$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa File: 1c621c77-9539-33db-8fef-a54d1803dc68.roa (raw, json) Hash identifier: rDaq9DAeppUTPvToCksAgHMmmg0FUltHNSZT4pg9C/s= Subject key identifier: 54:5B:17:DE:DB:31:D8:46:87:49:C9:9B:D8:B7:D7:75:60:46:68:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64C2A21CB8AEB6F51E6CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.212.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:c2:a2:1c:b8:ae:b6:f5:1e:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=7bc74fb1-2fcd-4314-9fe5-8170eb4bc379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:2f:89:14:35:08:28:32:4d:6e:b0:24:5d: d2:7c:3c:71:3f:4d:99:58:7c:90:98:71:3b:69:0a: 9b:91:cf:d6:76:d9:b7:ac:d7:fa:4a:4f:d4:d8:c9: 5e:af:5e:f4:50:33:ff:6e:3b:76:61:e4:42:40:14: 23:68:30:63:20:a9:4e:82:68:21:95:78:dc:2b:e6: 87:f4:13:8a:82:0d:69:4c:2a:08:e0:e0:0e:6a:45: 88:f4:6f:c1:30:85:6a:89:1f:fd:4e:e5:fc:c5:8d: a1:d3:c8:87:c9:23:9c:fe:0c:a9:9a:b5:34:98:76: e7:6c:52:8c:72:82:2a:60:c2:4e:47:e0:40:eb:14: 28:b5:32:4b:55:a2:a2:27:84:9c:b1:88:9e:dc:e4: c9:b5:86:53:25:e9:d4:c6:e6:fa:9c:8a:de:65:34: 25:36:49:54:4b:28:d3:37:fa:b2:86:2a:dc:18:8a: 8b:fa:fa:51:2e:a9:47:9d:84:c4:c7:39:6f:a1:dc: cd:a7:39:65:d3:cf:2a:99:9e:3d:95:ff:6c:3d:1e: 54:82:31:bf:43:3d:34:1d:9c:83:bc:ee:8e:4d:96: ac:0d:18:03:07:72:c7:c1:af:ba:e5:0d:c5:35:94: 1b:cc:d0:a5:90:18:fd:98:be:80:3d:99:52:7f:6d: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5B:17:DE:DB:31:D8:46:87:49:C9:9B:D8:B7:D7:75:60:46:68:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:53:d6:9e:0c:4b:3a:b3:70:4c:5a:8f:da:a0:d7:bb:f9:02: ce:dc:47:be:f4:d4:a3:2b:75:c2:f1:3a:0a:5e:81:7f:00:43: f0:4a:9f:8a:9f:db:4d:37:c5:f5:84:de:6b:8c:61:4d:a9:5e: 22:09:6d:ca:55:e8:f3:ce:3c:10:11:1c:55:6b:2c:bf:61:a5: ca:f6:d4:c8:c6:a7:48:af:b7:4d:d2:48:a1:f9:53:d1:2b:20: 97:48:fa:29:82:e1:f5:81:4b:f9:2d:20:d1:49:22:fd:23:fa: 2c:9b:1c:6f:b4:51:a1:ba:c2:71:cb:9c:bc:73:30:7b:e7:7f: dc:2c:ac:3a:c1:1b:ea:38:f8:05:77:10:97:04:d6:23:90:8b: 3c:3b:aa:d6:ff:3d:ce:dd:d7:20:27:44:c0:1e:bf:2e:e1:2a: f9:be:ad:bb:d1:27:4e:61:20:2c:c3:d0:f6:bb:c5:08:df:22: a1:77:b3:28:72:1b:ac:46:d8:00:75:b6:fe:6b:cb:b1:d9:db: 9e:2b:54:7f:68:d1:04:1e:23:e6:21:ec:35:00:b2:36:64:8f: e3:15:15:fa:13:13:e8:59:70:84:12:f7:80:b3:bf:dc:d6:38: ad:bf:41:4a:29:7f:aa:40:c0:ae:a6:c5:07:3d:22:26:51:e9: 93:22:8e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZMKiHLiutvUebMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk N2JjNzRmYjEtMmZjZC00MzE0LTlmZTUtODE3MGViNGJjMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk8viRQ1CCgyTW6wJF3SfDxxP02ZWHyQmHE7 aQqbkc/Wdtm3rNf6Sk/U2Mler170UDP/bjt2YeRCQBQjaDBjIKlOgmghlXjcK+aH 9BOKgg1pTCoI4OAOakWI9G/BMIVqiR/9TuX8xY2h08iHySOc/gypmrU0mHbnbFKM coIqYMJOR+BA6xQotTJLVaKiJ4ScsYie3OTJtYZTJenUxub6nIreZTQlNklUSyjT N/qyhircGIqL+vpRLqlHnYTExzlvodzNpzll088qmZ49lf9sPR5UgjG/Qz00HZyD vO6OTZasDRgDB3LHwa+65Q3FNZQbzNClkBj9mL6APZlSf200ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRbF97bMdhGh0nJm9i313VgRmgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM2MjFjNzctOTUzOS0z M2RiLThmZWYtYTU0ZDE4MDNkYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9T1p4MSzqzcExaj9qg17v5As7cR7701KMrdcLxOgpegX8AQ/BKn4qf 2003xfWE3muMYU2pXiIJbcpV6PPOPBARHFVrLL9hpcr21MjGp0ivt03SSKH5U9Er IJdI+imC4fWBS/ktINFJIv0j+iybHG+0UaG6wnHLnLxzMHvnf9wsrDrBG+o4+AV3 EJcE1iOQizw7qtb/Pc7d1yAnRMAevy7hKvm+rbvRJ05hICzD0Pa7xQjfIqF3syhy G6xG2AB1tv5ry7HZ254rVH9o0QQeI+Yh7DUAsjZkj+MVFfoTE+hZcIQS94Czv9zW OK2/QUopf6pAwK6mxQc9IiZR6ZMijhE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:24 2024 by rpki-client on console-fra.rpki-client.org