$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa File: 79760c8c-64bc-38a5-b132-95fa5b97d443.roa (raw, json) Hash identifier: hzz60bFJSj018mIWldUsoXy+vVqd7LWEKcok2QZTZ4Y= Subject key identifier: 3A:F8:66:14:F3:E9:48:19:8A:5F:F6:75:56:0B:D9:BC:6D:96:55:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CC8EBA982BDD4EE37980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.221.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cc:8e:ba:98:2b:dd:4e:e3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=06fe634f-edaf-40b6-a33a-ad755afb9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:6e:06:54:c1:00:3a:4c:2c:bb:80:ff:6a: bd:1f:43:4b:86:3d:e3:df:64:9e:12:c7:71:8a:74: ba:e0:69:43:2a:cf:01:8f:86:0d:2c:ac:f2:90:8b: df:a8:83:ac:69:a4:ac:ec:ae:c4:d1:39:b1:02:de: ef:cd:b3:41:73:e9:71:85:a0:9b:1d:dc:49:03:45: b5:20:56:bc:94:32:5e:e3:1a:6c:a5:61:82:ba:fc: c1:02:8c:65:0d:a8:fa:b6:74:0f:79:29:a5:77:f0: c8:db:f6:be:cb:5c:19:af:52:50:34:73:3a:c2:f6: 1d:95:3f:4b:2c:22:4e:67:7d:63:60:4b:26:f3:39: de:c8:a5:50:b5:6e:fc:7e:49:98:ec:53:a3:d0:de: a8:0c:9e:ac:a4:33:a3:19:76:6b:18:68:ef:a5:5e: 61:62:38:44:47:73:68:16:4d:2e:83:39:09:11:95: 29:0f:be:7b:3b:fd:4c:90:42:44:e0:9d:69:2a:c9: 03:26:da:16:1c:a0:d3:78:19:9a:ed:f9:fd:07:b1: f1:16:99:f7:b9:c0:5d:7f:ec:43:29:2e:ec:d2:67: cb:f0:09:75:e0:18:63:0a:9a:81:3c:ab:8f:ad:68: d7:00:ad:c9:19:18:a9:18:a9:fc:05:57:6d:01:0a: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:66:14:F3:E9:48:19:8A:5F:F6:75:56:0B:D9:BC:6D:96:55:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:40:2f:9e:e8:c0:cd:94:c5:58:d7:84:c9:4a:7e:9b:8c:5e: b4:5e:36:bc:ff:94:28:c3:03:16:65:fe:3e:3f:25:c6:e8:73: f3:23:93:5b:18:7a:46:77:83:56:9e:c9:23:16:59:de:fd:4c: d2:3a:f4:87:78:12:3c:06:87:21:c3:40:e3:ff:66:39:ef:d6: 7e:4a:44:c2:a2:56:46:c2:a4:5c:56:41:73:82:72:b1:ce:3b: 97:7e:6d:75:35:bc:e7:f9:ed:60:9e:7e:30:23:52:32:f2:f1: 5f:82:64:8a:66:95:a7:4b:cc:6e:a6:c3:ab:20:96:0e:70:b4: 59:9b:6d:0e:5c:79:3e:70:ea:51:5e:e0:5d:1f:4a:61:e7:66: a3:84:1b:e6:72:3a:1f:23:9d:3a:a6:32:70:64:65:a7:03:06: 8d:ee:34:c1:48:6f:81:19:61:8c:43:7e:61:cb:ed:a2:1a:61: d6:66:f1:16:16:71:f9:7e:50:64:9d:b3:fb:be:1d:40:ef:91: 20:d2:e9:2d:cd:4c:aa:a4:d7:bc:db:b7:a7:44:7b:da:d0:ac: 2e:84:98:b0:68:31:80:f3:c5:86:66:64:f9:b6:aa:f3:d3:9f: f0:a8:93:44:6d:d1:9f:c0:99:0f:6d:10:3e:0a:45:02:42:6c: 3d:67:05:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMyOupgr3U7jeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MDZmZTYzNGYtZWRhZi00MGI2LWEzM2EtYWQ3NTVhZmI5YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyduBlTBADpMLLuA/2q9H0NLhj3j32SeEsdx inS64GlDKs8Bj4YNLKzykIvfqIOsaaSs7K7E0TmxAt7vzbNBc+lxhaCbHdxJA0W1 IFa8lDJe4xpspWGCuvzBAoxlDaj6tnQPeSmld/DI2/a+y1wZr1JQNHM6wvYdlT9L LCJOZ31jYEsm8zneyKVQtW78fkmY7FOj0N6oDJ6spDOjGXZrGGjvpV5hYjhER3No Fk0ugzkJEZUpD757O/1MkEJE4J1pKskDJtoWHKDTeBma7fn9B7HxFpn3ucBdf+xD KS7s0mfL8Al14BhjCpqBPKuPrWjXAK3JGRipGKn8BVdtAQrVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr4ZhTz6UgZil/2dVYL2bxtllUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk3NjBjOGMtNjRiYy0z OGE1LWIxMzItOTVmYTViOTdkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF90kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1AL57owM2UxVjXhMlKfpuMXrReNrz/lCjDAxZl/j4/Jcboc/Mjk1sY ekZ3g1aeySMWWd79TNI69Id4EjwGhyHDQOP/Zjnv1n5KRMKiVkbCpFxWQXOCcrHO O5d+bXU1vOf57WCefjAjUjLy8V+CZIpmladLzG6mw6sglg5wtFmbbQ5ceT5w6lFe 4F0fSmHnZqOEG+ZyOh8jnTqmMnBkZacDBo3uNMFIb4EZYYxDfmHL7aIaYdZm8RYW cfl+UGSds/u+HUDvkSDS6S3NTKqk17zbt6dEe9rQrC6EmLBoMYDzxYZmZPm2qvPT n/Cok0Rt0Z/AmQ9tED4KRQJCbD1nBYE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:47:26 2024 by rpki-client on console-ams.rpki-client.org