$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11bcfc19-3ed2-3492-a126-95cf1676f09a.roa File: 11bcfc19-3ed2-3492-a126-95cf1676f09a.roa (raw, json) Hash identifier: 25yA5rS+LdvNDEaqlBZRZ1lIo1m7Yvz5Hr/Qfl/zWvo= Subject key identifier: A2:A6:91:5F:37:73:E2:08:4C:9D:09:38:51:67:15:40:1D:7C:18:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24CF1FB6A553094ECCC5E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11bcfc19-3ed2-3492-a126-95cf1676f09a.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.222.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:cf:1f:b6:a5:53:09:4e:cc:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=ea859d7e-3757-4c17-b406-4f03246315cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:b3:e4:69:4b:6d:80:68:95:61:85:38:31: 68:b3:bd:ab:d8:ba:24:9c:fe:38:a5:c7:67:dc:10: ab:1a:36:47:f7:1c:d0:a2:8a:60:4d:1c:d0:7c:9e: de:6b:4a:01:4e:18:fe:48:2a:cf:2c:0c:e8:ed:f8: 99:fe:a5:24:c8:45:63:1f:b8:4e:60:93:f9:69:3a: fe:5a:56:4f:2a:8c:1e:60:49:a6:a7:7a:d3:f5:17: e5:2b:33:76:5b:41:6d:05:81:ed:b7:17:12:29:dd: de:38:df:23:95:47:45:48:ac:73:f8:00:9f:ca:30: 64:31:89:a9:a2:0e:d3:60:cd:cf:6b:9e:99:34:6f: ca:eb:bd:3b:59:dc:f3:5d:a4:ca:b4:02:a3:57:a5: c0:66:d1:25:9b:a9:88:2e:8e:e9:98:fb:52:45:18: a4:9a:89:17:19:62:85:9c:44:ca:55:2b:88:ea:ea: e1:2b:81:c3:bd:48:5f:b2:0c:1e:66:7b:1c:7d:1d: e1:9d:31:8f:10:2c:a9:c8:8f:83:12:25:6a:5c:59: 9a:60:79:71:ac:be:b8:4c:28:5a:56:17:de:10:77: 06:3a:e0:30:8b:a7:12:4c:32:03:75:09:55:ad:63: d4:37:49:18:24:57:98:35:2b:a9:ea:21:97:f8:a3: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:91:5F:37:73:E2:08:4C:9D:09:38:51:67:15:40:1D:7C:18:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11bcfc19-3ed2-3492-a126-95cf1676f09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:35:5d:73:7b:3e:42:18:cb:e6:ef:ad:d6:42:b3:30:38: 0b:a4:c3:18:cd:1b:e5:c0:c7:fd:76:74:a9:c7:2a:05:c1:9f: 80:c1:54:fc:f2:40:ca:8b:43:55:3e:4d:71:09:62:46:d3:37: 00:64:12:39:e0:9b:a9:01:25:46:d9:67:1c:f9:ae:c4:a0:f7: 0f:8b:d2:d8:3a:bc:0c:42:69:cd:9d:f3:92:b9:66:2c:ab:87: dc:99:f8:88:b1:06:e2:4f:81:97:ce:30:4d:81:58:ed:14:c5: 78:f7:a6:5f:11:3c:1d:f4:37:24:dc:73:3d:f7:16:34:e9:f1: 2f:1b:e1:9c:85:6f:40:4e:23:ca:6d:5f:a5:7b:e6:08:7d:d0: 43:ee:9b:d8:29:17:77:f4:9e:31:2f:22:7b:5e:40:0d:2b:46: c3:c5:00:d2:76:08:ae:27:f9:80:65:49:e0:32:6a:39:fa:2f: c7:7d:cd:38:b7:ea:c1:db:f2:2e:57:71:f5:ec:b3:06:af:b8: 13:6f:cf:fa:1d:71:68:32:38:c1:82:ce:7f:b4:f0:c9:f6:91: 44:7c:99:f6:1b:36:12:cb:c5:dc:e0:c9:c1:bf:4f:18:0e:28: d7:d8:c9:d4:e8:61:56:97:bf:75:1f:3a:0a:d7:31:11:0a:6e: c8:cc:72:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJM8ftqVTCU7MxeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZWE4NTlkN2UtMzc1Ny00YzE3LWI0MDYtNGYwMzI0NjMxNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCmz5GlLbYBolWGFODFos72r2LoknP44pcdn 3BCrGjZH9xzQoopgTRzQfJ7ea0oBThj+SCrPLAzo7fiZ/qUkyEVjH7hOYJP5aTr+ WlZPKoweYEmmp3rT9RflKzN2W0FtBYHttxcSKd3eON8jlUdFSKxz+ACfyjBkMYmp og7TYM3Pa56ZNG/K6707WdzzXaTKtAKjV6XAZtElm6mILo7pmPtSRRikmokXGWKF nETKVSuI6urhK4HDvUhfsgweZnscfR3hnTGPECypyI+DEiVqXFmaYHlxrL64TCha VhfeEHcGOuAwi6cSTDIDdQlVrWPUN0kYJFeYNSup6iGX+KPrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKmkV83c+IITJ0JOFFnFUAdfBikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFiY2ZjMTktM2VkMi0z NDkyLWExMjYtOTVjZjE2NzZmMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF978MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIlNV1zez5CGMvm763WQrMwOAukwxjNG+XAx/12dKnHKgXBn4DBVPzy QMqLQ1U+TXEJYkbTNwBkEjngm6kBJUbZZxz5rsSg9w+L0tg6vAxCac2d85K5Ziyr h9yZ+IixBuJPgZfOME2BWO0UxXj3pl8RPB30NyTccz33FjTp8S8b4ZyFb0BOI8pt X6V75gh90EPum9gpF3f0njEvInteQA0rRsPFANJ2CK4n+YBlSeAyajn6L8d9zTi3 6sHb8i5XcfXsswavuBNvz/odcWgyOMGCzn+08Mn2kUR8mfYbNhLLxdzgycG/TxgO KNfYydToYVaXv3UfOgrXMREKbsjMchg= -----END CERTIFICATE-----Generated at Mon Nov 25 20:19:29 2024 by rpki-client on console-fra.rpki-client.org