$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d20c7023-cd01-33e9-9ca8-81a5016f53bb.roa File: d20c7023-cd01-33e9-9ca8-81a5016f53bb.roa (raw, json) Hash identifier: 2Z9bGbMjS5lZAVqsRlKi8c4r9LzoG7n0jzWCRAQXwVo= Subject key identifier: 28:46:22:87:F4:66:A8:CF:78:4D:CC:38:E1:70:C4:9C:A9:49:14:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475D40E008FFBC26CF4DA40DF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d20c7023-cd01-33e9-9ca8-81a5016f53bb.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 20940 IP address blocks: 23.222.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:e0:08:ff:bc:26:cf:4d:a4:0d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=ad0713e2-ade6-4e8f-abbd-ad3b66ba8720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:1a:91:b9:57:12:3c:98:4d:8b:5f:aa:ca: f7:b0:27:15:c2:eb:e4:6b:eb:c5:5e:6a:7a:d8:49: b0:cd:56:18:ee:ca:9f:fc:79:01:ee:71:69:a7:dd: 67:06:83:53:61:cd:52:0b:a7:6c:11:0f:93:d1:a3: 09:4c:36:64:e7:c9:1e:38:ca:07:fd:ee:de:34:d1: 9d:f3:4f:22:66:2e:94:8d:15:52:9c:7a:8f:c6:30: 2d:2f:a4:bc:c9:e9:fb:5f:e5:32:50:10:bd:ee:6d: 67:49:df:ab:31:a2:fc:7d:60:ab:e2:9c:cb:70:af: b0:dc:11:11:2e:e9:56:7a:b2:47:7a:30:1a:48:16: 5d:22:49:6b:af:60:84:a1:62:a0:2a:6f:57:d7:3c: 55:0d:af:1a:c1:79:bb:99:47:32:4b:4f:9c:35:0c: 0b:4b:7e:e2:22:9a:2e:46:aa:99:7c:6e:18:93:78: 4c:96:83:31:41:82:8a:a7:58:8b:33:90:1c:a0:10: cf:13:ca:c5:4f:fa:75:60:dc:87:df:9e:19:8c:42: dd:45:1d:83:e1:9d:f5:f7:1f:03:a8:6e:1b:91:48: db:6b:94:6d:a9:06:19:8c:df:cb:da:db:12:7e:f0: 31:2a:3e:59:e7:30:df:0c:b4:3a:21:fb:6e:b5:62: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:46:22:87:F4:66:A8:CF:78:4D:CC:38:E1:70:C4:9C:A9:49:14:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d20c7023-cd01-33e9-9ca8-81a5016f53bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7b:9d:0e:b4:ee:fb:d6:36:b7:51:94:61:a8:b3:3d:29:ba: d6:31:4a:b3:f5:6a:02:4c:f1:42:52:d1:82:70:5e:15:7c:95: 40:43:73:d5:e8:ba:f0:f8:5a:d8:3a:de:28:80:dd:aa:be:57: 59:bb:21:a3:bd:5d:84:2b:a6:4b:c3:c2:d9:db:ea:29:8d:56: a8:f9:87:e8:fd:30:60:3c:5d:b9:47:41:27:0b:bc:07:c0:64: bf:4a:78:5c:62:4f:63:db:a6:ce:76:cf:1a:16:d5:97:1e:16: 14:e4:69:94:cd:08:ab:55:f9:36:2a:02:a9:64:73:d0:23:25: eb:f9:52:58:c3:c5:66:51:63:35:7c:04:c1:9e:b9:65:a4:0d: 5c:a1:fe:35:0f:ea:9d:a3:a9:12:4c:e0:6a:51:21:ff:75:5e: 75:4b:4f:a2:07:b1:a6:28:c9:9d:10:93:8a:78:12:8b:43:e3: 16:e4:0a:2a:60:ef:04:db:7a:b6:f1:e2:8c:f1:0e:17:49:cb: 67:60:51:26:7b:c2:ab:a3:e6:e1:58:d0:1b:19:20:36:f2:5b: 46:b9:48:6d:3c:72:79:ab:13:25:ff:79:14:13:a6:da:7d:4a: dd:d2:90:11:42:ee:27:65:33:fa:c9:f1:62:fe:fb:fe:6b:aa: c9:51:db:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQOAI/7wmz02kDfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWQwNzEzZTItYWRlNi00ZThmLWFiYmQtYWQzYjY2YmE4NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/gakblXEjyYTYtfqsr3sCcVwuvka+vFXmp6 2EmwzVYY7sqf/HkB7nFpp91nBoNTYc1SC6dsEQ+T0aMJTDZk58keOMoH/e7eNNGd 808iZi6UjRVSnHqPxjAtL6S8yen7X+UyUBC97m1nSd+rMaL8fWCr4pzLcK+w3BER LulWerJHejAaSBZdIklrr2CEoWKgKm9X1zxVDa8awXm7mUcyS0+cNQwLS37iIpou RqqZfG4Yk3hMloMxQYKKp1iLM5AcoBDPE8rFT/p1YNyH354ZjELdRR2D4Z319x8D qG4bkUjba5RtqQYZjN/L2tsSfvAxKj5Z5zDfDLQ6IftutWKOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChGIof0ZqjPeE3MOOFwxJypSRSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDIwYzcwMjMtY2QwMS0z M2U5LTljYTgtODFhNTAxNmY1M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF954MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD17nQ607vvWNrdRlGGosz0putYxSrP1agJM8UJS0YJwXhV8lUBDc9Xo uvD4Wtg63iiA3aq+V1m7IaO9XYQrpkvDwtnb6imNVqj5h+j9MGA8XblHQScLvAfA ZL9KeFxiT2Pbps52zxoW1ZceFhTkaZTNCKtV+TYqAqlkc9AjJev5UljDxWZRYzV8 BMGeuWWkDVyh/jUP6p2jqRJM4GpRIf91XnVLT6IHsaYoyZ0Qk4p4EotD4xbkCipg 7wTberbx4ozxDhdJy2dgUSZ7wquj5uFY0BsZIDbyW0a5SG08cnmrEyX/eRQTptp9 St3SkBFC7idlM/rJ8WL++/5rqslR2+o= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:29 2024 by rpki-client on console-ams.rpki-client.org