$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa File: 3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa (raw, json) Hash identifier: tj+SlhJOgLXBbnffdgobL4nMYL28QaufjgpPAYSntOk= Subject key identifier: 8D:46:5C:84:00:60:53:11:46:AD:07:CE:48:23:96:66:44:41:E7:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DF2F60656D199F17514507EB Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 16625 IP address blocks: 23.217.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:60:65:6d:19:9f:17:51:45:07:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=fe645389-4386-43a6-bd77-1fcd2dfa78da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:8e:2c:f0:2d:da:64:3c:aa:f8:c3:85:41: 0c:d3:4a:82:72:7b:6f:ec:c4:c2:7a:84:6a:dd:e6: 8d:75:22:84:a2:75:aa:11:e3:56:1a:7e:39:b6:0a: 99:56:32:57:26:ca:3f:6e:3a:51:5d:61:86:ea:c5: 4e:86:72:c2:20:81:39:ca:8c:59:22:74:cb:fe:3c: d9:1a:8b:29:37:c2:e7:e9:58:41:da:5b:c8:57:3e: e3:59:ec:65:cd:f9:7d:27:3b:99:59:f3:44:23:46: 86:ba:0d:f4:af:d4:b9:81:06:a1:88:82:e5:57:af: 82:e6:28:a5:ee:27:9b:c1:d6:11:86:4b:5f:6c:4d: a8:d7:68:7a:3c:49:b2:f7:98:3d:51:6b:74:41:61: 49:98:9c:a5:90:f4:9c:a3:e4:e3:50:6f:24:84:3e: c0:3e:95:93:40:1f:e8:fb:b2:44:c0:62:cf:8e:d9: f8:5b:a5:40:d4:90:e7:2f:5e:25:b1:2c:19:02:e2: e0:d2:bf:6f:fc:29:b9:4a:98:19:98:cc:de:4e:01: cc:34:9d:e8:ec:96:d6:3d:0b:66:de:a5:9f:cb:41: 21:97:a9:7f:3c:d4:c7:15:24:44:b9:dd:cc:16:dc: 46:5e:0e:c5:54:ab:f4:e6:cc:26:19:fd:c5:e7:d9: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:5C:84:00:60:53:11:46:AD:07:CE:48:23:96:66:44:41:E7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:41:e4:bb:a4:f8:10:ce:2c:32:65:f9:09:2c:4e:2e:cc:c4: 4e:c2:69:a8:84:89:bc:eb:0a:ce:66:df:b0:bc:77:28:af:76: 15:10:26:cb:22:24:b9:68:2d:1e:8e:8f:c4:5c:5f:07:ac:7f: 85:bf:5a:31:0f:0a:fa:22:6d:e4:a3:d7:eb:e3:d6:21:dc:d5: d7:f7:3c:d1:8d:60:c6:99:40:61:de:af:ac:f9:22:43:07:d6: 44:47:fd:c3:28:3b:f0:8b:0e:f7:eb:d7:d9:5b:88:ad:c2:ba: bf:e4:dc:92:dd:88:ef:27:f4:59:f7:92:29:da:1a:fa:bf:ec: ef:d8:1f:ab:2c:c5:82:e3:84:92:f5:7f:bb:dc:e7:38:70:fb: cc:cb:84:0a:7f:7f:55:f0:40:fd:bf:bd:13:0b:a7:69:e6:ea: 85:05:f3:90:b0:66:1c:91:b2:5c:49:a5:69:7d:15:c7:a9:a8: e2:38:60:2a:15:f4:ed:70:cb:e3:f8:4e:d3:91:84:bc:ef:d8: 65:8e:58:ed:c8:a1:2f:55:d1:3a:f2:5d:f0:48:c6:4e:9b:03: 58:43:87:5d:4e:f7:a6:ff:13:16:b4:ec:fe:89:8f:0e:43:91: 71:ef:ad:b0:bc:f2:fe:eb:19:57:f7:cb:52:b0:4b:9c:c8:43: 20:be:b3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL2BlbRmfF1FFB+swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk ZmU2NDUzODktNDM4Ni00M2E2LWJkNzctMWZjZDJkZmE3OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuyOLPAt2mQ8qvjDhUEM00qCcntv7MTCeoRq 3eaNdSKEonWqEeNWGn45tgqZVjJXJso/bjpRXWGG6sVOhnLCIIE5yoxZInTL/jzZ GospN8Ln6VhB2lvIVz7jWexlzfl9JzuZWfNEI0aGug30r9S5gQahiILlV6+C5iil 7iebwdYRhktfbE2o12h6PEmy95g9UWt0QWFJmJylkPSco+TjUG8khD7APpWTQB/o +7JEwGLPjtn4W6VA1JDnL14lsSwZAuLg0r9v/Cm5SpgZmMzeTgHMNJ3o7JbWPQtm 3qWfy0Ehl6l/PNTHFSREud3MFtxGXg7FVKv05swmGf3F59lOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1GXIQAYFMRRq0HzkgjlmZEQeevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MxNjMxYjItODE5Mi0z YWE2LWEwYzUtN2ZlMThhMGVmNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBB5Luk+BDOLDJl+QksTi7MxE7CaaiEibzrCs5m37C8dyivdhUQJssi JLloLR6Oj8RcXwesf4W/WjEPCvoibeSj1+vj1iHc1df3PNGNYMaZQGHer6z5IkMH 1kRH/cMoO/CLDvfr19lbiK3Cur/k3JLdiO8n9Fn3kinaGvq/7O/YH6ssxYLjhJL1 f7vc5zhw+8zLhAp/f1XwQP2/vRMLp2nm6oUF85CwZhyRslxJpWl9FcepqOI4YCoV 9O1wy+P4TtORhLzv2GWOWO3IoS9V0TryXfBIxk6bA1hDh11O96b/Exa07P6Jjw5D kXHvrbC88v7rGVf3y1KwS5zIQyC+s7o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:31 2024 by rpki-client on console-fra.rpki-client.org