$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa File: b1fa73cb-5685-32ce-9338-5981442ff18c.roa (raw, json) Hash identifier: VcAO51xNOfkO/Dur0q/kCJw/PxhqY5IO2EAmvarv66A= Subject key identifier: 7E:58:C8:66:E6:FC:2B:83:78:91:DA:BF:6B:05:9E:1A:E5:1D:61:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847600BA7B97028049902C9E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 20940 IP address blocks: 23.72.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a7:b9:70:28:04:99:02:c9:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=2abc5b88-2cf2-469a-88c7-b2d5a389164e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:4d:13:cd:88:dd:31:d3:3e:fc:af:93:66: dc:42:47:e1:98:c0:e9:fe:c2:69:31:e0:bd:28:c3: a4:a9:fe:d5:55:06:38:29:3a:96:e1:b1:c8:64:7e: 23:ea:8d:54:0e:09:10:d0:c0:34:14:54:d2:0d:1f: 7d:46:f8:2b:d9:a7:26:80:19:d6:5c:1c:9c:bd:4f: 66:02:f0:f6:44:0f:8b:82:50:f8:1c:61:52:17:02: c2:6b:77:70:c7:98:c4:c9:d5:c7:2c:ed:60:7d:3d: 44:70:3b:e8:1e:c2:85:b0:bb:5e:7e:06:c5:68:25: db:6c:ae:d4:52:47:a6:e7:4a:99:ce:d1:85:f4:e9: 9d:71:d2:82:f2:80:14:ab:1a:a6:8d:e0:31:d1:b1: 9a:2e:db:86:42:71:94:1a:0f:97:ba:83:e3:8c:e0: c3:ee:09:fc:84:38:90:96:7c:e8:d2:7b:4c:28:5d: f9:42:08:61:5e:d9:2c:90:03:f5:eb:67:d8:ea:81: 13:72:ab:3b:1b:f8:3f:a7:06:83:03:10:f4:9f:ca: df:0e:25:0d:6e:2d:ed:af:2f:60:cf:ea:24:9d:ca: 5f:0e:7d:38:b5:3d:33:5a:ac:2c:65:3b:7b:d7:f6: 2f:05:e0:bf:a6:fb:88:08:30:98:e1:75:ca:fd:4d: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:C8:66:E6:FC:2B:83:78:91:DA:BF:6B:05:9E:1A:E5:1D:61:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a3:5d:bd:17:ae:1a:af:3c:06:55:5c:cf:d7:4f:08:40:37: 18:88:fc:a0:40:16:54:ce:c3:f8:29:8c:1e:97:9d:87:3f:ea: e6:58:4e:d0:51:a2:0d:31:ca:0b:85:c2:0f:b4:46:af:e8:60: 46:a1:56:52:9e:21:75:4c:0c:62:1d:2c:22:a8:4b:7c:98:ac: 16:f2:8d:69:30:6e:19:ae:ab:79:23:51:58:60:87:ae:e7:26: f9:7c:06:97:d3:1e:f6:ed:1c:57:26:44:af:56:c7:0c:a5:20: 00:b4:e4:90:8e:34:44:99:b0:08:fd:73:23:ed:cc:e5:f0:c5: 22:88:c3:8a:3b:be:e3:32:41:a9:f4:7c:66:11:2e:87:29:c6: 07:6d:54:dc:dc:81:d5:ba:05:f9:63:c3:0a:77:79:70:fc:f1: b8:f7:28:fa:02:96:f8:2a:54:bf:10:6d:02:6d:a0:54:5a:99: a4:cd:ad:d6:f9:aa:5f:1e:11:70:7d:e0:97:71:7f:bf:82:92: 21:59:fb:0c:f3:e6:31:c1:fc:8f:d9:5d:7b:d9:a1:33:af:2a: 99:67:11:5b:83:3c:06:23:f3:a8:76:f5:27:4c:d8:f0:8f:ea: 17:01:16:08:e5:98:92:12:4b:9d:9c:5b:a6:53:29:fe:f1:b1: e7:93:a4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6e5cCgEmQLJ6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MmFiYzViODgtMmNmMi00NjlhLTg4YzctYjJkNWEzODkxNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jRNE82I3THTPvyvk2bcQkfhmMDp/sJpMeC9 KMOkqf7VVQY4KTqW4bHIZH4j6o1UDgkQ0MA0FFTSDR99Rvgr2acmgBnWXBycvU9m AvD2RA+LglD4HGFSFwLCa3dwx5jEydXHLO1gfT1EcDvoHsKFsLtefgbFaCXbbK7U Ukem50qZztGF9OmdcdKC8oAUqxqmjeAx0bGaLtuGQnGUGg+XuoPjjODD7gn8hDiQ lnzo0ntMKF35QghhXtkskAP162fY6oETcqs7G/g/pwaDAxD0n8rfDiUNbi3try9g z+okncpfDn04tT0zWqwsZTt71/YvBeC/pvuICDCY4XXK/U0UhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5YyGbm/CuDeJHav2sFnhrlHWF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFmYTczY2ItNTY4NS0z MmNlLTkzMzgtNTk4MTQ0MmZmMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmjXb0XrhqvPAZVXM/XTwhANxiI/KBAFlTOw/gpjB6XnYc/6uZYTtBR og0xyguFwg+0Rq/oYEahVlKeIXVMDGIdLCKoS3yYrBbyjWkwbhmuq3kjUVhgh67n Jvl8BpfTHvbtHFcmRK9WxwylIAC05JCONESZsAj9cyPtzOXwxSKIw4o7vuMyQan0 fGYRLocpxgdtVNzcgdW6Bfljwwp3eXD88bj3KPoClvgqVL8QbQJtoFRamaTNrdb5 ql8eEXB94Jdxf7+CkiFZ+wzz5jHB/I/ZXXvZoTOvKplnEVuDPAYj86h29SdM2PCP 6hcBFgjlmJISS52cW6ZTKf7xseeTpDQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:16 2024 by rpki-client on console-ams.rpki-client.org