$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa File: c4aaf835-035d-3087-b131-ce7386d0e1c7.roa (raw, json) Hash identifier: RZT8T0U2gp7M4dO8PxMCyvNeSOgee94djKWwV94niTY= Subject key identifier: 61:15:FA:2E:FD:9D:C9:39:76:E8:25:6F:8D:B4:3C:1E:4B:47:FE:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CD4C709328A3D6B5DA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.221.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cd:4c:70:93:28:a3:d6:b5:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=a13acedd-1e3c-4b4c-ad51-741b6eb89da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:4d:57:e3:c0:56:21:8d:d4:b3:a7:78:93: e5:5a:21:0e:65:65:bc:25:41:30:8b:e0:97:ed:35: 98:63:d7:2c:76:e1:ba:e8:70:f9:ed:e3:e1:fa:c8: 4c:67:10:a0:00:4b:32:b1:46:82:66:23:60:2a:51: ae:bc:bb:89:7a:af:16:cd:10:f1:49:3d:59:c8:b8: 29:74:12:bf:85:45:ca:e9:a8:b9:15:59:aa:2d:19: 5a:42:8f:76:68:e3:96:31:75:b7:5c:8d:09:14:16: 6a:dd:5e:4d:20:d0:5b:f7:17:1a:36:c9:de:3c:bb: ea:20:8b:9b:c1:a1:6d:9e:f7:ca:c3:39:66:f8:7e: 62:50:f7:07:8c:f9:be:c0:42:82:21:d3:86:76:48: 6f:b7:a5:a6:08:d9:87:09:da:55:bb:c0:90:96:d6: 60:5d:a5:19:fc:81:0d:bf:90:a7:c8:4b:d8:ff:7d: 9c:f0:85:46:9d:3f:01:16:d1:1e:e5:32:7f:98:1f: a0:48:2a:e0:21:9a:98:53:97:dd:2b:ec:69:03:d5: 4d:26:32:1a:a8:45:b2:de:2d:f8:3e:cb:24:76:a5: 00:5b:cd:22:e5:73:f7:b3:df:3f:28:07:18:a6:59: 07:79:16:ba:68:0a:6e:44:67:76:df:09:7c:d7:07: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:15:FA:2E:FD:9D:C9:39:76:E8:25:6F:8D:B4:3C:1E:4B:47:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:87:2d:da:37:88:79:01:34:ce:f8:17:34:70:56:46:16:c7: e2:cd:d1:f5:17:51:5e:09:5d:16:71:1f:ba:41:a0:db:f5:c0: 3e:50:0f:57:7e:68:d4:b5:a7:7e:38:ce:87:ec:3b:69:f4:af: 63:21:93:3c:6f:fb:63:2e:e5:bf:fa:6d:68:65:fa:7f:f7:26: c4:75:da:9c:1b:a9:87:2a:52:8a:30:ad:90:56:01:c8:c4:ec: 77:5b:73:d4:2a:22:1c:24:90:da:09:e7:83:20:74:a1:01:c7: 59:d6:ef:eb:0c:90:c2:86:01:b7:cb:81:d9:ab:3b:e0:15:75: cb:71:d4:29:b8:5e:44:dc:41:8e:f2:e2:2a:b1:7d:34:f3:5e: c1:85:0d:34:2b:80:96:70:78:52:43:c8:2e:30:ee:f7:b2:a4: 25:6f:27:e0:a4:34:b4:0d:15:aa:c2:48:eb:a1:1e:cc:1d:f9: df:e5:0d:87:90:5b:1f:a8:a2:58:6b:1b:10:f6:a6:23:49:34: 6b:91:e4:75:69:35:3a:42:e3:54:c2:c8:c1:8a:b0:c3:0b:bc: 90:72:e1:20:6c:23:8f:10:7f:f3:0e:2f:a8:84:f4:63:b2:55: 26:94:55:a9:04:07:35:f0:41:f1:1f:7a:6d:6d:db:07:bb:b7: fa:e3:45:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJM1McJMoo9a12kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk YTEzYWNlZGQtMWUzYy00YjRjLWFkNTEtNzQxYjZlYjg5ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuchNV+PAViGN1LOneJPlWiEOZWW8JUEwi+CX 7TWYY9csduG66HD57ePh+shMZxCgAEsysUaCZiNgKlGuvLuJeq8WzRDxST1ZyLgp dBK/hUXK6ai5FVmqLRlaQo92aOOWMXW3XI0JFBZq3V5NINBb9xcaNsnePLvqIIub waFtnvfKwzlm+H5iUPcHjPm+wEKCIdOGdkhvt6WmCNmHCdpVu8CQltZgXaUZ/IEN v5CnyEvY/32c8IVGnT8BFtEe5TJ/mB+gSCrgIZqYU5fdK+xpA9VNJjIaqEWy3i34 PsskdqUAW80i5XP3s98/KAcYplkHeRa6aApuRGd23wl81weRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEV+i79nck5duglb420PB5LR/64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRhYWY4MzUtMDM1ZC0z MDg3LWIxMzEtY2U3Mzg2ZDBlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaHLdo3iHkBNM74FzRwVkYWx+LN0fUXUV4JXRZxH7pBoNv1wD5QD1d+ aNS1p344zofsO2n0r2Mhkzxv+2Mu5b/6bWhl+n/3JsR12pwbqYcqUoowrZBWAcjE 7Hdbc9QqIhwkkNoJ54MgdKEBx1nW7+sMkMKGAbfLgdmrO+AVdctx1Cm4XkTcQY7y 4iqxfTTzXsGFDTQrgJZweFJDyC4w7veypCVvJ+CkNLQNFarCSOuhHswd+d/lDYeQ Wx+oolhrGxD2piNJNGuR5HVpNTpC41TCyMGKsMMLvJBy4SBsI48Qf/MOL6iE9GOy VSaUVakEBzXwQfEfem1t2we7t/rjRdE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:23 2024 by rpki-client on console-ams.rpki-client.org