$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa File: 20750c93-c082-363f-9cd7-0107290f069a.roa (raw, json) Hash identifier: xxe2xD2+h+XFx50CTmlxaSW3ZlrWZ76PmmEeOJ4fD6o= Subject key identifier: C0:14:E9:77:34:20:EC:7D:86:60:52:FE:0F:A6:81:B8:13:58:C7:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847ED24D1EB5135032E99ECA000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 20940 IP address blocks: 23.220.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:d1:eb:51:35:03:2e:99:ec:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=2d7e4870-bf25-438a-a25e-5648e6e590d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:4e:a6:ab:23:8e:30:65:4e:41:46:0b:29: a5:7d:31:1e:07:07:34:8b:c6:9f:ea:fa:99:67:4f: 59:47:d6:f2:6d:f5:af:e7:ba:1b:d7:22:b0:28:91: c1:bd:0d:35:93:27:80:1b:8c:b5:24:bd:03:4c:34: c5:cb:34:8d:b2:49:4f:99:17:f7:29:a9:3c:1b:25: ec:26:09:5a:16:f6:60:65:c7:56:8b:d0:f1:43:47: 2c:a3:cc:81:d8:60:6b:49:c4:76:f3:54:df:99:f6: 9b:90:bf:7b:6b:04:15:09:2a:bb:34:d4:42:5c:25: 3f:d1:92:de:83:82:44:81:1c:67:06:76:f8:af:0c: 86:66:45:b7:75:53:29:7e:13:64:d2:37:f3:1c:f7: 3b:f4:0e:da:70:69:21:cc:97:8f:99:70:9d:25:b9: bb:f9:31:3b:a1:66:b3:3f:99:3d:29:61:26:55:ec: a3:9b:87:fd:4f:90:29:2e:25:1c:7f:4e:36:37:39: 8e:f7:f0:73:71:af:b5:64:4b:f3:c8:47:e6:f6:84: 7d:95:f5:0e:1a:e3:1f:0d:3e:fa:c0:1c:0a:12:38: 5e:d0:f7:aa:38:40:91:43:7f:63:9d:0f:7d:7e:1e: 38:dc:3d:47:86:a5:81:fa:ee:7c:ba:3c:ac:9c:09: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:E9:77:34:20:EC:7D:86:60:52:FE:0F:A6:81:B8:13:58:C7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c6:a1:f6:c0:f5:9f:dd:16:9f:95:88:b5:7f:bf:90:01:bc: 06:d8:f7:ef:aa:b8:c8:a4:ac:51:8c:ab:ed:07:06:68:4c:40: e9:95:f8:79:b7:53:a3:44:6e:0e:36:28:8e:93:25:e4:be:77: ff:ad:ee:78:ad:1e:5d:20:93:55:37:07:49:5d:55:7c:5b:77: b6:3d:d0:12:80:e5:ea:00:75:a3:64:c7:c0:cf:82:5d:d3:b5: ca:dc:e7:54:11:25:fe:c5:90:f3:a2:f7:0e:ff:ea:1e:bd:b4: d4:64:40:77:04:d3:7d:30:61:6c:1a:9a:44:e6:02:fd:fe:e1: e7:38:12:99:19:cc:ab:38:0f:8a:ce:3a:1c:c6:ee:cf:06:17: 82:21:67:c3:59:80:e7:e1:1a:2a:f7:c8:01:f7:75:11:7c:e7: 88:0f:f0:e5:9c:ab:12:af:88:e7:db:9a:cf:3c:2f:84:4d:b6: 25:4e:93:1d:b1:0c:be:89:02:33:29:2a:65:1f:01:ce:a3:f2: 50:c1:07:ab:08:9c:01:ec:1d:70:2e:d0:11:13:06:08:9e:aa: bb:dc:bd:ef:a9:6e:36:35:b1:37:43:98:19:4b:52:13:74:8d: 1d:45:90:fd:b1:2c:18:9d:c2:26:8b:9c:f0:5c:98:99:04:52: c7:5a:70:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJNHrUTUDLpnsoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MmQ3ZTQ4NzAtYmYyNS00MzhhLWEyNWUtNTY0OGU2ZTU5MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2dOpqsjjjBlTkFGCymlfTEeBwc0i8af6vqZ Z09ZR9bybfWv57ob1yKwKJHBvQ01kyeAG4y1JL0DTDTFyzSNsklPmRf3Kak8GyXs JglaFvZgZcdWi9DxQ0cso8yB2GBrScR281TfmfabkL97awQVCSq7NNRCXCU/0ZLe g4JEgRxnBnb4rwyGZkW3dVMpfhNk0jfzHPc79A7acGkhzJePmXCdJbm7+TE7oWaz P5k9KWEmVeyjm4f9T5ApLiUcf042NzmO9/Bzca+1ZEvzyEfm9oR9lfUOGuMfDT76 wBwKEjhe0PeqOECRQ39jnQ99fh443D1HhqWB+u58ujysnAmz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAU6Xc0IOx9hmBS/g+mgbgTWMc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3NTBjOTMtYzA4Mi0z NjNmLTljZDctMDEwNzI5MGYwNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXGofbA9Z/dFp+ViLV/v5ABvAbY9++quMikrFGMq+0HBmhMQOmV+Hm3 U6NEbg42KI6TJeS+d/+t7nitHl0gk1U3B0ldVXxbd7Y90BKA5eoAdaNkx8DPgl3T tcrc51QRJf7FkPOi9w7/6h69tNRkQHcE030wYWwamkTmAv3+4ec4EpkZzKs4D4rO OhzG7s8GF4IhZ8NZgOfhGir3yAH3dRF854gP8OWcqxKviOfbms88L4RNtiVOkx2x DL6JAjMpKmUfAc6j8lDBB6sInAHsHXAu0BETBgieqrvcve+pbjY1sTdDmBlLUhN0 jR1FkP2xLBidwiaLnPBcmJkEUsdacEA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:25 2024 by rpki-client on console-fra.rpki-client.org