$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29f9e517-4ac8-3b17-a90c-3054d9c64c36.roa File: 29f9e517-4ac8-3b17-a90c-3054d9c64c36.roa (raw, json) Hash identifier: phiLPrTRelnVLNGgLS5Paml09HUXknHoX8OlbnX9QIA= Subject key identifier: 8A:97:E4:FA:15:93:32:7E:66:7E:B2:7B:43:23:0C:A2:54:A6:B3:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F5AE147CC42EF2A52A580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29f9e517-4ac8-3b17-a90c-3054d9c64c36.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.214.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:5a:e1:47:cc:42:ef:2a:52:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=8bec6660-7fbf-4139-8873-2152dd5b1b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:71:61:68:9b:02:e4:c2:49:94:86:e1:62: 87:c4:83:9b:b1:11:65:4b:6d:fa:4d:19:3b:61:ed: 36:71:b5:04:dd:db:b8:94:a0:57:0a:b1:ac:c1:a6: 13:c2:04:46:0b:4f:6a:cc:c3:7c:0d:e1:66:1c:a9: bd:b4:b9:ba:c7:b5:c2:08:0e:ed:f8:d1:ce:9e:15: 94:38:e6:c7:22:36:18:8f:a7:87:5a:f8:b0:f5:84: 4e:b1:ee:25:00:b0:ef:b4:c4:20:66:8a:c1:c9:ef: 50:b9:37:b2:6a:44:4d:d6:f5:de:e8:c6:6d:b5:0c: 72:e5:aa:e5:38:b4:b7:a0:8e:7a:b3:4e:89:b6:2f: f7:fa:91:b8:5e:6a:c2:01:6e:9b:a6:80:71:85:36: ed:65:ba:32:ec:97:be:ad:2f:c1:b1:d3:fb:e1:58: 33:a1:99:65:8d:bd:4f:3d:74:ce:52:b9:ef:37:f5: d5:40:d7:ef:48:b6:7a:31:77:4d:42:62:f5:2f:c9: 5a:3e:ba:51:0f:7a:fc:a6:ee:89:4c:56:11:4f:13: e4:58:a9:8c:de:6f:7a:82:c1:a8:eb:99:83:17:61: 87:a2:1e:b6:a2:f4:9c:af:c9:8b:0d:5d:72:64:43: 53:6e:6a:88:b7:a9:47:c8:6f:93:a7:31:62:e7:9b: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:E4:FA:15:93:32:7E:66:7E:B2:7B:43:23:0C:A2:54:A6:B3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29f9e517-4ac8-3b17-a90c-3054d9c64c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:4a:da:f1:1d:6c:8c:49:10:88:23:90:53:36:89:0b:10: af:cd:aa:40:b4:6d:99:12:26:c7:07:87:02:cb:6c:6f:7d:db: da:c8:fe:7b:b2:85:bd:99:c7:5e:9b:e6:b5:76:64:49:f1:05: 77:7f:e8:0b:96:b4:7d:eb:e5:21:45:95:c9:ca:f8:70:ab:d5: 43:9f:67:6c:ae:7b:40:2d:07:30:8a:00:3c:ca:fc:48:99:a0: 1b:59:12:31:9e:48:cc:30:09:06:cb:e9:00:05:e3:dd:5b:08: ee:3e:1a:28:c1:b7:1c:19:2e:fc:c5:77:e2:25:8a:24:16:e8: 16:c2:6d:d5:01:b6:83:08:89:4c:3b:6b:c8:73:c0:6e:ac:00: 5b:5a:6a:a6:51:7b:ab:a6:39:42:d0:09:55:ed:09:b6:a2:32: 36:ab:a3:58:b7:ff:7e:2d:85:04:e1:8e:2a:5b:fd:63:d2:21: db:81:4c:1e:2a:a2:30:d8:6d:d5:8a:46:9e:a4:74:ed:5b:ea: 72:71:c0:e0:a7:b6:30:e7:8a:00:ad:19:35:76:c0:1d:2b:a0: 9a:e6:6e:3a:07:9d:2a:86:06:f6:ea:bb:14:02:7d:6c:bf:43: a0:c6:72:57:9a:43:9c:b5:47:89:3f:14:c5:44:72:5d:0f:81: 61:8c:6e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1rhR8xC7ypSpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk OGJlYzY2NjAtN2ZiZi00MTM5LTg4NzMtMjE1MmRkNWIxYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBxYWibAuTCSZSG4WKHxIObsRFlS236TRk7 Ye02cbUE3du4lKBXCrGswaYTwgRGC09qzMN8DeFmHKm9tLm6x7XCCA7t+NHOnhWU OObHIjYYj6eHWviw9YROse4lALDvtMQgZorBye9QuTeyakRN1vXe6MZttQxy5arl OLS3oI56s06Jti/3+pG4XmrCAW6bpoBxhTbtZboy7Je+rS/BsdP74VgzoZlljb1P PXTOUrnvN/XVQNfvSLZ6MXdNQmL1L8laPrpRD3r8pu6JTFYRTxPkWKmM3m96gsGo 65mDF2GHoh62ovScr8mLDV1yZENTbmqIt6lHyG+TpzFi55vzlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqX5PoVkzJ+Zn6ye0MjDKJUprMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlmOWU1MTctNGFjOC0z YjE3LWE5MGMtMzA1NGQ5YzY0YzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZAStrxHWyMSRCII5BTNokLEK/NqkC0bZkSJscHhwLLbG9929rI/nuy hb2Zx16b5rV2ZEnxBXd/6AuWtH3r5SFFlcnK+HCr1UOfZ2yue0AtBzCKADzK/EiZ oBtZEjGeSMwwCQbL6QAF491bCO4+GijBtxwZLvzFd+IliiQW6BbCbdUBtoMIiUw7 a8hzwG6sAFtaaqZRe6umOULQCVXtCbaiMjaro1i3/34thQThjipb/WPSIduBTB4q ojDYbdWKRp6kdO1b6nJxwOCntjDnigCtGTV2wB0roJrmbjoHnSqGBvbquxQCfWy/ Q6DGcleaQ5y1R4k/FMVEcl0PgWGMbsk= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:45 2024 by rpki-client on console-ams.rpki-client.org