$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa File: 85604a7c-b0e6-39c7-9011-6f96128586c3.roa (raw, json) Hash identifier: odIKnOupSP1Lnie8qCsTyU/GtvwLJDqGAV+J58Z5PK8= Subject key identifier: 2D:23:D9:40:EF:24:20:12:5F:3F:ED:23:6F:BA:EF:28:3F:6E:12:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B10166EE55E6D2C817AD5140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 4775 IP address blocks: 184.87.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:66:ee:55:e6:d2:c8:17:ad:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=5dc75b53-5fe7-45fb-b41e-42bb291bd9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:dd:f3:51:92:48:6d:eb:1a:ef:a9:c9:8d: c0:1b:e9:a9:7c:17:ef:fc:77:82:38:6f:7c:a0:79: bc:d8:61:8d:e1:32:10:b1:31:91:52:ab:7c:9c:b0: 8d:cd:7d:b2:29:bd:18:c1:f6:79:c1:92:eb:43:9d: a3:7a:bf:02:2e:9a:c4:2d:3d:93:b3:c2:3c:4b:6f: 34:38:32:90:5a:3a:5d:40:f1:b8:ea:ed:5c:c6:bb: 1d:9d:0a:99:30:ca:84:2b:60:40:ab:47:c2:a4:a2: d5:b0:9a:12:39:50:6a:c6:6c:da:01:08:b3:51:2c: b9:15:74:3a:27:c5:d8:55:27:33:bf:30:27:2b:e9: e3:a4:81:79:f8:df:49:34:00:9d:a2:5a:d0:47:2d: 5a:5f:d6:13:a5:64:2f:36:a4:bc:37:a4:bf:52:2a: 20:89:16:eb:f3:f5:57:79:e7:4a:12:73:f3:4c:88: 77:a4:02:fc:76:fc:68:5a:95:67:db:30:8c:ef:7a: db:35:4d:70:37:5e:e8:1f:a1:65:06:b3:b4:44:93: 64:9a:d3:8f:38:35:49:0b:ca:16:ce:30:92:56:ed: 90:d6:58:b9:44:15:00:69:46:17:35:36:17:38:21: 26:21:7f:80:8e:27:cd:66:6e:d5:89:36:77:98:f0: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:D9:40:EF:24:20:12:5F:3F:ED:23:6F:BA:EF:28:3F:6E:12:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.87.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2b:52:b2:c2:d1:bd:de:63:12:ce:d5:93:16:80:61:d5:dc: 33:21:df:f1:a9:db:e8:b4:71:35:22:fa:9d:70:5e:0e:b5:8a: c5:56:1a:ef:a4:58:f3:55:8c:53:4b:1a:4c:f7:e1:4a:12:68: 25:fc:c6:e4:c3:83:7b:58:45:7c:27:b0:81:18:02:30:b5:26: 76:7f:7d:0f:0b:40:b1:32:2c:0b:b6:3c:9d:e5:84:51:4b:a8: e1:5f:15:30:6e:7b:00:d6:0c:a9:f3:a3:4d:0c:c0:57:1f:aa: 73:6f:26:c1:63:ca:69:e3:41:5b:0b:13:c4:9d:47:46:ba:bd: b7:f8:e5:3b:9c:0d:b6:30:13:94:51:b4:45:88:34:4b:5b:0a: 71:e4:9b:b5:b9:35:78:23:ac:69:27:ba:c7:b0:51:62:3c:c7: df:78:f5:f3:62:a3:2c:43:6b:d5:6d:7c:f4:36:dc:ce:e4:3c: 44:e7:d3:e8:4f:c7:6d:dd:06:8c:58:00:74:00:b3:fe:a9:0e: 85:f2:71:62:f6:08:57:77:43:d6:3e:32:5f:39:b3:69:10:b2: 14:18:50:79:dc:bb:c5:e1:03:59:29:6c:9a:2a:89:7a:60:0f: 52:ff:e3:95:68:4f:7e:ec:28:d1:47:12:9a:74:55:e3:5b:40: a5:6a:61:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWbuVebSyBetUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk NWRjNzViNTMtNWZlNy00NWZiLWI0MWUtNDJiYjI5MWJkOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VPd81GSSG3rGu+pyY3AG+mpfBfv/HeCOG98 oHm82GGN4TIQsTGRUqt8nLCNzX2yKb0YwfZ5wZLrQ52jer8CLprELT2Ts8I8S280 ODKQWjpdQPG46u1cxrsdnQqZMMqEK2BAq0fCpKLVsJoSOVBqxmzaAQizUSy5FXQ6 J8XYVSczvzAnK+njpIF5+N9JNACdolrQRy1aX9YTpWQvNqS8N6S/UiogiRbr8/VX eedKEnPzTIh3pAL8dvxoWpVn2zCM73rbNU1wN17oH6FlBrO0RJNkmtOPODVJC8oW zjCSVu2Q1li5RBUAaUYXNTYXOCEmIX+AjifNZm7ViTZ3mPBYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0j2UDvJCASXz/tI2+67yg/bhJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU2MDRhN2MtYjBlNi0z OWM3LTkwMTEtNmY5NjEyODU4NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuFfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkrUrLC0b3eYxLO1ZMWgGHV3DMh3/Gp2+i0cTUi+p1wXg61isVWGu+k WPNVjFNLGkz34UoSaCX8xuTDg3tYRXwnsIEYAjC1JnZ/fQ8LQLEyLAu2PJ3lhFFL qOFfFTBuewDWDKnzo00MwFcfqnNvJsFjymnjQVsLE8SdR0a6vbf45TucDbYwE5RR tEWINEtbCnHkm7W5NXgjrGknusewUWI8x9949fNioyxDa9VtfPQ23M7kPETn0+hP x23dBoxYAHQAs/6pDoXycWL2CFd3Q9Y+Ml85s2kQshQYUHncu8XhA1kpbJoqiXpg D1L/45VoT37sKNFHEpp0VeNbQKVqYdM= -----END CERTIFICATE-----Generated at Fri Nov 22 17:33:19 2024 by rpki-client on console-ams.rpki-client.org