$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f46a81-886d-35d1-8523-e84336d83c5b.roa File: d4f46a81-886d-35d1-8523-e84336d83c5b.roa (raw, json) Hash identifier: 0Lm5c4kUBQJEnnVRXnzdKrPGubAaRThKtLCizxKEZKg= Subject key identifier: F0:4E:FA:B4:A9:51:FA:5B:63:8B:B1:85:E0:2C:C5:3D:45:25:F0:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CC7F852FD4C1A5A37740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f46a81-886d-35d1-8523-e84336d83c5b.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cc:7f:85:2f:d4:c1:a5:a3:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=1e260276-0e26-4a88-8042-9fa029792866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:43:b6:70:61:61:72:69:86:bb:6e:39:cd: 39:57:46:72:3a:97:95:3f:ac:f6:2a:f7:fd:3c:66: 9c:8f:84:62:a0:d4:94:e1:a1:ba:08:ed:16:97:6d: 74:b7:53:b4:68:4b:69:f3:c6:d1:58:32:8f:5f:0a: a2:ce:32:d5:10:34:32:50:cc:81:55:7f:89:c1:2c: 7f:a1:b5:87:68:f4:d6:c9:02:c6:85:f5:55:4f:89: e8:dc:fc:56:64:77:e1:18:e1:63:94:a4:a6:56:af: ce:da:f0:cb:eb:c5:d8:46:6a:ae:f2:d1:35:3e:ca: 17:bc:27:a7:2f:a5:b8:36:4e:3d:3b:83:aa:a6:10: 12:d7:aa:54:51:23:0d:56:b1:b0:2d:a2:c3:07:da: 01:64:78:0d:50:a3:75:ad:99:31:8e:43:46:a4:b4: fa:2a:47:35:66:00:f2:39:6e:22:0b:c2:7f:9e:14: 89:cb:46:62:02:15:e0:60:61:83:b4:78:84:bc:11: 74:a5:e1:97:d7:37:77:e0:e4:68:15:02:95:1a:e0: 2e:3b:43:69:88:b7:d1:e7:4d:44:d3:0f:88:b7:a5: a5:70:e9:cd:78:bf:28:13:47:1b:0f:89:b3:61:fc: ac:8c:13:f2:af:49:5a:06:fd:90:ec:db:68:45:34: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:FA:B4:A9:51:FA:5B:63:8B:B1:85:E0:2C:C5:3D:45:25:F0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f46a81-886d-35d1-8523-e84336d83c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0a:c0:0b:ad:72:4e:a6:d9:90:aa:7a:28:80:f7:57:85:3d: d6:23:84:50:4a:7b:d2:c3:3c:89:bd:c0:89:58:0a:d2:f4:bc: fc:6c:80:bb:42:f4:40:d2:85:fc:13:06:aa:65:56:95:e6:2e: 8a:89:20:90:f9:60:d4:93:ca:4b:14:3f:d1:e9:ce:98:03:d4: 14:fc:19:0e:b0:b4:0c:59:cd:77:f2:d5:a8:7e:73:56:61:79: 25:0a:3a:95:fb:7c:1c:9a:ef:49:26:68:8a:d7:00:95:9b:39: d6:c2:65:c9:51:d0:3a:54:64:89:c9:d2:75:ac:b8:20:89:0d: 71:2f:f6:6c:2d:d6:7b:ae:a1:c7:7c:0a:89:f2:fd:e1:b1:bb: 08:57:70:fb:9a:4d:7f:b6:78:08:e8:5e:dc:3f:4a:42:00:b7: d8:b3:10:ef:4d:85:a5:c7:9a:d5:60:37:59:92:c2:69:46:34: 96:8b:bf:20:c8:ff:93:a9:00:6a:43:20:be:d4:fe:10:70:4b: 69:21:d0:61:4b:d1:22:9f:13:aa:58:73:a6:08:c0:b9:54:67: 47:fe:b3:61:d6:44:0b:4d:07:aa:c1:48:53:53:29:11:0f:92: bd:51:d3:e4:36:ca:20:68:03:9c:02:b4:b0:34:02:1f:47:3c: ea:aa:55:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMx/hS/UwaWjd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MWUyNjAyNzYtMGUyNi00YTg4LTgwNDItOWZhMDI5NzkyODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiutDtnBhYXJphrtuOc05V0ZyOpeVP6z2Kvf9 PGacj4RioNSU4aG6CO0Wl210t1O0aEtp88bRWDKPXwqizjLVEDQyUMyBVX+JwSx/ obWHaPTWyQLGhfVVT4no3PxWZHfhGOFjlKSmVq/O2vDL68XYRmqu8tE1PsoXvCen L6W4Nk49O4OqphAS16pUUSMNVrGwLaLDB9oBZHgNUKN1rZkxjkNGpLT6Kkc1ZgDy OW4iC8J/nhSJy0ZiAhXgYGGDtHiEvBF0peGX1zd34ORoFQKVGuAuO0NpiLfR501E 0w+It6WlcOnNeL8oE0cbD4mzYfysjBPyr0laBv2Q7NtoRTSD8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBO+rSpUfpbY4uxheAsxT1FJfDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRmNDZhODEtODg2ZC0z NWQxLTg1MjMtZTg0MzM2ZDgzYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQKwAutck6m2ZCqeiiA91eFPdYjhFBKe9LDPIm9wIlYCtL0vPxsgLtC 9EDShfwTBqplVpXmLoqJIJD5YNSTyksUP9HpzpgD1BT8GQ6wtAxZzXfy1ah+c1Zh eSUKOpX7fBya70kmaIrXAJWbOdbCZclR0DpUZInJ0nWsuCCJDXEv9mwt1nuuocd8 Cony/eGxuwhXcPuaTX+2eAjoXtw/SkIAt9izEO9NhaXHmtVgN1mSwmlGNJaLvyDI /5OpAGpDIL7U/hBwS2kh0GFL0SKfE6pYc6YIwLlUZ0f+s2HWRAtNB6rBSFNTKREP kr1R0+Q2yiBoA5wCtLA0Ah9HPOqqVSc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:30 2024 by rpki-client on console-ams.rpki-client.org