$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa File: 24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa (raw, json) Hash identifier: I4EQM3V9/lqP6hHjGlFtVDHb7eq7jNA+Aq6KY/EVGkE= Subject key identifier: E5:AD:E8:6B:25:4B:8D:8F:2F:CA:8B:6E:CC:B8:6F:BE:13:CE:C8:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858475D40E0FAC9E6FA0603149480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 16625 IP address blocks: 23.210.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:e0:fa:c9:e6:fa:06:03:14:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=52913113-f322-45d7-96fc-efac72e40709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:e1:d8:0e:6d:52:34:56:f9:1f:bf:47:3b: 75:c5:5c:57:88:16:0a:23:29:5a:45:03:6a:33:cb: 02:02:3c:1e:91:cc:7c:1d:b1:e4:6a:0c:45:2d:57: d9:c2:bf:b9:64:f7:75:e4:6b:4d:1f:98:d5:8a:d5: 66:e8:fd:4e:ed:fa:73:42:ba:c5:2f:08:47:d7:c0: 43:83:6c:31:fa:3d:78:16:0b:76:a5:52:35:f8:f0: 74:ff:5c:b0:ae:e1:be:c7:a6:00:41:da:61:21:2c: 57:3c:82:59:db:c4:67:80:fa:99:25:80:2f:f0:44: 14:2c:70:24:81:17:6d:04:12:61:58:00:ee:e4:c8: 51:83:ca:3d:64:06:06:b2:50:68:97:4a:65:2f:ba: e0:19:03:d5:e5:26:5d:fb:40:5b:d7:82:a0:6e:67: e6:f5:7f:f6:de:d1:b1:a6:3c:09:93:c6:64:02:b5: d9:87:2c:66:03:59:4a:7f:7f:b7:28:96:19:9a:62: 03:da:3d:97:84:38:9c:2f:82:6c:7a:ce:69:c8:5d: 72:a2:6e:a2:9f:d0:c9:36:00:e3:5b:58:c4:9b:cb: 7b:77:85:25:4c:54:94:65:ce:af:77:f2:ce:7b:cf: 8e:d3:d7:44:d1:ba:98:b4:3e:65:06:9a:6a:31:71: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:E8:6B:25:4B:8D:8F:2F:CA:8B:6E:CC:B8:6F:BE:13:CE:C8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2b:db:dd:1b:e1:1e:19:c5:04:98:cc:8e:10:10:7e:ef:f2: 5c:c8:a5:a4:e2:58:64:f5:00:77:d7:88:0c:a4:c4:49:6c:6d: ef:a8:97:a8:c8:7d:7d:1d:f5:e3:cb:10:62:73:c9:b2:28:a8: f4:b2:6c:2f:ec:63:7b:4d:f0:b5:d3:82:de:47:53:1f:0b:42: c4:75:2c:e2:bd:a9:75:66:01:87:cf:14:69:60:29:4f:47:8e: 21:20:88:57:d9:95:c4:0f:23:5e:e4:26:54:6b:1b:9b:7c:87: f9:52:db:09:2b:80:0e:0e:f4:ef:86:3e:33:4c:92:66:f4:58: 5c:dd:1a:b0:c5:8b:8e:94:b8:2a:32:3a:08:ca:ee:a1:c3:34: 74:e1:17:23:bb:ff:54:19:da:1a:8d:08:0a:7a:41:88:37:3a: 27:ac:91:85:45:6e:93:c0:9a:76:f7:eb:2d:a7:67:dc:5c:2a: c9:f1:09:21:47:39:35:e4:49:a5:02:05:a4:9a:36:fa:d0:d1: 03:25:26:12:76:20:b3:68:99:bc:7d:d4:5b:ae:68:cc:41:c1: cc:b5:42:32:01:bc:b9:29:ba:1b:cf:c5:70:49:d6:31:dd:5f: a4:03:e4:45:c9:13:07:50:36:b7:21:0c:cb:8a:e4:43:7e:c9: c0:d8:82:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQOD6yeb6BgMUlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTI5MTMxMTMtZjMyMi00NWQ3LTk2ZmMtZWZhYzcyZTQwNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfvh2A5tUjRW+R+/Rzt1xVxXiBYKIylaRQNq M8sCAjwekcx8HbHkagxFLVfZwr+5ZPd15GtNH5jVitVm6P1O7fpzQrrFLwhH18BD g2wx+j14Fgt2pVI1+PB0/1ywruG+x6YAQdphISxXPIJZ28RngPqZJYAv8EQULHAk gRdtBBJhWADu5MhRg8o9ZAYGslBol0plL7rgGQPV5SZd+0Bb14Kgbmfm9X/23tGx pjwJk8ZkArXZhyxmA1lKf3+3KJYZmmID2j2XhDicL4Jses5pyF1yom6in9DJNgDj W1jEm8t7d4UlTFSUZc6vd/LOe8+O09dE0bqYtD5lBppqMXEJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWt6GslS42PL8qLbsy4b74TzshhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkMWM2MjUtNTU0ZC0z YzU1LWFmZjUtMmI4YWE5NDAzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcr290b4R4ZxQSYzI4QEH7v8lzIpaTiWGT1AHfXiAykxElsbe+ol6jI fX0d9ePLEGJzybIoqPSybC/sY3tN8LXTgt5HUx8LQsR1LOK9qXVmAYfPFGlgKU9H jiEgiFfZlcQPI17kJlRrG5t8h/lS2wkrgA4O9O+GPjNMkmb0WFzdGrDFi46UuCoy OgjK7qHDNHThFyO7/1QZ2hqNCAp6QYg3OieskYVFbpPAmnb36y2nZ9xcKsnxCSFH OTXkSaUCBaSaNvrQ0QMlJhJ2ILNombx91FuuaMxBwcy1QjIBvLkpuhvPxXBJ1jHd X6QD5EXJEwdQNrchDMuK5EN+ycDYgm8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:37 2024 by rpki-client on console-ams.rpki-client.org