$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa File: 07a41375-a83a-33b8-9935-9f5804eb373d.roa (raw, json) Hash identifier: qztY/QGpkuOn+5m5KfElp8DzI+Bg1za1GxU/vr9csHg= Subject key identifier: 4A:90:C3:DB:F6:34:41:E0:71:DF:B4:05:61:35:59:E0:DC:90:9E:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DAFF6550AAC4C38B47130D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa Signing time: Tue 12 Nov 2024 14:00:40 +0000 ROA not before: Tue 12 Nov 2024 14:00:40 +0000 ROA not after: Mon 10 Feb 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.208.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:ff:65:50:aa:c4:c3:8b:47:13:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 14:00:40 2024 GMT Not After : Feb 10 14:00:40 2025 GMT Subject: CN=d482794f-7311-46d5-af24-387f7a646c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:42:01:5a:a9:41:fb:62:dc:9a:aa:07:37: a8:c0:b7:0f:37:c2:ec:39:a0:05:9e:b7:f1:b3:25: 58:01:ae:b3:10:8c:dc:02:23:39:00:b1:d2:3b:b7: ac:b3:bc:3a:be:7b:ef:45:7e:9b:d8:1b:0c:1b:58: 7d:bb:45:d2:94:b7:0f:71:27:be:c4:2d:45:b8:70: 88:ba:bd:7f:37:e0:1a:cc:6d:eb:b5:54:cb:4b:ad: 81:07:46:b3:b1:b5:4a:f2:81:dc:3b:ec:21:d8:4d: de:b6:e1:90:b6:af:33:1d:2a:40:82:69:d6:86:bf: 69:bf:06:c2:bf:4c:cb:0d:e4:ea:6f:bc:d3:67:cf: f3:f6:5f:bd:58:f5:11:7b:d5:78:7c:16:cf:7c:ef: 1b:19:db:bc:3d:5a:97:f4:d8:e9:af:85:71:98:de: 43:8c:f5:a2:fc:39:46:85:0a:f8:c5:33:51:a1:d0: ac:62:eb:e3:88:14:29:14:f1:f3:98:5c:d4:02:09: 9a:25:a0:38:1d:a1:16:90:aa:66:12:c1:4a:4f:66: 3a:dd:8a:5f:19:95:2c:1f:44:4c:8c:65:67:63:c3: 60:17:8e:7e:e4:b3:39:ea:55:ee:86:f5:6d:61:53: d6:74:af:0f:dd:85:83:05:5f:e5:8f:ed:d4:4e:1d: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:C3:DB:F6:34:41:E0:71:DF:B4:05:61:35:59:E0:DC:90:9E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a8:e1:6a:37:6a:0a:a9:d4:0b:0d:06:ee:d7:2d:8e:0e:89: 2f:e8:de:ab:6c:20:2d:e7:8c:7d:59:2b:4b:63:ba:c5:73:24: 16:48:77:ba:92:a4:41:8e:17:a1:f9:64:11:a2:25:ac:38:16: 11:a2:ad:24:93:14:47:cc:20:f1:6a:d3:03:48:d8:ea:f9:29: 46:c3:3e:15:37:12:06:24:29:4c:2d:0d:72:9c:e2:2f:58:76: 8d:8f:14:27:92:8e:8d:68:44:a5:56:31:1f:b0:88:28:38:02: 22:2d:43:f6:88:55:98:9b:d5:dd:5e:3c:62:d5:e6:1c:52:06: 1c:e9:be:16:b7:e8:67:2d:8e:f3:22:78:23:63:5d:67:b8:d4: 6b:23:8f:9d:43:db:80:30:7e:4d:77:97:3c:31:f3:5f:20:35: 27:d9:03:72:15:1a:66:f7:be:d2:6b:88:40:fe:ae:93:52:c7: ef:e8:bf:a9:db:65:9d:8a:01:bc:a5:37:1d:4d:cc:a9:b7:db: bb:db:9d:3f:bc:25:bf:13:23:8f:27:01:22:39:35:d8:6a:a1: b3:2c:cc:c0:5a:54:3d:e5:b9:b4:35:ff:33:24:8d:23:e4:89: f0:ff:82:bb:0e:8e:1a:3e:94:05:41:ce:86:e9:0c:00:a3:cc: 59:ba:6c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa/2VQqsTDi0cTDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk ZDQ4Mjc5NGYtNzMxMS00NmQ1LWFmMjQtMzg3ZjdhNjQ2YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJNCAVqpQfti3JqqBzeowLcPN8LsOaAFnrfx syVYAa6zEIzcAiM5ALHSO7ess7w6vnvvRX6b2BsMG1h9u0XSlLcPcSe+xC1FuHCI ur1/N+AazG3rtVTLS62BB0azsbVK8oHcO+wh2E3etuGQtq8zHSpAgmnWhr9pvwbC v0zLDeTqb7zTZ8/z9l+9WPURe9V4fBbPfO8bGdu8PVqX9Njpr4VxmN5DjPWi/DlG hQr4xTNRodCsYuvjiBQpFPHzmFzUAgmaJaA4HaEWkKpmEsFKT2Y63YpfGZUsH0RM jGVnY8NgF45+5LM56lXuhvVtYVPWdK8P3YWDBV/lj+3UTh2AFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqQw9v2NEHgcd+0BWE1WeDckJ41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdhNDEzNzUtYTgzYS0z M2I4LTk5MzUtOWY1ODA0ZWIzNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqo4Wo3agqp1AsNBu7XLY4OiS/o3qtsIC3njH1ZK0tjusVzJBZId7qS pEGOF6H5ZBGiJaw4FhGirSSTFEfMIPFq0wNI2Or5KUbDPhU3EgYkKUwtDXKc4i9Y do2PFCeSjo1oRKVWMR+wiCg4AiItQ/aIVZib1d1ePGLV5hxSBhzpvha36GctjvMi eCNjXWe41Gsjj51D24Awfk13lzwx818gNSfZA3IVGmb3vtJriED+rpNSx+/ov6nb ZZ2KAbylNx1NzKm327vbnT+8Jb8TI48nASI5NdhqobMszMBaVD3lubQ1/zMkjSPk ifD/grsOjho+lAVBzobpDACjzFm6bN8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:21 2024 by rpki-client on console-ams.rpki-client.org