$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa File: 0d785afa-2eb2-3c38-a376-7d262609e184.roa (raw, json) Hash identifier: umA6U6+nFVnE6j9WyHH9jnVPHrfpKfCAchEsYv6AoF8= Subject key identifier: FF:CB:C3:D7:F1:12:C0:2B:2B:C9:6C:1E:D7:4A:BA:6C:17:82:6E:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DAFF6285A878BBBAD4975B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa Signing time: Tue 12 Nov 2024 14:00:40 +0000 ROA not before: Tue 12 Nov 2024 14:00:40 +0000 ROA not after: Mon 10 Feb 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.208.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:ff:62:85:a8:78:bb:ba:d4:97:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 14:00:40 2024 GMT Not After : Feb 10 14:00:40 2025 GMT Subject: CN=bffbec8b-6b09-475e-89f5-8d67d76a9d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:c7:8c:d5:99:0d:27:79:cd:4d:5c:9e:df: c0:b9:df:be:16:bd:87:6f:cb:f9:07:10:64:5c:89: 0d:a9:fd:e7:92:21:c4:7a:69:b6:ad:b6:e6:8f:94: 0e:b3:31:c3:e6:20:ff:80:2a:1c:47:ce:3a:9e:5f: 8e:fe:f8:93:d0:82:73:8b:cd:ee:0f:62:7a:6e:97: 60:87:30:e8:4b:bd:2d:d4:12:24:17:8c:2c:76:07: f2:7f:d6:a6:bf:cc:c7:66:08:d0:1e:a3:18:29:89: 50:2d:3a:3b:ff:43:28:05:e0:60:e3:25:22:2b:d6: b8:9e:ce:dc:45:f1:88:9d:87:a5:d9:17:47:e0:16: 11:b4:f7:41:06:28:ac:52:08:36:a7:f7:5c:7a:4b: bc:74:71:a1:25:82:d6:f9:1e:4e:e2:21:c2:43:c9: 89:fa:a3:48:b7:d9:40:64:43:7f:f5:ad:c1:75:bd: cd:6f:1e:48:c0:e4:ed:c7:51:df:a7:68:9b:06:56: 85:50:0d:1c:02:9d:7f:66:1a:ea:fb:31:a0:d8:12: 1a:af:f4:c8:72:9a:d7:da:e4:dc:9f:11:09:d3:7e: 6e:81:2e:bf:d7:7e:c1:5f:5b:2d:89:01:f8:b6:4b: 10:f4:76:ef:23:f6:57:da:88:a8:81:2e:b5:d3:ae: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CB:C3:D7:F1:12:C0:2B:2B:C9:6C:1E:D7:4A:BA:6C:17:82:6E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:19:e9:31:43:70:f6:61:dc:12:0a:22:60:8c:bd:4e:49: 50:1c:5e:89:74:61:3b:57:04:fc:b3:13:c1:f5:12:e5:e1:66: a3:29:ca:3d:25:7e:36:0c:34:95:f7:5f:2e:b2:a0:e0:25:35: fe:34:a0:e5:e4:76:2a:66:e3:c4:57:56:ce:6f:02:1e:db:5c: 27:55:1b:1c:ae:17:a6:0b:b6:bf:ea:e6:c7:64:8f:cb:0d:64: 60:7a:28:f3:06:0b:ef:fa:1b:42:97:ca:a2:2d:52:72:dd:ba: c5:38:b6:1e:53:df:03:42:b6:6d:48:57:b7:c3:db:0b:41:1b: 1d:9d:68:e8:30:65:c3:20:7e:94:59:dc:2c:90:3d:9d:d2:ff: fc:79:dd:2a:7f:72:19:de:a9:e4:77:04:db:4d:b5:31:32:66: 6d:81:b8:30:b7:3c:b9:20:00:15:04:1a:75:07:87:80:f4:72: 3b:cf:38:86:f2:03:0e:07:99:7f:1a:7e:b4:45:92:d9:fb:18: d6:f5:5d:af:b4:79:ee:e1:9f:d8:b7:a3:dd:af:07:23:b3:ac: c1:b2:13:be:fe:41:a1:ba:bc:ef:6f:bb:18:4a:84:5e:b6:a5: 12:e7:70:70:8c:df:f9:f2:41:1c:c0:36:5b:66:29:68:42:fa: 83:ce:cb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa/2KFqHi7utSXWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk YmZmYmVjOGItNmIwOS00NzVlLTg5ZjUtOGQ2N2Q3NmE5ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl3HjNWZDSd5zU1cnt/Aud++Fr2Hb8v5BxBk XIkNqf3nkiHEemm2rbbmj5QOszHD5iD/gCocR846nl+O/viT0IJzi83uD2J6bpdg hzDoS70t1BIkF4wsdgfyf9amv8zHZgjQHqMYKYlQLTo7/0MoBeBg4yUiK9a4ns7c RfGInYel2RdH4BYRtPdBBiisUgg2p/dceku8dHGhJYLW+R5O4iHCQ8mJ+qNIt9lA ZEN/9a3Bdb3Nbx5IwOTtx1Hfp2ibBlaFUA0cAp1/Zhrq+zGg2BIar/TIcprX2uTc nxEJ035ugS6/137BX1stiQH4tksQ9HbvI/ZX2oiogS61067dEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/Lw9fxEsArK8lsHtdKumwXgm5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ3ODVhZmEtMmViMi0z YzM4LWEzNzYtN2QyNjI2MDllMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4XGekxQ3D2YdwSCiJgjL1OSVAcXol0YTtXBPyzE8H1EuXhZqMpyj0l fjYMNJX3Xy6yoOAlNf40oOXkdipm48RXVs5vAh7bXCdVGxyuF6YLtr/q5sdkj8sN ZGB6KPMGC+/6G0KXyqItUnLdusU4th5T3wNCtm1IV7fD2wtBGx2daOgwZcMgfpRZ 3CyQPZ3S//x53Sp/chneqeR3BNtNtTEyZm2BuDC3PLkgABUEGnUHh4D0cjvPOIby Aw4HmX8afrRFktn7GNb1Xa+0ee7hn9i3o92vByOzrMGyE77+QaG6vO9vuxhKhF62 pRLncHCM3/nyQRzANltmKWhC+oPOy9w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:12 2024 by rpki-client on console-fra.rpki-client.org