$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa File: 867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa (raw, json) Hash identifier: pBchs0GWai3/JtjJHsuFvXumlcfLPit8L5dptPHs3jk= Subject key identifier: 55:F6:A2:F3:7C:C2:59:C9:B3:63:B2:27:70:68:FA:51:50:D4:C1:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858476F662D8011E9EB33BEA49700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 45899 IP address blocks: 23.32.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:2d:80:11:e9:eb:33:be:a4:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=9c300db7-34b1-4b1e-9bd3-436b3c0ce66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:92:2f:3e:39:e7:44:5f:b3:7b:55:a4:78: 9c:90:a3:60:9e:d7:a2:68:2e:7e:e8:74:22:90:1b: 17:95:81:7a:db:54:45:af:6a:41:7d:9e:12:40:a7: c6:ca:74:37:fd:60:fa:5e:c3:a4:dc:82:dd:16:1b: a4:c1:19:86:db:e5:01:9a:5f:eb:58:8b:6a:1c:81: 8d:5c:28:f3:ea:76:d8:6e:1f:e9:6c:e9:9d:32:1b: 9a:bc:05:2c:df:1b:57:1f:3c:d7:81:24:fc:cf:b2: 76:d4:61:0e:3d:b5:62:b2:0a:b2:7d:cc:f4:ef:ec: bb:2b:0c:42:68:e2:9b:e5:22:e8:33:16:0a:09:c0: d4:9d:54:7d:7d:89:45:90:8d:f5:6e:b3:3b:63:3e: e0:39:0d:cb:85:ab:53:4e:d0:ed:21:d7:88:20:c3: 90:58:e4:50:6b:3d:e6:1e:38:8d:ee:b7:5b:91:3a: 8d:a7:2a:c8:79:67:59:b9:2d:88:ec:70:ca:aa:4c: 49:e2:1c:53:f1:d9:b0:61:ea:cb:7c:b1:62:be:41: 9c:fd:b6:90:3f:76:35:48:60:97:af:9c:61:c5:a9: a1:8b:68:fd:39:c7:70:f1:74:e2:a5:a9:78:a8:59: 6a:a4:7a:6f:b5:15:57:fc:43:3b:2f:ff:2a:33:35: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:A2:F3:7C:C2:59:C9:B3:63:B2:27:70:68:FA:51:50:D4:C1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ce:8e:25:67:0b:64:93:61:aa:97:76:49:d9:9e:09:cf:9c: c3:49:cf:82:23:7b:6e:14:e2:df:a7:90:01:2b:f8:6c:61:6d: 25:c3:4e:05:ae:7a:bd:bc:ba:0a:bd:0c:07:da:92:0f:bd:6a: 9d:d1:82:8d:37:22:40:09:29:7f:ff:f9:29:45:35:c2:4d:0c: d1:dd:39:e0:bf:a6:ab:a0:01:74:c6:68:a3:99:8d:4c:6c:a6: 45:39:a9:c0:80:9e:d5:10:5e:64:df:6e:d4:77:bd:16:e3:02: fb:e0:3f:aa:91:8d:0c:12:65:c4:78:b9:22:11:97:7a:d3:2f: df:40:0e:fd:8a:3c:5f:88:d3:9c:1b:06:60:8e:07:29:86:17: 43:04:01:cf:9e:11:68:25:4b:7e:74:91:af:d2:7c:37:15:3d: c1:3e:32:81:46:b5:53:e6:7d:28:38:d4:1f:d8:75:ed:ec:a4: d4:37:f5:5e:43:14:36:8a:ed:23:4d:57:ef:8b:39:1d:cd:a6: d4:7b:14:d1:58:2d:36:28:a8:86:55:f3:61:eb:30:05:e6:d3: e8:b0:41:62:03:c8:90:c3:ac:ff:a3:72:45:8a:df:32:24:1c: 93:ad:18:f3:da:bd:c5:b0:d5:6e:b9:ae:a3:44:66:9a:af:38: 94:78:72:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdvZi2AEenrM76klwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk OWMzMDBkYjctMzRiMS00YjFlLTliZDMtNDM2YjNjMGNlNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDiSLz4550Rfs3tVpHickKNgnteiaC5+6HQi kBsXlYF621RFr2pBfZ4SQKfGynQ3/WD6XsOk3ILdFhukwRmG2+UBml/rWItqHIGN XCjz6nbYbh/pbOmdMhuavAUs3xtXHzzXgST8z7J21GEOPbVisgqyfcz07+y7KwxC aOKb5SLoMxYKCcDUnVR9fYlFkI31brM7Yz7gOQ3LhatTTtDtIdeIIMOQWORQaz3m HjiN7rdbkTqNpyrIeWdZuS2I7HDKqkxJ4hxT8dmwYerLfLFivkGc/baQP3Y1SGCX r5xhxamhi2j9Ocdw8XTipal4qFlqpHpvtRVX/EM7L/8qMzW5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX2ovN8wlnJs2OyJ3Bo+lFQ1MHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY3ZTRmYTYtZGM2Zi0z MTFkLWEwYTEtMTNlZjM0NzJiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErOjiVnC2STYaqXdknZngnPnMNJz4Ije24U4t+nkAEr+GxhbSXDTgWu er28ugq9DAfakg+9ap3Rgo03IkAJKX//+SlFNcJNDNHdOeC/pqugAXTGaKOZjUxs pkU5qcCAntUQXmTfbtR3vRbjAvvgP6qRjQwSZcR4uSIRl3rTL99ADv2KPF+I05wb BmCOBymGF0MEAc+eEWglS350ka/SfDcVPcE+MoFGtVPmfSg41B/Yde3spNQ39V5D FDaK7SNNV++LOR3NptR7FNFYLTYoqIZV82HrMAXm0+iwQWIDyJDDrP+jckWK3zIk HJOtGPPavcWw1W65rqNEZpqvOJR4cjI= -----END CERTIFICATE-----Generated at Mon Nov 25 21:44:01 2024 by rpki-client on console-ams.rpki-client.org