$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa File: 25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa (raw, json) Hash identifier: cUKlUeBcenRINQk4IAyjUZjr98ABHrw6M6BEmUy6u7w= Subject key identifier: 8C:5B:FB:01:9B:3C:A7:7C:37:3F:F4:4A:70:4A:C1:A6:B8:E1:DD:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584795168DCEF0DE33B04BF2BE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa Signing time: Fri 18 Oct 2024 13:00:41 +0000 ROA not before: Fri 18 Oct 2024 13:00:41 +0000 ROA not after: Thu 16 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.207.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:16:8d:ce:f0:de:33:b0:4b:f2:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 13:00:41 2024 GMT Not After : Jan 16 14:00:41 2025 GMT Subject: CN=fccb7259-3b50-4807-b070-ccf3988d26c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:29:48:ae:49:7e:0f:64:a1:c3:2e:57:00: 54:95:28:72:2b:ce:59:5d:ab:5f:cc:6a:17:15:81: 92:96:b7:c8:aa:85:44:4e:36:e9:f5:a3:80:40:e3: a7:54:e8:dc:fb:fd:c8:c1:d5:8d:62:f9:43:c0:79: a5:c1:13:07:0c:a4:a2:37:c1:70:0b:45:16:74:b1: 47:85:b4:b6:11:e7:b4:ce:f5:2a:d2:46:4a:a6:ad: b7:3e:6b:40:67:51:3a:4e:e6:8d:84:e7:e3:96:00: 4c:22:6d:2d:c8:03:7d:79:d5:74:01:68:5c:2f:b1: 58:c1:1c:d0:0a:81:ca:f7:19:fc:aa:4c:e3:79:b0: ce:54:0e:48:be:f3:81:cf:de:1b:81:7d:bd:58:79: 02:02:3c:30:c6:c4:38:ba:50:ab:ad:51:db:fa:9f: fb:80:34:08:ab:61:7a:8b:75:b4:d0:36:5a:be:9e: 7a:84:46:6e:c4:b3:da:db:4d:ed:cd:41:62:27:09: 35:51:59:99:a7:06:c3:00:c1:17:60:0a:0b:8c:6f: 40:21:84:af:0b:aa:3b:e4:db:6e:80:80:6a:3d:9a: ab:bb:ae:99:76:b6:c8:71:3a:02:11:c6:87:36:0d: 13:24:7a:4b:a9:1c:e7:74:8a:d5:00:7b:73:1b:82: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5B:FB:01:9B:3C:A7:7C:37:3F:F4:4A:70:4A:C1:A6:B8:E1:DD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:55:dd:e0:a7:21:8d:81:4a:af:fc:e6:35:8b:b5:3e:34:bb: 41:1c:1c:44:15:f3:42:7f:5a:aa:bb:4d:65:0c:66:62:c3:78: 07:8f:e8:92:4a:65:63:fb:9a:4f:93:aa:ab:30:fa:41:67:4d: 32:3f:86:64:33:35:19:1e:2a:99:96:7c:03:76:9e:36:e1:0b: b6:82:c8:46:95:e8:fb:80:14:0a:2a:24:60:46:46:bb:0d:67: f5:60:49:6b:9e:77:21:d7:61:b4:0e:5e:fa:52:cb:c4:65:a2: 4c:a3:44:ff:b7:81:6e:45:4f:3c:e6:5d:4e:f7:70:90:8f:0d: ba:49:14:7b:58:16:57:44:03:64:5d:d7:56:24:36:20:4c:ed: 78:51:6a:06:32:e9:e2:78:81:07:e1:04:86:b7:d0:e2:c3:e1: ce:f0:24:5e:77:6b:6c:7d:f2:26:fa:4d:86:82:ed:b5:5c:5f: 6f:0a:0b:83:56:63:f9:2b:e3:74:13:47:bc:0b:1e:f7:38:8e: 8b:2e:9e:8c:8e:12:3e:75:d0:5a:a0:e1:d4:3e:df:fc:4a:83: 9f:19:8e:30:68:51:35:d1:8a:9c:88:d7:91:be:e9:21:6d:f2: ca:3a:76:7d:58:9b:8b:64:39:dc:66:fd:84:80:c5:3d:5b:34: f6:b3:fd:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFo3O8N4zsEvyvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmNjYjcyNTktM2I1MC00ODA3LWIwNzAtY2NmMzk4OGQyNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK0pSK5Jfg9kocMuVwBUlShyK85ZXatfzGoX FYGSlrfIqoVETjbp9aOAQOOnVOjc+/3IwdWNYvlDwHmlwRMHDKSiN8FwC0UWdLFH hbS2Eee0zvUq0kZKpq23PmtAZ1E6TuaNhOfjlgBMIm0tyAN9edV0AWhcL7FYwRzQ CoHK9xn8qkzjebDOVA5IvvOBz94bgX29WHkCAjwwxsQ4ulCrrVHb+p/7gDQIq2F6 i3W00DZavp56hEZuxLPa203tzUFiJwk1UVmZpwbDAMEXYAoLjG9AIYSvC6o75Ntu gIBqPZqru66ZdrbIcToCEcaHNg0TJHpLqRzndIrVAHtzG4K4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxb+wGbPKd8Nz/0SnBKwaa44d3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVlOWZlMWMtMzZhOC0z ZDkxLWFhYTgtYzgxM2EzYjQ2NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFV3eCnIY2BSq/85jWLtT40u0EcHEQV80J/Wqq7TWUMZmLDeAeP6JJK ZWP7mk+Tqqsw+kFnTTI/hmQzNRkeKpmWfAN2njbhC7aCyEaV6PuAFAoqJGBGRrsN Z/VgSWuedyHXYbQOXvpSy8RlokyjRP+3gW5FTzzmXU73cJCPDbpJFHtYFldEA2Rd 11YkNiBM7XhRagYy6eJ4gQfhBIa30OLD4c7wJF53a2x98ib6TYaC7bVcX28KC4NW Y/kr43QTR7wLHvc4josunoyOEj510Fqg4dQ+3/xKg58ZjjBoUTXRipyI15G+6SFt 8so6dn1Ym4tkOdxm/YSAxT1bNPaz/YQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:28 2024 by rpki-client on console-fra.rpki-client.org