$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa File: 902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa (raw, json) Hash identifier: 2S9zEFxAObQRKtf5vKkWE+zBqjpG1LQp7ysQm3y/+98= Subject key identifier: 1F:21:93:CC:1E:28:FE:03:D2:34:9C:21:A5:44:86:52:38:74:07:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584752161639D2C72C64D11C0320 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 16625 IP address blocks: 173.223.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:16:39:d2:c7:2c:64:d1:1c:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=a5ce9769-b4af-4ab4-87bf-bfd0f991b25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:2c:bb:0f:c9:14:6a:65:64:5f:5e:df:b7: 1d:10:c6:a0:79:f1:29:36:74:bb:60:e6:2a:f2:ca: 17:9c:fe:27:37:31:28:58:76:42:ab:09:b6:fe:60: c7:96:9f:2e:68:31:87:83:25:8c:79:dd:56:8e:64: 6b:7f:ed:a2:55:e9:ab:d6:55:0c:b4:c9:24:8d:e3: 03:c0:87:3b:75:f3:d2:59:bb:11:a6:ab:b8:bf:9a: a5:f9:97:58:24:3b:e0:fd:bb:b8:5f:5a:1c:87:3e: e8:97:59:fa:8b:85:c6:b7:4d:02:cb:26:44:38:9b: 5d:63:e2:b5:0d:00:d1:11:36:0e:e9:70:f4:6d:fb: 4f:c7:08:f2:39:9c:cd:1d:ae:fa:5b:4d:14:68:22: fe:62:63:b3:d2:04:35:76:c7:41:ba:41:03:04:1f: 8b:27:21:25:fd:76:fb:a4:75:02:1f:f4:86:b1:a3: 48:e0:1d:52:60:f0:f3:2b:78:0c:c1:93:4f:18:53: d0:b9:8a:08:55:58:b8:c5:37:f5:9e:ed:ab:d1:da: 1c:62:7e:39:52:5d:9d:6b:05:1c:cd:4d:f8:fe:10: 38:4d:39:09:82:8c:a7:9d:4b:4f:be:dc:6a:0f:c0: e8:28:c6:42:c0:09:9a:d6:98:6e:f5:08:2b:b9:99: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:93:CC:1E:28:FE:03:D2:34:9C:21:A5:44:86:52:38:74:07:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/902227eb-6c48-3b5a-99c1-f3ef54fc1cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1c:5f:a1:00:7c:75:33:81:56:d7:34:1d:ea:99:56:1f:c5: b9:15:50:e0:ea:15:cb:19:9d:59:34:e2:6b:53:d3:72:4e:8f: 1a:8e:4a:d5:c2:ee:49:36:af:74:24:f3:fa:4a:ee:f8:a0:32: f0:69:8e:db:47:ad:59:41:fd:23:0c:a1:2f:d2:84:25:fb:88: b5:48:05:1d:10:8e:36:23:e6:d2:8a:ec:cb:14:89:27:cd:63: fd:9c:23:06:1b:b6:a7:4d:23:5d:b7:d6:12:6a:50:5a:d9:5a: 93:cd:32:9b:bd:2d:82:3f:6f:31:a4:e1:9d:52:d6:3c:fa:f8: 2b:bd:65:fb:fc:ab:27:c0:08:30:ba:ee:4b:67:6d:8e:69:17: 74:0d:4a:5f:15:9e:60:7d:20:c9:85:53:eb:59:bd:74:7a:d5: ab:21:da:21:95:98:ce:fa:eb:4c:76:bf:da:be:65:58:d8:81: 4a:35:04:94:da:89:8c:9b:4e:ba:08:04:ba:ef:c5:1c:c4:66: cd:8a:f6:3b:72:ce:22:f9:9f:70:d6:ae:8d:5c:32:49:a6:72: 22:89:27:19:29:85:ee:d1:25:17:53:dc:43:04:97:09:48:7e: 5e:62:ab:c1:ef:dc:d5:4d:89:e1:13:c0:bb:47:c0:3a:89:02: b1:0f:e8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhY50scsZNEcAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk YTVjZTk3NjktYjRhZi00YWI0LTg3YmYtYmZkMGY5OTFiMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMsuw/JFGplZF9e37cdEMagefEpNnS7YOYq 8soXnP4nNzEoWHZCqwm2/mDHlp8uaDGHgyWMed1WjmRrf+2iVemr1lUMtMkkjeMD wIc7dfPSWbsRpqu4v5ql+ZdYJDvg/bu4X1ochz7ol1n6i4XGt00CyyZEOJtdY+K1 DQDRETYO6XD0bftPxwjyOZzNHa76W00UaCL+YmOz0gQ1dsdBukEDBB+LJyEl/Xb7 pHUCH/SGsaNI4B1SYPDzK3gMwZNPGFPQuYoIVVi4xTf1nu2r0docYn45Ul2dawUc zU34/hA4TTkJgoynnUtPvtxqD8DoKMZCwAma1phu9QgruZkgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8hk8weKP4D0jScIaVEhlI4dAeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAyMjI3ZWItNmM0OC0z YjVhLTk5YzEtZjNlZjU0ZmMxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrd+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFocX6EAfHUzgVbXNB3qmVYfxbkVUODqFcsZnVk04mtT03JOjxqOStXC 7kk2r3Qk8/pK7vigMvBpjttHrVlB/SMMoS/ShCX7iLVIBR0QjjYj5tKK7MsUiSfN Y/2cIwYbtqdNI1231hJqUFrZWpPNMpu9LYI/bzGk4Z1S1jz6+Cu9Zfv8qyfACDC6 7ktnbY5pF3QNSl8VnmB9IMmFU+tZvXR61ash2iGVmM7660x2v9q+ZVjYgUo1BJTa iYybTroIBLrvxRzEZs2K9jtyziL5n3DWro1cMkmmciKJJxkphe7RJRdT3EMElwlI fl5iq8Hv3NVNieETwLtHwDqJArEP6OU= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:27 2024 by rpki-client on console-ams.rpki-client.org