$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f6efd5d-3727-33a9-9401-bc7bb5f920c7.roa File: 3f6efd5d-3727-33a9-9401-bc7bb5f920c7.roa (raw, json) Hash identifier: YaNhClLUfaw/9ttHLDDkLc2XmDKXb6gXD+Uf3cbbhKI= Subject key identifier: A9:64:66:43:25:86:34:33:77:9E:A6:72:04:B1:D0:69:CA:C9:0D:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1C6EA3310F14D21D3D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f6efd5d-3727-33a9-9401-bc7bb5f920c7.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.210.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:1c:6e:a3:31:0f:14:d2:1d:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=59cb617a-09e6-40b4-a519-82e33600638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:0a:91:82:fe:3b:d4:09:75:33:d9:3c:1b: 8d:eb:7b:6b:5c:03:9e:f1:fe:db:0c:69:17:b0:c7: 04:12:a7:77:cb:df:99:d5:40:c8:27:5c:35:47:d1: 50:2c:50:60:03:1b:b9:56:65:2e:17:95:4b:ec:d8: 54:96:5b:6d:da:21:d7:b8:a7:1f:07:a6:ad:c6:90: b4:2e:41:93:7e:2c:bb:44:fd:50:91:d7:21:76:b9: 44:8a:59:f2:00:17:28:cc:ac:2a:2c:ce:1b:ae:c5: eb:d6:2e:94:f9:42:b5:72:3b:0d:7b:cd:06:dd:33: 4e:be:af:cb:84:89:97:47:f9:db:24:2d:c4:ce:a3: f9:ac:86:12:7b:5e:01:b3:f1:b9:bf:df:2c:5e:25: 91:70:11:2c:65:cb:f0:58:01:b3:d8:72:e4:e7:07: c1:5d:20:af:da:88:d6:57:b8:51:64:78:96:9c:2d: 7e:d9:de:52:0a:04:56:c5:ec:71:3a:2e:d5:47:53: 7e:43:1c:c9:00:bc:3a:32:1f:25:98:a3:31:5b:97: 71:22:52:ee:19:fd:dd:d6:7f:35:ab:c5:cf:4c:a8: 1e:6e:68:52:4c:7e:89:3c:77:59:9e:a2:39:a7:85: 83:a8:e0:9c:79:6c:08:fc:95:ca:04:13:2c:ac:70: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:64:66:43:25:86:34:33:77:9E:A6:72:04:B1:D0:69:CA:C9:0D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f6efd5d-3727-33a9-9401-bc7bb5f920c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:66:94:66:da:72:6a:54:64:6b:b3:a0:dd:a0:f9:02:0f:eb: 6e:ae:7f:9f:e4:6b:eb:cb:d9:8a:14:2d:e8:36:02:78:bf:4b: 56:71:a0:8a:bf:7d:9b:f3:c9:c9:4b:1a:a9:52:4e:e8:c6:9c: ac:37:ac:6a:c5:10:6f:6b:a5:6d:89:78:55:34:a4:c3:fb:9f: c5:01:75:81:a6:57:04:01:92:6e:ea:9e:14:00:40:50:6c:5d: 00:32:44:e3:df:7f:6b:3c:1f:12:ae:6a:7a:cd:b4:b5:77:bd: a2:0b:f8:71:34:3e:a9:b4:a1:3f:d4:22:39:ce:fa:0c:48:b1: 02:69:99:c1:5c:56:e3:0a:12:fb:4e:a3:85:8e:74:f6:7d:a0: c2:29:09:40:b7:4e:26:21:c9:d9:62:33:64:9a:a0:10:52:38: 8f:c9:9b:7f:6e:4c:a0:36:34:2b:44:27:ff:55:67:9b:ed:c8: 10:f5:ee:7f:58:15:42:9f:7d:62:ef:7f:9b:c4:34:81:e2:50: 10:9f:ef:a4:59:0a:ce:d8:34:f6:ab:69:63:e2:d2:1c:90:5b: f0:03:ca:43:19:bc:12:d4:c1:61:d5:41:ce:41:cb:c4:ea:cf: da:37:92:4e:ca:35:11:28:8e:d4:cb:f1:d0:ff:2f:28:ba:92: 36:cf:93:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBxuozEPFNIdPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk NTljYjYxN2EtMDllNi00MGI0LWE1MTktODJlMzM2MDA2MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6IKkYL+O9QJdTPZPBuN63trXAOe8f7bDGkX sMcEEqd3y9+Z1UDIJ1w1R9FQLFBgAxu5VmUuF5VL7NhUlltt2iHXuKcfB6atxpC0 LkGTfiy7RP1QkdchdrlEilnyABcozKwqLM4brsXr1i6U+UK1cjsNe80G3TNOvq/L hImXR/nbJC3EzqP5rIYSe14Bs/G5v98sXiWRcBEsZcvwWAGz2HLk5wfBXSCv2ojW V7hRZHiWnC1+2d5SCgRWxexxOi7VR1N+QxzJALw6Mh8lmKMxW5dxIlLuGf3d1n81 q8XPTKgebmhSTH6JPHdZnqI5p4WDqOCceWwI/JXKBBMsrHDLZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlkZkMlhjQzd56mcgSx0GnKyQ0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y2ZWZkNWQtMzcyNy0z M2E5LTk0MDEtYmM3YmI1ZjkyMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtmlGbacmpUZGuzoN2g+QIP626uf5/ka+vL2YoULeg2Ani/S1ZxoIq/ fZvzyclLGqlSTujGnKw3rGrFEG9rpW2JeFU0pMP7n8UBdYGmVwQBkm7qnhQAQFBs XQAyROPff2s8HxKuanrNtLV3vaIL+HE0Pqm0oT/UIjnO+gxIsQJpmcFcVuMKEvtO o4WOdPZ9oMIpCUC3TiYhydliM2SaoBBSOI/Jm39uTKA2NCtEJ/9VZ5vtyBD17n9Y FUKffWLvf5vENIHiUBCf76RZCs7YNParaWPi0hyQW/ADykMZvBLUwWHVQc5By8Tq z9o3kk7KNREojtTL8dD/Lyi6kjbPk1Q= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:39 2024 by rpki-client on console-fra.rpki-client.org