$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa File: 2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa (raw, json) Hash identifier: kpeWLArXkIUlbiC8/1ePSy2GoPleQImdl/AW2JQdVyc= Subject key identifier: 4C:7A:29:24:1F:7D:C1:DF:60:D2:8C:C2:6A:46:FD:BE:30:0E:67:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D99A08BBEA3A2BC29A9AD580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.207.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:9a:08:bb:ea:3a:2b:c2:9a:9a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=1b3f561a-7e8c-4d10-8522-618f6581e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:c8:58:71:da:58:19:f1:75:29:02:c4:cf: f9:85:cf:77:12:9c:bb:f6:89:bd:40:65:d0:7e:31: 94:51:78:b8:a5:47:32:ba:df:c4:ac:5d:18:bc:f0: 64:04:63:d8:61:82:d2:67:ba:d2:06:1b:66:0e:c3: 1d:a9:06:16:51:72:f1:71:88:08:15:29:92:69:1f: cf:55:81:b6:c7:da:9b:9e:de:28:1d:14:e6:f2:bb: c7:5e:6d:ea:4a:4c:14:eb:8f:97:a5:8b:df:18:3d: c2:9d:65:3b:03:17:8a:56:0f:e2:e8:a0:bc:63:87: 1c:06:45:61:98:77:f4:74:88:81:a2:ef:ae:9b:33: 40:64:67:4e:5c:bc:73:80:12:e9:fa:8c:f0:73:4c: 9c:bd:71:43:26:71:39:8a:65:56:2f:8e:e8:e1:78: 29:aa:b4:c5:9e:ee:57:9d:20:3d:df:c6:06:90:d4: 21:2d:97:d3:d1:f7:af:cf:3e:70:3c:44:14:20:f2: 91:0d:57:cc:0e:1f:b7:cb:b1:b8:eb:0d:90:11:e9: 00:a9:76:de:8c:fb:16:15:43:27:b6:8f:9e:84:9a: 65:91:a0:df:bd:b7:4b:dd:84:c1:4d:38:2c:74:a8: 1b:cd:8a:91:87:87:da:36:12:15:31:3a:27:0c:93: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:29:24:1F:7D:C1:DF:60:D2:8C:C2:6A:46:FD:BE:30:0E:67:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9a:ad:e9:4a:b8:0d:08:12:df:d2:6e:b1:96:ad:61:11:07: c5:ac:a4:10:1e:bd:83:47:59:af:ca:21:7a:2f:bb:90:7d:af: 44:4a:57:14:6d:be:c3:52:48:f3:a4:ba:d1:bd:e8:db:a5:ed: 5d:75:ec:bd:00:19:14:65:7c:a7:98:03:4e:66:7c:32:e6:be: 86:b7:2f:ec:bf:e6:c6:85:43:8e:d2:a8:47:40:47:14:80:28: ca:2f:ba:e0:9e:46:fe:07:c0:a2:08:12:4b:07:17:4e:7e:d0: a2:cf:b6:7f:cc:7c:6a:c4:76:3e:e8:9d:90:f3:45:70:bc:0b: 05:8a:2f:cd:83:bf:74:76:f0:3e:51:91:77:4d:c5:e1:2c:56: 20:d3:e5:76:5d:98:e6:24:9a:d0:35:ce:a9:b7:76:c5:af:a8: da:a4:5b:1b:44:47:dc:cd:4b:e7:0b:55:3b:57:55:b9:d1:8f: 24:95:d3:5f:19:d6:55:1d:19:b6:51:99:f2:75:2d:e0:c8:dd: fd:ac:f0:ef:b2:41:e4:dc:ce:12:de:e2:a7:e8:61:2d:a1:a9: 77:29:ad:27:57:74:44:85:78:b0:34:a8:ea:f0:cc:83:9e:d0: 11:10:dc:3e:66:78:4c:3c:92:a3:66:76:f0:a8:6a:4e:f5:e1: 30:2a:42:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmgi76jorwpqa1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MWIzZjU2MWEtN2U4Yy00ZDEwLTg1MjItNjE4ZjY1ODFlMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl53IWHHaWBnxdSkCxM/5hc93Epy79om9QGXQ fjGUUXi4pUcyut/ErF0YvPBkBGPYYYLSZ7rSBhtmDsMdqQYWUXLxcYgIFSmSaR/P VYG2x9qbnt4oHRTm8rvHXm3qSkwU64+XpYvfGD3CnWU7AxeKVg/i6KC8Y4ccBkVh mHf0dIiBou+umzNAZGdOXLxzgBLp+ozwc0ycvXFDJnE5imVWL47o4XgpqrTFnu5X nSA938YGkNQhLZfT0fevzz5wPEQUIPKRDVfMDh+3y7G46w2QEekAqXbejPsWFUMn to+ehJplkaDfvbdL3YTBTTgsdKgbzYqRh4faNhIVMTonDJP02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx6KSQffcHfYNKMwmpG/b4wDmdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUzYTMyNzMtNTEwMC0z Y2NhLWFhOGUtY2JmYjBhMTc0ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2arelKuA0IEt/SbrGWrWERB8WspBAevYNHWa/KIXovu5B9r0RKVxRt vsNSSPOkutG96Nul7V117L0AGRRlfKeYA05mfDLmvoa3L+y/5saFQ47SqEdARxSA KMovuuCeRv4HwKIIEksHF05+0KLPtn/MfGrEdj7onZDzRXC8CwWKL82Dv3R28D5R kXdNxeEsViDT5XZdmOYkmtA1zqm3dsWvqNqkWxtER9zNS+cLVTtXVbnRjySV018Z 1lUdGbZRmfJ1LeDI3f2s8O+yQeTczhLe4qfoYS2hqXcprSdXdESFeLA0qOrwzIOe 0BEQ3D5meEw8kqNmdvCoak714TAqQpI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:40 2024 by rpki-client on console-ams.rpki-client.org