$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2ccaee-8ea2-3a6e-8f94-3dd4ff385647.roa File: 3f2ccaee-8ea2-3a6e-8f94-3dd4ff385647.roa (raw, json) Hash identifier: CiehDcb/Vx1i/9ImRJw7GOmVi7Beqrn+ZJiVzvwRb6U= Subject key identifier: D9:49:EA:21:30:1C:F7:2E:1D:3A:30:F3:B5:58:AC:C1:46:DC:91:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64BA0081826CDF3493A580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2ccaee-8ea2-3a6e-8f94-3dd4ff385647.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.213.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:ba:00:81:82:6c:df:34:93:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=b380a733-eb96-4fd1-b760-9dc5a3eff899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:10:df:be:89:1c:ce:4d:90:eb:c6:fb:f7: 0d:d7:db:58:a6:12:39:2c:ca:06:e4:e4:a3:8d:d0: 87:c9:b3:9e:2a:2d:df:94:5c:fd:11:fe:72:f0:90: 6c:60:e6:ce:d5:b4:cc:26:23:d9:6f:7f:85:58:75: 1e:c5:d2:99:33:e7:ed:db:1f:18:82:5d:f5:fb:95: b4:84:70:46:d8:fd:30:37:67:8f:fc:ee:a4:62:44: 01:3a:75:b9:6e:76:27:3b:52:4e:21:4a:95:f5:eb: dd:5f:69:5b:36:bb:e9:b2:bc:8f:81:11:bc:7d:04: 71:96:f5:01:fc:67:70:1b:39:ed:0f:e1:96:fc:7d: 75:b4:1f:2d:3e:07:39:c5:48:de:e2:42:e7:cd:93: bd:d8:3a:b3:c0:b9:27:f3:8f:0c:dd:e9:e5:f5:b6: 2f:a8:08:5c:1f:9f:24:08:4e:04:b3:aa:55:53:a3: 14:51:88:4f:09:69:9d:6e:5a:6a:6d:19:39:87:8b: d9:1a:1d:67:c6:0d:25:aa:61:80:2f:03:ca:b9:fe: 46:d1:2f:68:45:d6:5a:15:db:bd:32:6e:74:5e:57: 54:5c:60:1b:2e:38:a0:b2:01:ac:c8:10:34:84:22: d1:f7:cb:42:5d:69:19:39:2e:dd:1b:d8:cf:e0:b3: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:EA:21:30:1C:F7:2E:1D:3A:30:F3:B5:58:AC:C1:46:DC:91:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2ccaee-8ea2-3a6e-8f94-3dd4ff385647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:59:87:d6:ab:fa:f3:9e:8b:cd:99:d4:3b:37:05:6e:09:81: 77:89:30:d6:16:8f:a6:90:86:39:d2:e2:32:79:1b:7c:40:ea: 1b:be:e1:05:b9:bc:c5:ee:11:b2:61:7e:0b:0e:d5:10:21:f5: 7d:da:d3:45:50:c6:74:ee:57:bd:5e:26:36:21:fc:96:cb:32: 53:a0:de:06:ce:27:d2:5b:23:83:57:c1:b3:b4:21:82:b8:7c: e2:9d:64:66:e2:cb:fb:59:5e:18:44:e8:cc:36:f3:cf:87:a0: 8d:18:44:9b:1a:00:f7:e8:52:4f:cf:4b:26:39:47:79:dd:02: 1f:94:6a:2e:92:83:ea:0d:57:0e:57:f6:e3:cb:df:36:06:43: ff:07:d4:e7:67:14:46:8d:dd:c0:9b:9d:ef:37:d7:c9:ad:54: 13:88:20:92:5e:a6:42:aa:33:1a:4b:cb:59:04:4c:0f:c9:f5: 4f:8c:97:27:b2:eb:96:f2:98:14:24:e4:8e:9d:f2:5f:49:10: 32:be:23:d9:46:d7:fd:f3:46:22:8b:d4:b7:e4:b1:df:5d:69: 53:c5:4d:c8:4b:01:1c:4b:98:a5:60:93:05:ef:ba:f3:1a:c7: fc:70:62:3e:2f:c1:6f:73:9c:20:f6:29:12:24:80:16:13:f9: de:fb:8c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZLoAgYJs3zSTpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YjM4MGE3MzMtZWI5Ni00ZmQxLWI3NjAtOWRjNWEzZWZmODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6YQ376JHM5NkOvG+/cN19tYphI5LMoG5OSj jdCHybOeKi3flFz9Ef5y8JBsYObO1bTMJiPZb3+FWHUexdKZM+ft2x8Ygl31+5W0 hHBG2P0wN2eP/O6kYkQBOnW5bnYnO1JOIUqV9evdX2lbNrvpsryPgRG8fQRxlvUB /GdwGzntD+GW/H11tB8tPgc5xUje4kLnzZO92DqzwLkn848M3enl9bYvqAhcH58k CE4Es6pVU6MUUYhPCWmdblpqbRk5h4vZGh1nxg0lqmGALwPKuf5G0S9oRdZaFdu9 Mm50XldUXGAbLjigsgGsyBA0hCLR98tCXWkZOS7dG9jP4LMMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlJ6iEwHPcuHTow87VYrMFG3JHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YyY2NhZWUtOGVhMi0z YTZlLThmOTQtM2RkNGZmMzg1NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlZh9ar+vOei82Z1Ds3BW4JgXeJMNYWj6aQhjnS4jJ5G3xA6hu+4QW5 vMXuEbJhfgsO1RAh9X3a00VQxnTuV71eJjYh/JbLMlOg3gbOJ9JbI4NXwbO0IYK4 fOKdZGbiy/tZXhhE6Mw288+HoI0YRJsaAPfoUk/PSyY5R3ndAh+Uai6Sg+oNVw5X 9uPL3zYGQ/8H1OdnFEaN3cCbne8318mtVBOIIJJepkKqMxpLy1kETA/J9U+Mlyey 65bymBQk5I6d8l9JEDK+I9lG1/3zRiKL1Lfksd9daVPFTchLARxLmKVgkwXvuvMa x/xwYj4vwW9znCD2KRIkgBYT+d77jDE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:39 2024 by rpki-client on console-fra.rpki-client.org