b: 8e:79:d9:0b:7b:2c:6b:c2:b4:10:ac:b1:68:d9:0a: dc:b6:90:12:11:d3:20:86:58:a9:d6:85:b1:72:79: 5e:b9:01:72:cc:2a:b3:82:f9:cb:53:b6:83:6d:15: dc:70:a9:79:87:ac:09:d9:95:01:fc:94:84:28:1c: 77:21:30:d4:a4:fb:8b:90:a4:88:19:d0:d8:bb:30: 1d:07:cd:a1:0b:89:6a:80:d1:05:70:4e:3c:2f:5d: ac:5a:a5:ef:dc:52:9b:79:bd:58:00:b0:f7:ce:37: 7e:1e:4f:66:26:80:eb:f7:28:8e:b6:ed:7d:e8:38: 7e:13:2a:06:f2:a9:bd:f3:9a:c3:75:17:8f:cf:1e: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E1:51:19:09:D4:E8:98:9D:9F:5F:31:1C:1B:62:2F:B3:A7:7C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f32ebc-d66f-3ea9-960e-8c3de0947e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a5:50:05:5b:a1:2f:1e:bf:df:6b:f5:77:bd:86:ce:30:55: fb:fd:a9:82:03:6e:a0:83:ab:98:69:83:9c:27:43:b2:f4:ce: f1:0f:40:eb:41:aa:10:50:41:20:3d:34:b7:30:91:2c:31:bd: 9b:bf:12:38:06:43:4c:68:9b:b0:ed:7c:ec:02:a2:d8:fb:67: fb:5d:6c:79:9d:21:c2:b5:e1:38:d9:09:b0:bc:24:95:d4:5d: 16:a6:9c:18:fb:4c:fc:27:5d:4d:77:ac:7f:17:43:c1:d6:e6: d1:24:6d:c0:3f:79:b8:a9:e8:53:66:8c:24:65:15:53:d2:67: 68:49:e0:47:4f:b8:97:6a:87:d5:37:83:7e:ce:9e:01:8b:c8: a0:16:cc:fa:dd:0a:da:47:09:00:ce:c6:94:ae:dc:b4:a0:46: d0:e3:e0:95:fa:02:b6:dd:55:41:2b:e0:15:3f:13:bd:54:82: e3:bc:b2:1c:e9:15:71:96:56:f1:f4:e4:b5:20:0d:40:f6:fb: bd:44:57:21:46:9a:a1:a0:b3:8a:e1:2c:1a:5b:b8:48:a5:c5: 9f:a1:89:b2:2f:27:02:6a:4a:a1:6f:da:5b:a2:a7:a4:6f:24: 1f:23:8f:c2:f1:e7:cb:ad:5f:0e:4d:d9:20:27:9d:b2:f2:4e: 43:37:89:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdephLeRXHumo85bcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk ZDZjMTEwOTktMDdkNy00MWRmLWE1OGMtZTllMTY2MjAwZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKJPBkxrlSXhJLVm22nGYpg2VI61bVOKxJzx E5KSkUze2k27y8P6NqLkdk8xQrD4AKtMG02UzgYUJUCLtrng3GoMafbIosQSpPew I3lD9O+PqEcOT3K6oc50x1KoGLFGoJBTEBPxsMNJk213PftAurkPa13t1QuOedkL eyxrwrQQrLFo2QrctpASEdMghlip1oWxcnleuQFyzCqzgvnLU7aDbRXccKl5h6wJ 2ZUB/JSEKBx3ITDUpPuLkKSIGdDYuzAdB82hC4lqgNEFcE48L12sWqXv3FKbeb1Y ALD3zjd+Hk9mJoDr9yiOtu196Dh+EyoG8qm985rDdRePzx75sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvhURkJ1OiYnZ9fMRwbYi+zp3wTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJmMzJlYmMtZDY2Zi0z ZWE5LTk2MGUtOGMzZGUwOTQ3ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFilUAVboS8ev99r9Xe9hs4wVfv9qYIDbqCDq5hpg5wnQ7L0zvEPQOtB qhBQQSA9NLcwkSwxvZu/EjgGQ0xom7DtfOwCotj7Z/tdbHmdIcK14TjZCbC8JJXU XRamnBj7TPwnXU13rH8XQ8HW5tEkbcA/ebip6FNmjCRlFVPSZ2hJ4EdPuJdqh9U3 g37OngGLyKAWzPrdCtpHCQDOxpSu3LSgRtDj4JX6ArbdVUEr4BU/E71UguO8shzp FXGWVvH05LUgDUD2+71EVyFGmqGgs4rhLBpbuEilxZ+hibIvJwJqSqFv2luip6Rv JB8jj8Lx58utXw5N2SAnnbLyTkM3iV8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:15 2024 by rpki-client on console-ams.rpki-client.org