$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa File: 411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa (raw, json) Hash identifier: CYcndH6Vf0DDqi9SbtF9G1+7SDU5gBJ8BEaIGHVir0M= Subject key identifier: D8:CC:EB:89:8E:AC:D3:3B:AF:75:47:87:8B:81:A6:CF:34:6C:01:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847DC64BDFC38D518E7702D2F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 20940 IP address blocks: 23.209.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:bd:fc:38:d5:18:e7:70:2d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=d34ee3eb-fbae-46ea-946c-2aa6e8d1363a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:eb:be:2f:92:ad:ca:65:72:d9:f6:7b:98: 5a:3e:40:ed:15:5d:ee:9a:5f:a2:54:9a:2c:17:9e: f6:78:62:65:cf:db:cb:cc:a1:fa:cc:3c:57:9f:d5: 40:d3:c1:16:8f:36:ac:1d:0f:5a:df:fd:06:cd:90: e4:2f:b0:d5:28:3b:9f:b9:41:f2:63:7d:c9:7f:d0: 08:3e:e8:9f:f1:ed:54:47:23:b2:f1:64:fe:8d:2c: 57:a4:75:ad:94:76:51:b9:cd:d1:bd:28:6a:04:bb: dd:9f:38:86:4a:7d:0b:0b:7e:1b:26:04:60:0f:c6: c8:26:0e:a1:7d:09:70:dc:b2:af:a9:27:f0:a2:f9: e4:3d:6c:4c:fd:43:f8:40:99:78:77:24:63:66:a7: 78:19:21:5e:0f:1a:48:f9:67:80:24:f3:af:d9:51: b8:d1:92:c2:33:99:64:61:5a:9d:1d:6d:e7:3d:e2: c8:3d:a6:46:a7:18:58:3c:25:7b:f9:8e:8b:c8:da: c0:ab:0d:96:cd:32:29:dd:9d:5a:a8:65:92:11:db: 12:1f:b2:71:38:25:ce:ff:26:2b:2a:85:06:a2:65: 42:7d:ec:20:d3:a5:5c:2b:09:a4:19:c9:e9:9d:ad: 68:46:84:b4:09:7b:64:e2:af:8d:db:5f:8f:6b:3c: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CC:EB:89:8E:AC:D3:3B:AF:75:47:87:8B:81:A6:CF:34:6C:01:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fd:e5:74:75:91:19:88:99:a7:09:ee:47:9b:ae:8c:09:cc: 74:66:d8:16:16:9c:ab:16:f2:3c:3d:f9:9c:3a:4c:d0:18:35: 22:3e:9a:f4:e7:71:e3:a6:ce:16:65:1e:64:94:1f:14:d3:c6: 74:8e:3e:2f:b5:e8:d1:41:d5:49:54:03:54:40:2a:eb:fa:d8: f3:d4:a4:9d:df:99:df:fc:f6:bb:d2:c6:03:a8:e9:4e:86:44: 92:ab:ae:0f:1e:7f:fa:3d:5c:ef:f3:64:31:28:56:49:cb:c4: f5:47:8c:d4:87:ba:4c:78:32:4e:90:41:65:9b:3f:a9:4b:50: 0c:74:b0:1d:d9:48:28:6d:d6:4c:73:91:84:bd:37:cd:92:3d: e1:11:38:74:15:a8:7f:45:a1:aa:f8:dd:1f:58:6a:93:7d:58: d2:67:9c:cf:35:fc:a5:69:df:c7:c0:d5:63:0f:ce:c5:d2:66: ae:8d:49:cc:d0:24:1d:41:44:e4:98:a7:53:dc:be:91:75:00: d8:c3:49:b8:90:10:33:36:55:b0:25:6e:70:cd:4d:9f:82:a5: 2a:09:4f:15:d3:74:bd:07:6f:98:6a:a4:d5:82:92:a8:69:0f: 5d:72:91:0a:19:59:0b:42:10:88:4d:83:40:ee:da:be:13:f5: 30:b5:1d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZL38ONUY53AtLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk ZDM0ZWUzZWItZmJhZS00NmVhLTk0NmMtMmFhNmU4ZDEzNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/rvi+Srcplctn2e5haPkDtFV3uml+iVJos F572eGJlz9vLzKH6zDxXn9VA08EWjzasHQ9a3/0GzZDkL7DVKDufuUHyY33Jf9AI Puif8e1URyOy8WT+jSxXpHWtlHZRuc3RvShqBLvdnziGSn0LC34bJgRgD8bIJg6h fQlw3LKvqSfwovnkPWxM/UP4QJl4dyRjZqd4GSFeDxpI+WeAJPOv2VG40ZLCM5lk YVqdHW3nPeLIPaZGpxhYPCV7+Y6LyNrAqw2WzTIp3Z1aqGWSEdsSH7JxOCXO/yYr KoUGomVCfewg06VcKwmkGcnpna1oRoS0CXtk4q+N21+Pazy1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjM64mOrNM7r3VHh4uBps80bAHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDExZjZhMjktMGQ2YS0z MzY3LTlmMjYtNzczY2JlMmRkNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX95XR1kRmImacJ7kebrowJzHRm2BYWnKsW8jw9+Zw6TNAYNSI+mvTn ceOmzhZlHmSUHxTTxnSOPi+16NFB1UlUA1RAKuv62PPUpJ3fmd/89rvSxgOo6U6G RJKrrg8ef/o9XO/zZDEoVknLxPVHjNSHukx4Mk6QQWWbP6lLUAx0sB3ZSCht1kxz kYS9N82SPeEROHQVqH9Foar43R9YapN9WNJnnM81/KVp38fA1WMPzsXSZq6NSczQ JB1BROSYp1PcvpF1ANjDSbiQEDM2VbAlbnDNTZ+CpSoJTxXTdL0Hb5hqpNWCkqhp D11ykQoZWQtCEIhNg0Du2r4T9TC1HeY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:22 2024 by rpki-client on console-ams.rpki-client.org