$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a6dd9c-81a4-3605-8422-ecd7d1e2a076.roa File: 88a6dd9c-81a4-3605-8422-ecd7d1e2a076.roa (raw, json) Hash identifier: FbxwTBb7aQ2mi0N6yxX37Qqr+Nt6TmmpdHQ/z4p1eYc= Subject key identifier: A7:01:CF:B1:EC:90:52:38:D6:03:BF:52:2B:FA:94:7E:32:E5:43:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B53157BB3471734BF61030C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a6dd9c-81a4-3605-8422-ecd7d1e2a076.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.219.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:57:bb:34:71:73:4b:f6:10:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=1a2b0a28-dcb9-47b3-a9b4-6af945c29135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:9f:23:0a:a1:76:1a:29:df:66:74:f1:43: 4b:b1:0f:cf:ff:7b:df:e2:2b:bf:c3:c5:fe:66:25: 42:c9:51:f1:d6:e8:83:0c:52:af:1d:dd:8f:77:53: 11:ea:63:b5:4d:69:54:33:62:5b:0c:48:9a:93:eb: 0f:18:63:d9:55:54:0a:be:69:80:d9:e3:24:6e:33: 9e:c7:59:7a:2c:6f:c9:23:ca:57:d6:0b:7b:64:8b: f6:69:7e:a6:c2:b0:ef:22:25:41:a1:24:be:73:08: 04:ec:97:75:fa:39:90:d9:11:da:0f:ed:c0:f7:58: a7:88:2d:c6:bb:fb:ee:0a:9f:5b:79:51:dd:71:bb: 88:00:5c:65:16:65:5c:be:20:51:54:d7:ce:aa:5b: 07:78:49:ad:06:37:25:b1:1a:46:e2:85:75:29:52: 35:2e:70:dd:7a:ac:5a:2d:be:ed:a2:a0:96:5e:39: 52:40:be:6b:f1:0e:74:90:8c:c7:e8:bf:3b:71:4f: a0:08:45:0f:a5:09:11:7d:34:04:2a:8a:cb:91:81: f8:94:bf:65:27:66:19:cb:94:a3:52:0a:40:fb:80: 39:74:9f:ea:09:48:35:30:5a:fd:80:c3:7c:7d:20: f7:96:e2:af:6e:ff:f8:f0:bc:f7:d3:83:87:70:00: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:01:CF:B1:EC:90:52:38:D6:03:BF:52:2B:FA:94:7E:32:E5:43:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88a6dd9c-81a4-3605-8422-ecd7d1e2a076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:58:f0:77:df:2e:5c:39:6f:94:28:15:52:f7:39:f8:20:0a: b5:75:59:bd:4a:4b:52:96:b3:90:c2:45:3e:3f:55:70:97:ed: f9:2d:39:cd:59:d7:ce:bb:76:aa:bd:43:98:27:29:27:3e:ff: ee:7f:95:ef:c7:8d:b2:2a:f1:72:82:46:b0:69:f5:d6:b4:d0: 9b:c8:bb:6d:38:27:b6:20:eb:5c:7d:f5:3b:7e:db:93:58:da: 14:4f:31:9e:da:ed:9f:ce:7f:5a:ca:d9:d7:fb:0b:13:bb:1f: aa:be:73:cd:f7:74:3f:fb:41:bc:a6:39:32:58:dc:0f:f9:0b: 1d:f5:41:a4:ba:26:4f:f5:16:89:7d:e8:ff:7d:f5:f2:7b:23: 8a:5f:6e:89:a1:01:c7:66:db:3e:40:dc:b6:e0:a5:a6:ca:00: 15:53:47:7f:96:73:41:96:a6:f3:06:c6:e7:db:f1:3e:55:6d: 5e:c7:81:19:c1:e5:1c:58:09:31:ec:f4:3d:db:87:99:96:12: 0b:a7:7d:29:fe:05:e0:ed:72:ac:0b:5e:43:94:f0:72:d5:69: 35:b2:f0:3c:d4:5c:8c:7d:e8:70:6b:1c:b7:a6:2f:8a:13:fa: 22:01:1b:e9:0a:5d:d2:d3:a9:d4:68:a7:23:75:58:5d:de:43: 14:ef:58:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVe7NHFzS/YQMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk MWEyYjBhMjgtZGNiOS00N2IzLWE5YjQtNmFmOTQ1YzI5MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNmfIwqhdhop32Z08UNLsQ/P/3vf4iu/w8X+ ZiVCyVHx1uiDDFKvHd2Pd1MR6mO1TWlUM2JbDEiak+sPGGPZVVQKvmmA2eMkbjOe x1l6LG/JI8pX1gt7ZIv2aX6mwrDvIiVBoSS+cwgE7Jd1+jmQ2RHaD+3A91iniC3G u/vuCp9beVHdcbuIAFxlFmVcviBRVNfOqlsHeEmtBjclsRpG4oV1KVI1LnDdeqxa Lb7toqCWXjlSQL5r8Q50kIzH6L87cU+gCEUPpQkRfTQEKorLkYH4lL9lJ2YZy5Sj UgpA+4A5dJ/qCUg1MFr9gMN8fSD3luKvbv/48Lz304OHcACU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcBz7HskFI41gO/Uiv6lH4y5UOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhhNmRkOWMtODFhNC0z NjA1LTg0MjItZWNkN2QxZTJhMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9t7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Y8HffLlw5b5QoFVL3OfggCrV1Wb1KS1KWs5DCRT4/VXCX7fktOc1Z 1867dqq9Q5gnKSc+/+5/le/HjbIq8XKCRrBp9da00JvIu204J7Yg61x99Tt+25NY 2hRPMZ7a7Z/Of1rK2df7CxO7H6q+c833dD/7QbymOTJY3A/5Cx31QaS6Jk/1Fol9 6P999fJ7I4pfbomhAcdm2z5A3LbgpabKABVTR3+Wc0GWpvMGxufb8T5VbV7HgRnB 5RxYCTHs9D3bh5mWEgunfSn+BeDtcqwLXkOU8HLVaTWy8DzUXIx96HBrHLemL4oT +iIBG+kKXdLTqdRopyN1WF3eQxTvWIY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:54 2024 by rpki-client on console-ams.rpki-client.org