$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa File: fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa (raw, json) Hash identifier: rmAxslCX+Du7FFfvCjyp8uHXUeOLLmkqU4U8gkIRLQg= Subject key identifier: 43:26:2B:CA:C6:63:4F:63:0F:5A:2A:A2:C6:81:40:F3:50:65:46:8A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285847600B82431BBEAA7555629C80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 396982 IP address blocks: 23.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:82:43:1b:be:aa:75:55:62:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=50cb618e-b2b3-429c-abce-a0532db0bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8b:93:e5:55:16:a8:ba:8d:8d:f3:04:e1:77: cf:d1:d9:b2:a6:5f:e3:9b:83:23:3d:60:31:0a:20: 82:27:dc:89:4a:72:85:06:2b:69:7e:95:29:2b:74: ad:9e:bd:13:f2:47:76:d2:ee:0d:1e:6b:2b:c2:27: 33:58:5f:cf:9b:4e:60:16:80:31:41:91:2d:fe:02: b5:d8:7c:a3:ab:93:27:0f:51:4d:e7:14:f2:0e:64: 41:16:69:ad:a4:02:98:57:20:02:69:b2:b8:3e:2d: cd:8b:8a:6b:15:4b:17:ea:6c:ad:73:bd:8c:20:c0: fc:1b:fa:26:fd:b3:d0:ce:14:3f:ba:f0:b0:da:9f: e0:aa:78:18:60:9c:f7:51:14:9e:cf:49:4c:a1:48: 8d:8a:11:aa:ec:68:56:e5:55:cb:88:f1:f3:c7:d2: 81:ee:b3:76:5d:25:40:89:2b:84:84:49:57:d0:b4: 7f:a8:00:71:75:f7:a2:86:9f:68:83:87:42:fd:27: 56:54:64:46:19:df:a4:d4:f8:cf:55:0f:e9:27:fe: 7f:7f:5c:ef:ac:7f:1b:ad:a8:e2:69:b0:bd:06:4e: af:69:bd:c9:54:ab:e3:be:e0:6b:3e:58:06:5c:45: dc:65:b1:e7:fb:54:65:8a:0d:12:53:10:72:e5:01: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:26:2B:CA:C6:63:4F:63:0F:5A:2A:A2:C6:81:40:F3:50:65:46:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:57:0b:e6:81:e6:08:c6:f1:02:a9:db:4d:94:5a:0b:76:7e: 7c:fe:5b:dc:4d:e6:81:a2:d8:38:30:cf:b3:a3:6a:d2:a5:2a: e2:21:73:a3:0e:e7:bc:94:9d:32:9d:81:66:99:8b:2c:0b:0a: f3:64:ed:b0:ac:ec:a2:94:c6:c1:e4:4b:af:73:17:6f:04:c0: 02:05:0d:8e:76:d6:80:02:7e:52:b6:9b:a3:15:38:66:66:31: 16:0a:27:da:73:c5:4c:0b:8f:9c:ae:96:29:4e:01:88:3b:7d: f2:dc:12:9a:1a:e0:2d:76:19:31:c4:61:47:2e:81:11:1c:0f: 66:e1:5a:69:b2:ba:05:ab:01:54:97:e0:0a:84:81:44:38:a4: 58:75:3c:9b:0e:b9:36:47:e7:b5:68:38:ff:f5:bc:70:9e:41: 55:ea:2a:3e:e0:bc:42:1e:e3:96:0a:b5:55:f7:99:85:0f:52: 90:7f:10:31:b2:b5:8b:29:72:e2:d5:60:e2:cc:f1:70:a6:29: 85:a5:c8:af:13:78:f9:4e:10:b8:b0:d4:68:cc:15:fe:dd:10: 4d:64:55:47:64:24:f7:f6:3c:d7:0b:f3:19:0b:4b:1b:09:1a: 47:0b:db:df:ce:15:a0:c9:50:4b:dd:d2:23:66:1b:ca:c9:fa: 9a:d1:19:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4JDG76qdVVinIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NTBjYjYxOGUtYjJiMy00MjljLWFiY2UtYTA1MzJkYjBiYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIuT5VUWqLqNjfME4XfP0dmypl/jm4MjPWAx CiCCJ9yJSnKFBitpfpUpK3Stnr0T8kd20u4NHmsrwiczWF/Pm05gFoAxQZEt/gK1 2Hyjq5MnD1FN5xTyDmRBFmmtpAKYVyACabK4Pi3Ni4prFUsX6mytc72MIMD8G/om /bPQzhQ/uvCw2p/gqngYYJz3URSez0lMoUiNihGq7GhW5VXLiPHzx9KB7rN2XSVA iSuEhElX0LR/qABxdfeihp9og4dC/SdWVGRGGd+k1PjPVQ/pJ/5/f1zvrH8braji abC9Bk6vab3JVKvjvuBrPlgGXEXcZbHn+1Rlig0SUxBy5QFKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMmK8rGY09jD1oqosaBQPNQZUaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmUyYjYxYmQtYjRiMy0z N2ZlLWJkNGYtZWExOTNlMjQzNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFXC+aB5gjG8QKp202UWgt2fnz+W9xN5oGi2Dgwz7OjatKlKuIhc6MO 57yUnTKdgWaZiywLCvNk7bCs7KKUxsHkS69zF28EwAIFDY521oACflK2m6MVOGZm MRYKJ9pzxUwLj5yulilOAYg7ffLcEpoa4C12GTHEYUcugREcD2bhWmmyugWrAVSX 4AqEgUQ4pFh1PJsOuTZH57VoOP/1vHCeQVXqKj7gvEIe45YKtVX3mYUPUpB/EDGy tYspcuLVYOLM8XCmKYWlyK8TePlOELiw1GjMFf7dEE1kVUdkJPf2PNcL8xkLSxsJ GkcL29/OFaDJUEvd0iNmG8rJ+prRGUk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org