$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa File: 10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa (raw, json) Hash identifier: mMp+DKPL1hdEakMNqsxKvUhQcaBbq4mMUgX22hicbPc= Subject key identifier: 13:8C:E7:F4:3A:CB:CB:18:5B:68:33:76:77:91:6B:F7:C6:D2:9E:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CCE3CB735F2F4792A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.221.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cc:e3:cb:73:5f:2f:47:92:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=e923677b-42ef-42e4-af14-6f90fa69745f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:a2:23:3e:ef:46:e8:bf:ad:c2:eb:ec:a3: 44:36:84:eb:d5:4b:ba:da:2b:37:3e:d0:95:9e:c6: 86:28:ba:3b:a7:cc:55:6e:0f:58:bd:13:03:ad:0f: 3b:8b:b3:cd:c1:ac:bd:e8:a2:d0:2e:92:23:04:63: 0a:91:de:cb:b2:da:b1:23:ba:48:74:f5:9c:3a:5e: bf:ed:3d:51:6f:26:4b:d2:c4:89:dc:2b:c4:64:d4: 0a:79:2f:c7:40:ed:b0:7e:f2:4a:9e:89:97:ea:c4: f8:7b:c3:6c:99:fa:92:b9:8c:96:ed:17:42:26:c2: 49:e6:fe:f2:97:c8:3c:22:6f:d5:97:c3:6d:c7:7e: 1b:7b:e5:20:ef:5c:6c:18:78:78:3c:10:e1:2e:1e: df:71:94:68:bf:6d:a0:15:d2:0e:ad:51:23:59:46: 75:66:ee:ab:48:64:11:3f:15:2a:1b:d9:c6:6b:1f: 56:26:75:23:39:1e:02:d3:ce:76:74:98:e7:8b:60: 9e:f6:36:66:99:6e:f7:ed:d4:cf:b9:c2:83:f1:17: fb:bf:ea:2f:06:0e:38:f9:4f:7b:09:b9:67:68:46: 94:3c:a0:f7:8b:e8:5d:27:b7:d8:01:60:3c:03:61: b2:47:3a:ea:41:35:27:7c:bf:53:15:6b:6b:d5:6e: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8C:E7:F4:3A:CB:CB:18:5B:68:33:76:77:91:6B:F7:C6:D2:9E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a9c0fc-e510-356b-9331-3b41a9ce1e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:38:10:24:28:d9:31:c9:c0:9a:94:6b:ed:85:9c:97:8f:fe: 02:0b:73:03:7f:c5:b6:d2:3b:7a:dc:a0:44:e1:42:5a:bb:7c: 43:c1:2c:e9:74:59:fc:93:8f:b0:86:ba:cb:0e:a6:02:59:87: 5e:19:42:ce:f8:7a:fa:80:ba:4c:78:64:93:b5:78:56:0d:18: 35:e5:be:58:ac:57:3d:c4:a4:28:04:6e:1f:42:04:ae:fd:c7: f5:93:37:5b:86:ad:19:3d:39:94:5d:cc:bb:11:10:b7:5e:45: a7:bc:2a:9c:a0:08:f2:3b:5f:7c:0f:f2:bd:1d:e5:9e:8f:98: 45:db:7d:cd:bc:7d:69:de:25:e7:1a:46:d9:60:ee:df:93:b1: 4f:0d:54:c6:55:56:a6:6a:44:7a:09:19:a2:f9:45:1c:79:6f: 09:6f:74:62:ab:f6:5b:8d:13:f7:23:94:12:5b:b4:fb:de:cf: 1c:2c:33:51:c0:eb:e7:e5:22:24:8d:1a:2e:7c:fd:28:bc:87: 37:de:0d:71:55:19:43:ec:cf:07:82:ce:18:42:3e:19:fa:56: 7e:12:a0:b4:ca:af:15:fb:ed:3c:88:58:a7:98:ec:2e:11:ea: fe:6f:90:91:36:ad:00:8a:25:15:63:5c:2f:f5:0b:49:7a:96: ba:cb:d0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMzjy3NfL0eSogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZTkyMzY3N2ItNDJlZi00MmU0LWFmMTQtNmY5MGZhNjk3NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgSiIz7vRui/rcLr7KNENoTr1Uu62is3PtCV nsaGKLo7p8xVbg9YvRMDrQ87i7PNway96KLQLpIjBGMKkd7LstqxI7pIdPWcOl6/ 7T1RbyZL0sSJ3CvEZNQKeS/HQO2wfvJKnomX6sT4e8NsmfqSuYyW7RdCJsJJ5v7y l8g8Im/Vl8Ntx34be+Ug71xsGHh4PBDhLh7fcZRov22gFdIOrVEjWUZ1Zu6rSGQR PxUqG9nGax9WJnUjOR4C0852dJjni2Ce9jZmmW737dTPucKD8Rf7v+ovBg44+U97 CblnaEaUPKD3i+hdJ7fYAWA8A2GyRzrqQTUnfL9TFWtr1W7feQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOM5/Q6y8sYW2gzdneRa/fG0p6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBhOWMwZmMtZTUxMC0z NTZiLTkzMzEtM2I0MWE5Y2UxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF91IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM4ECQo2THJwJqUa+2FnJeP/gILcwN/xbbSO3rcoEThQlq7fEPBLOl0 WfyTj7CGussOpgJZh14ZQs74evqAukx4ZJO1eFYNGDXlvlisVz3EpCgEbh9CBK79 x/WTN1uGrRk9OZRdzLsRELdeRae8KpygCPI7X3wP8r0d5Z6PmEXbfc28fWneJeca Rtlg7t+TsU8NVMZVVqZqRHoJGaL5RRx5bwlvdGKr9luNE/cjlBJbtPvezxwsM1HA 6+flIiSNGi58/Si8hzfeDXFVGUPszweCzhhCPhn6Vn4SoLTKrxX77TyIWKeY7C4R 6v5vkJE2rQCKJRVjXC/1C0l6lrrL0Bc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:19 2024 by rpki-client on console-fra.rpki-client.org